last executing test programs:

8m30.860885502s ago: executing program 2 (id=188):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
eventfd(0xd33)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = open(0x0, 0x60840, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000540), &(0x7f00000003c0))
syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1)
syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0)

8m28.119315193s ago: executing program 2 (id=192):
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014"], 0x44}}, 0x0)

8m26.937170622s ago: executing program 2 (id=194):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket(0xf, 0x3, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000340)='./file1\x00', 0x200802, &(0x7f0000000380)=ANY=[], 0x9, 0x20e, &(0x7f00000003c0)="$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")
tgkill(r1, r1, 0xc)
syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x2800010, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRES8, @ANYRES32=r3, @ANYBLOB="ecc3d143f38e5089bb46440d7cecc06241098d0d33c579dbed485b93da00a1cc46d1572edb73005e819ebb4b611c6ab1005284c145c7e7e9e506f1a0865033cc45f0a3e925bd472f8d4f75661042aea035f583b06376f2998165e1e519f20ce36faa936693869b39da5d72d222ac430319680cceb2383f2b42420ada5ced4c9fb11d056b0686c19c8d6877289f92067ccef6cb15885eb5a1a0c4c84728f2929a031fcb0fe5e00b23a42e132cb52b4eabf65079c8743f0325fdce0fe8bbef415b98701043f91758a6189b337790e34e1fec86e2a3d107d7d09ebd74ef693e57fcf9a82586def90302eb15d8c3498f7ef734486b42422f759421"], 0x6, 0x22c, &(0x7f00000007c0)="$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")
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x7, 0x4, 0x0, &(0x7f0000001100)='GPL\x00', 0x2, 0x95, &(0x7f0000001140)=""/149}, 0x94)

8m23.462375865s ago: executing program 2 (id=199):
syz_open_dev$vbi(0x0, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000)

8m22.257852064s ago: executing program 2 (id=200):
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c00, 0x3)
write$binfmt_register(r1, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r3=>0x0})
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000891)

8m15.752385983s ago: executing program 2 (id=215):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, 0x0, &(0x7f0000000400))

7m59.620213805s ago: executing program 32 (id=215):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, 0x0, &(0x7f0000000400))

7m59.601943738s ago: executing program 3 (id=240):
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x7)
landlock_restrict_self(r1, 0x9)
landlock_restrict_self(r0, 0xa)
landlock_restrict_self(r0, 0x1)
landlock_restrict_self(r1, 0x6)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(r1, 0x5)
landlock_restrict_self(r1, 0xa)
r2 = landlock_create_ruleset(&(0x7f0000000200)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
link(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00')

7m59.256431737s ago: executing program 3 (id=243):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000)
openat(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x3ba9bfc6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000004c0)=0x1f6, 0x4)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800)

7m55.352063968s ago: executing program 3 (id=246):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0)

7m51.199521815s ago: executing program 3 (id=250):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
set_mempolicy(0x6, &(0x7f0000000000)=0x8000000000000001, 0xe0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='127.0.0.1:file0\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='nfs4\x00', 0x0, &(0x7f00000002c0)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00')
openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

7m49.150775864s ago: executing program 3 (id=252):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0)
flock(r3, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa00, 0x8)
flock(r5, 0x1)

7m43.788651696s ago: executing program 3 (id=261):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300)={0xffff5712, 0x3, 0xd}, 0xc)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
dup(0xffffffffffffffff)
syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1afa41)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1})
write$sndseq(r2, &(0x7f0000000140), 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae", 0x6f, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

7m27.813820384s ago: executing program 33 (id=261):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300)={0xffff5712, 0x3, 0xd}, 0xc)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
dup(0xffffffffffffffff)
syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1afa41)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1})
write$sndseq(r2, &(0x7f0000000140), 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae", 0x6f, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

25.239274197s ago: executing program 6 (id=979):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
socket$netlink(0x10, 0x3, 0xb)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

22.597676981s ago: executing program 5 (id=984):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
syz_emit_vhci(0x0, 0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$alg(0x26, 0x5, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, &(0x7f0000000580)="2ae0e710", 0x4, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000600)=0x6, 0x4)
recvmmsg(r1, &(0x7f0000000640), 0x0, 0x10162, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1\x00', 0x143042, 0x58)
fallocate(r2, 0x0, 0x9, 0x10001)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000040)=""/119)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

17.433818061s ago: executing program 6 (id=990):
open(0x0, 0x5ca00, 0x70)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

15.464853712s ago: executing program 6 (id=992):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0xe, 0x1, 0xb4, 0x8, 0x4000a2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x6, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x3ff, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x3, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000071, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xffffffff, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x80006, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfffb, 0xb, 0x1, 0xf1, 0x7, 0xab00060, 0x4, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x4001, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xfffffffe, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x1000002, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x495, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x3, 0x41, 0x1000, 0xee4b, 0x2000003, 0x0, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x57d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x7fff, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x3, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x6, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x7, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0xfffffffe, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b, 0x8, 0x270, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x7, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
syz_open_dev$video(&(0x7f00000004c0), 0x4, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x4, 0x2, 0x0, 'queue1\x00', 0xffff0000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

15.130117264s ago: executing program 5 (id=995):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setuid(0xee00)
r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0xc569, 0x10000, 0x2, 0x20e}, &(0x7f00000002c0), &(0x7f0000000000), 0x0)
r2 = creat(0x0, 0x0)
write$qrtrtun(r2, &(0x7f00000000c0)='f', 0x1)
syz_clone3(0x0, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

15.123767248s ago: executing program 4 (id=996):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000140)=0x8fa7, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000500)=0x6, 0x4)
setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000540)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000580)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000005c0)=0x4000000000000200, 0xe50fb6c50bc849c9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bind$packet(r4, &(0x7f00000007c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r4, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

15.09819636s ago: executing program 1 (id=997):
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0)

13.839229296s ago: executing program 5 (id=998):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x48040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xa4}}, 0x4040)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001240)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r2 = openat$comedi(0xffffff9c, &(0x7f000001a2c0)='/dev/comedi1\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f000001a300)={'comedi_bond\x00', [0x13, 0x4, 0x7fffffff, 0x9, 0x90000, 0x9, 0xed, 0x890, 0x3, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x77fd]})
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f000001a3c0))
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000480)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f000001a400)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

13.814196961s ago: executing program 0 (id=999):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)}, 0x400c0c0)
open(0x0, 0x80242, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000540))
fsmount(0xffffffffffffffff, 0x0, 0x0)
getcwd(&(0x7f0000000580)=""/220, 0xdc)

13.739909944s ago: executing program 4 (id=1000):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
socket$netlink(0x10, 0x3, 0xb)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

13.529993505s ago: executing program 1 (id=1001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004853}, 0x40804)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

13.337912064s ago: executing program 5 (id=1002):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(0x0, 0x800)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
dup(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x4000000)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0xc}, {0x5, 0xc}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040000)
keyctl$read(0xb, r3, &(0x7f00000004c0)=""/208, 0xd0)

12.031292821s ago: executing program 0 (id=1003):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000680), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000006c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x2d64, &(0x7f00000007c0)={0x0, 0xf809, 0x2, 0x0, 0x42}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f0000000940))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00), 0x0}, 0x20)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/bus/pci/devices\x00', 0x0, 0x0)

11.912321366s ago: executing program 5 (id=1004):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0xb334, 0x2003)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000280)={0x7, 0x9})
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff})
close_range(r5, 0xffffffffffffffff, 0x0)

9.857015455s ago: executing program 0 (id=1005):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setuid(0xee00)
r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0xc569, 0x10000, 0x2, 0x20e}, 0x0, &(0x7f0000000000), &(0x7f0000000000))
r2 = creat(0x0, 0x0)
write$qrtrtun(r2, &(0x7f00000000c0)='f', 0x1)
syz_clone3(0x0, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

9.538246889s ago: executing program 5 (id=1006):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet(0x2, 0x3, 0x4)
rseq(&(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x1b83, 0x2, 0x9a}, 0x2}, 0x20, 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0xd5)
openat$cgroup_ro(r3, &(0x7f0000000900)='cpu.stat\x00', 0x0, 0x0)

8.281499444s ago: executing program 0 (id=1007):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
socket$netlink(0x10, 0x3, 0xb)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

8.240879151s ago: executing program 4 (id=1008):
syz_emit_ethernet(0x76, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000580)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x9, 0x6, "b71e86", 0x8, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, {[], {0x4e21, 0x4e22, 0x8}}}}}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
syz_open_dev$loop(0x0, 0x2, 0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000940)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000009c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000a40), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000a80), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6)
listns(&(0x7f0000000b00)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, &(0x7f0000000b40)=[0x0], 0x1, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x61)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)

8.239819519s ago: executing program 1 (id=1009):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setuid(0xee00)
r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0xc569, 0x10000, 0x2, 0x20e}, &(0x7f00000002c0), &(0x7f0000000000), 0x0)
r2 = creat(0x0, 0x0)
write$qrtrtun(r2, &(0x7f00000000c0)='f', 0x1)
syz_clone3(0x0, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

7.209071394s ago: executing program 4 (id=1010):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0)
timer_create(0x0, 0x0, &(0x7f00000000c0))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
mount(0x0, &(0x7f0000000140)='./sys\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='fc', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='fc', 0x2)
write(0xffffffffffffffff, &(0x7f0000000440)='nn-0x3333333333333333:pn-0x4444444444444444', 0x2b)

6.625488968s ago: executing program 1 (id=1011):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x1, &(0x7f0000000040))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_vhci(0x0, 0x7)
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)

6.137206459s ago: executing program 6 (id=1012):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0xfff, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000000b00)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000002b40)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000002bc0)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004cc0)="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", 0x2000, &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d80)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000006dc0)='./file0\x00', 0x24181, 0x101)
write$khugepaged_scan(r5, &(0x7f0000006e00), 0x8)

6.099375809s ago: executing program 4 (id=1013):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r4)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000004500)={0x2020}, 0x2028)

5.027088758s ago: executing program 1 (id=1014):
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$sock(r0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000580)=0x9, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c000300ffffffffd439c5920800024000000001"], 0xfea1}}, 0x800)

4.673222682s ago: executing program 4 (id=1015):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000300)={0x1, 0x1, 0x0, 0x6, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd2c, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}}, 0x4044890)
keyctl$dh_compute(0x17, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={'sha384\x00'}})
syz_open_dev$usbmon(0x0, 0x0, 0x40400)
syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x1004808, &(0x7f0000000700)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=eaccenteuro,shortname=win95,codepage=866,iocharset=macroman,rodir,uni_xlate=0,shortname=win95,shortname=win95,utf8=0,rodir,rodir,uni_xlate=1,shortname=lower,shortname=winnt,\x00'], 0x21, 0x2b0, &(0x7f0000000800)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x143841, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='rdma.current\x00', 0x275a, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000b40)={'filter\x00', 0x1ac, '\x00'/428}, &(0x7f0000000ec0)=0x1d0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0x6a28, &(0x7f0000000f00)={0x0, 0x8ac, 0x20, 0x1, 0xf}, &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000))
r3 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0xc0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x282, 0x3, 0x32315258, 0x6, 0x0, 0x3, 0x1, 0xfeedcafa, 0x2, 0x1, 0x0, 0x5}})

3.485771072s ago: executing program 6 (id=1016):
r0 = open(&(0x7f0000000100)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000140)=""/224, 0xe0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xbd)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r4, &(0x7f0000001140)=""/102392, 0x18ff8)
unshare(0x8000000)
semop(0x0, &(0x7f000001a180)=[{0x4, 0xffd, 0x1800}], 0x1)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x8020000)

2.298645885s ago: executing program 1 (id=1017):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setuid(0xee00)
r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0xc569, 0x10000, 0x2, 0x20e}, 0x0, &(0x7f0000000000), &(0x7f0000000000))
r2 = creat(0x0, 0x0)
write$qrtrtun(r2, &(0x7f00000000c0)='f', 0x1)
syz_clone3(0x0, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

2.195930145s ago: executing program 0 (id=1018):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
socket$netlink(0x10, 0x3, 0xb)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

295.86µs ago: executing program 0 (id=1019):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000008c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000c}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000340), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0)

0s ago: executing program 6 (id=1020):
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x80, 0xbd}, 'port1\x00', 0x7b, 0x11cfa, 0xfffffff8, 0x8000008, 0x3, 0x32cbe4cd, 0x1, 0xfd})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r3 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}], 0x2c)

kernel console output (not intermixed with test programs):

ered disabled state
[  264.734229][ T7059] bridge_slave_0: entered allmulticast mode
[  264.735143][ T7059] bridge_slave_0: entered promiscuous mode
[  264.771665][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.771727][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.771801][ T7059] bridge_slave_1: entered allmulticast mode
[  264.803388][ T7059] bridge_slave_1: entered promiscuous mode
[  264.906962][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.120156][ T7208] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.212114][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.287117][ T7059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.308775][ T7059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.310914][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4
[  265.404484][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.657147][ T7059] team0: Port device team_slave_0 added
[  265.672444][ T7059] team0: Port device team_slave_1 added
[  265.821366][ T7222] FAULT_INJECTION: forcing a failure.
[  265.821366][ T7222] name failslab, interval 1, probability 0, space 0, times 0
[  265.821387][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.1.309 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  265.821401][ T7222] Tainted: [L]=SOFTLOCKUP
[  265.821404][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  265.821410][ T7222] Call Trace:
[  265.821415][ T7222]  <TASK>
[  265.821419][ T7222]  dump_stack_lvl+0xe8/0x150
[  265.821439][ T7222]  should_fail_ex+0x3eb/0x540
[  265.821454][ T7222]  should_failslab+0xa8/0x100
[  265.821469][ T7222]  __kmalloc_cache_noprof+0x9e/0x600
[  265.821485][ T7222]  ? tipc_nametbl_subscribe+0x280/0x11f0
[  265.821499][ T7222]  ? tipc_nametbl_subscribe+0x280/0x11f0
[  265.821515][ T7222]  tipc_nametbl_subscribe+0x280/0x11f0
[  265.821531][ T7222]  ? __kasan_kmalloc+0x93/0xb0
[  265.821544][ T7222]  ? __pfx_tipc_nametbl_subscribe+0x10/0x10
[  265.821557][ T7222]  ? __kmalloc_cache_noprof+0x148/0x600
[  265.821574][ T7222]  ? __raw_spin_lock_init+0x45/0x100
[  265.821590][ T7222]  tipc_sub_subscribe+0x3a5/0x690
[  265.821605][ T7222]  tipc_conn_rcv_sub+0x14f/0x370
[  265.821619][ T7222]  tipc_topsrv_kern_subscr+0x188/0x250
[  265.821629][ T7222]  ? tipc_own_addr+0x45/0x2a0
[  265.821641][ T7222]  ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10
[  265.821654][ T7222]  ? tipc_own_addr+0x45/0x2a0
[  265.821666][ T7222]  ? __asan_memset+0x22/0x50
[  265.821682][ T7222]  tipc_group_create+0x35b/0x4f0
[  265.821696][ T7222]  tipc_sk_join+0x25d/0x6a0
[  265.821709][ T7222]  ? __pfx_tipc_sk_join+0x10/0x10
[  265.821718][ T7222]  ? tipc_setsockopt+0x731/0x9a0
[  265.821735][ T7222]  ? __local_bh_enable_ip+0xd6/0x140
[  265.821752][ T7222]  tipc_setsockopt+0x73e/0x9a0
[  265.821769][ T7222]  ? __pfx_tipc_setsockopt+0x10/0x10
[  265.821784][ T7222]  ? aa_sock_opt_perm+0x142/0x1e0
[  265.821801][ T7222]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  265.821811][ T7222]  ? __pfx_tipc_setsockopt+0x10/0x10
[  265.821827][ T7222]  do_sock_setsockopt+0x17c/0x1b0
[  265.821841][ T7222]  __x64_sys_setsockopt+0x13d/0x1b0
[  265.821855][ T7222]  do_syscall_64+0x166/0x520
[  265.821866][ T7222]  ? trace_irq_disable+0x3b/0x140
[  265.821878][ T7222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.821888][ T7222]  ? clear_bhb_loop+0x70/0xc0
[  265.821900][ T7222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.821910][ T7222] RIP: 0033:0x7f89d2f9e559
[  265.821921][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.821930][ T7222] RSP: 002b:00007f89d3e53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  265.821942][ T7222] RAX: ffffffffffffffda RBX: 00007f89d3226090 RCX: 00007f89d2f9e559
[  265.821949][ T7222] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005
[  265.821955][ T7222] RBP: 00007f89d30358b0 R08: 0000000000000010 R09: 0000000000000000
[  265.821961][ T7222] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000
[  265.821967][ T7222] R13: 00007f89d3226128 R14: 00007f89d3226090 R15: 00007ffd7f098bb8
[  265.821983][ T7222]  </TASK>
[  265.821987][ T7222] tipc: Service creation failed, no memory
[  265.821991][ T7222] tipc: Failed to subscribe for {67,0,4294967295}
[  266.392843][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.392855][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.392867][ T7059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.492597][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.492608][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.492621][ T7059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.404734][ T6847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.674824][ T7059] hsr_slave_0: entered promiscuous mode
[  267.677693][ T7059] hsr_slave_1: entered promiscuous mode
[  267.700662][ T7059] debugfs: 'hsr0' already exists in 'hsr'
[  267.700677][ T7059] Cannot create hsr debugfs directory
[  269.510292][   T13] bridge_slave_1: left allmulticast mode
[  269.510311][   T13] bridge_slave_1: left promiscuous mode
[  269.510429][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.631276][   T13] bridge_slave_0: left allmulticast mode
[  269.634212][   T13] bridge_slave_0: left promiscuous mode
[  269.656169][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.284692][ T7282] xt_CT: You must specify a L4 protocol and not use inversions on it
[  270.632784][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.645790][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.646741][   T13] bond0 (unregistering): Released all slaves
[  270.845738][   T13] tipc: Left network mode
[  272.502348][ T7298] file system registered
[  272.746916][ T6847] veth0_vlan: entered promiscuous mode
[  274.695339][ T7327] loop1: detected capacity change from 0 to 512
[  274.754825][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  274.771632][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  274.782275][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  274.792731][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  274.793154][ T7327] EXT4-fs error (device loop1): ext4_quota_enable:7311: inode #4: comm syz.1.325: iget: checksum invalid
[  274.793170][ T7327] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74
[  274.800249][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  274.800260][    C0] EXT4-fs (loop1): initial error at time 1792082264: ext4_quota_enable:7311: inode 4
[  274.800275][    C0] EXT4-fs (loop1): last error at time 1792082264: ext4_quota_enable:7311: inode 4
[  274.856936][ T7327] EXT4-fs error (device loop1): ext4_quota_enable:7314: comm syz.1.325: Bad quota inode: 4, type: 1
[  274.856955][ T7327] loop1: lost filesystem error report for type 5 error -117
[  274.857211][ T7327] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix.
[  274.869591][ T7327] EXT4-fs (loop1): mount failed
[  274.911566][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.235365][   T13] hsr_slave_0: left promiscuous mode
[  275.253913][   T13] hsr_slave_1: left promiscuous mode
[  275.254926][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.254971][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.289257][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.289271][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.406412][   T13] veth1_macvtap: left promiscuous mode
[  275.406444][   T13] veth0_macvtap: left promiscuous mode
[  275.406500][   T13] veth1_vlan: left promiscuous mode
[  275.406542][   T13] veth0_vlan: left promiscuous mode
[  276.780623][   T13] team0 (unregistering): Port device team_slave_1 removed
[  276.812616][   T13] team0 (unregistering): Port device team_slave_0 removed
[  276.974208][ T5616] Bluetooth: hci4: command tx timeout
[  277.301376][ T7059] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  277.337614][ T7059] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  277.354984][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5
[  277.470157][ T7358] syzkaller0: entered promiscuous mode
[  277.470180][ T7358] syzkaller0: entered allmulticast mode
[  277.470911][ T7059] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  277.510422][ T7059] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  277.510941][ T7059] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  277.547001][ T7059] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  277.686985][ T7059] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  277.702147][ T7059] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  278.369856][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.448816][ T7059] 8021q: adding VLAN 0 to HW filter on device team0
[  278.474511][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.474571][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.535379][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.535444][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.053678][ T5616] Bluetooth: hci4: command tx timeout
[  279.100834][ T7326] rxe_eth0 speed is unknown, defaulting to 1000
[  279.472212][ T7422] loop4: detected capacity change from 0 to 512
[  279.489220][ T7422] EXT4-fs: Ignoring removed nomblk_io_submit option
[  279.489257][ T7422] ext4: Unknown parameter 'fsname'
[  281.133687][ T5616] Bluetooth: hci4: command tx timeout
[  281.626647][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6
[  281.982787][ T7442] loop1: detected capacity change from 0 to 128
[  282.083293][ T7442] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  282.099125][ T7442] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  282.892508][ T5607] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  282.936577][   T13] bridge_slave_1: left allmulticast mode
[  282.936596][   T13] bridge_slave_1: left promiscuous mode
[  282.936734][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.968189][   T13] bridge_slave_0: left allmulticast mode
[  282.968205][   T13] bridge_slave_0: left promiscuous mode
[  282.968333][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.004753][   T33] audit: type=1326 audit(1792082272.844:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.005101][   T33] audit: type=1326 audit(1792082272.844:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.076860][   T33] audit: type=1326 audit(1792082272.914:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.076890][   T33] audit: type=1326 audit(1792082272.914:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.076960][   T33] audit: type=1326 audit(1792082272.914:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.109885][   T33] audit: type=1326 audit(1792082272.914:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.206241][   T33] audit: type=1326 audit(1792082273.044:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.206569][   T33] audit: type=1326 audit(1792082273.044:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.206592][   T33] audit: type=1326 audit(1792082273.044:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.206612][   T33] audit: type=1326 audit(1792082273.044:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.0.344" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  283.239775][ T5616] Bluetooth: hci4: command tx timeout
[  285.902608][ T7469] loop1: detected capacity change from 0 to 8192
[  285.912265][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.930035][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.944072][   T13] bond0 (unregistering): Released all slaves
[  287.226418][ T7059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.386333][   T13] hsr_slave_0: left promiscuous mode
[  288.397632][   T13] hsr_slave_1: left promiscuous mode
[  288.399284][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.418475][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.451553][   T13] veth0_vlan: left promiscuous mode
[  289.281885][   T13] team0 (unregistering): Port device team_slave_1 removed
[  289.312937][   T13] team0 (unregistering): Port device team_slave_0 removed
[  289.537287][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7
[  289.957251][ T7520] loop0: detected capacity change from 0 to 4096
[  289.957911][ T7520] EXT4-fs: Ignoring removed orlov option
[  290.130933][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.131389][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.131499][ T7326] bridge_slave_0: entered allmulticast mode
[  290.171146][ T7326] bridge_slave_0: entered promiscuous mode
[  290.197430][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.197487][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.197579][ T7326] bridge_slave_1: entered allmulticast mode
[  290.232185][ T7326] bridge_slave_1: entered promiscuous mode
[  290.269093][ T7520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.404637][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.571356][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.016194][ T7326] team0: Port device team_slave_0 added
[  292.035471][ T7326] team0: Port device team_slave_1 added
[  292.244084][ T7536] loop4: detected capacity change from 0 to 32768
[  292.282781][ T7059] veth0_vlan: entered promiscuous mode
[  292.322915][ T7536] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  292.381442][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.381453][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.381467][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.437170][ T7536] XFS (loop4): Ending clean mount
[  292.452275][ T7536] XFS (loop4): Quotacheck needed: Please wait.
[  292.471259][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.471270][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.471284][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.543049][    T9] libceph: connect (1)[c::]:6789 error -101
[  292.562068][ T7532] ceph: No mds server is up or the cluster is laggy
[  292.581310][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  292.721813][ T7059] veth1_vlan: entered promiscuous mode
[  292.776190][ T7326] hsr_slave_0: entered promiscuous mode
[  292.776789][ T7326] hsr_slave_1: entered promiscuous mode
[  292.794602][ T7326] debugfs: 'hsr0' already exists in 'hsr'
[  292.794618][ T7326] Cannot create hsr debugfs directory
[  292.840463][ T7536] XFS (loop4): Quotacheck: Done.
[  292.987144][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.189721][   T33] kauditd_printk_skb: 35 callbacks suppressed
[  293.189737][   T33] audit: type=1800 audit(1792082283.014:109): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.356" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=-22
[  293.394680][ T5605] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.853218][ T7059] veth0_macvtap: entered promiscuous mode
[  294.877677][ T7059] veth1_macvtap: entered promiscuous mode
[  295.058917][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.081782][ T7562] FAULT_INJECTION: forcing a failure.
[  295.081782][ T7562] name failslab, interval 1, probability 0, space 0, times 0
[  295.081802][ T7562] CPU: 0 UID: 0 PID: 7562 Comm: syz.0.357 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  295.081816][ T7562] Tainted: [L]=SOFTLOCKUP
[  295.081820][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  295.081826][ T7562] Call Trace:
[  295.081831][ T7562]  <TASK>
[  295.081835][ T7562]  dump_stack_lvl+0xe8/0x150
[  295.081857][ T7562]  should_fail_ex+0x3eb/0x540
[  295.081873][ T7562]  should_failslab+0xa8/0x100
[  295.081887][ T7562]  __kmalloc_cache_noprof+0x9e/0x600
[  295.081904][ T7562]  ? netstat_seq_show+0x10d/0xe50
[  295.081916][ T7562]  ? netstat_seq_show+0x10d/0xe50
[  295.081931][ T7562]  ? seq_write+0xd8/0x140
[  295.081948][ T7562]  netstat_seq_show+0x10d/0xe50
[  295.081959][ T7562]  ? __kvmalloc_node_noprof+0x52a/0x820
[  295.081972][ T7562]  ? __kvmalloc_node_noprof+0x340/0x820
[  295.081982][ T7562]  ? seq_read_iter+0x5b2/0xca0
[  295.081994][ T7562]  ? seq_read_iter+0x5b2/0xca0
[  295.082009][ T7562]  seq_read_iter+0x463/0xca0
[  295.082030][ T7562]  seq_read+0x367/0x480
[  295.082047][ T7562]  ? __pfx_seq_read+0x10/0x10
[  295.082058][ T7562]  ? __mutex_trylock_common+0x15f/0x270
[  295.082077][ T7562]  ? apparmor_file_permission+0x1fb/0x2b0
[  295.082094][ T7562]  ? __pfx_seq_read+0x10/0x10
[  295.082105][ T7562]  proc_reg_read+0x1e9/0x2e0
[  295.082120][ T7562]  ? __pfx_proc_reg_read+0x10/0x10
[  295.082133][ T7562]  vfs_read+0x213/0xa80
[  295.082146][ T7562]  ? __pfx___mutex_lock+0x10/0x10
[  295.082159][ T7562]  ? __pfx_vfs_read+0x10/0x10
[  295.082170][ T7562]  ? __fget_files+0x2a/0x420
[  295.082179][ T7562]  ? __fget_files+0x3a2/0x420
[  295.082188][ T7562]  ? __fget_files+0x2a/0x420
[  295.082199][ T7562]  ? fdget+0x1ac/0x250
[  295.082212][ T7562]  ksys_read+0x150/0x270
[  295.082224][ T7562]  ? __pfx_ksys_read+0x10/0x10
[  295.082240][ T7562]  do_syscall_64+0x166/0x520
[  295.082251][ T7562]  ? trace_irq_disable+0x3b/0x140
[  295.082263][ T7562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.082273][ T7562]  ? clear_bhb_loop+0x70/0xc0
[  295.082285][ T7562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.082296][ T7562] RIP: 0033:0x7f9dba39e559
[  295.082308][ T7562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.082316][ T7562] RSP: 002b:00007f9dbb222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  295.082328][ T7562] RAX: ffffffffffffffda RBX: 00007f9dba626090 RCX: 00007f9dba39e559
[  295.082336][ T7562] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005
[  295.082342][ T7562] RBP: 00007f9dba4358b0 R08: 0000000000000000 R09: 0000000000000000
[  295.082348][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.082353][ T7562] R13: 00007f9dba626128 R14: 00007f9dba626090 R15: 00007ffe03ee2928
[  295.082370][ T7562]  </TASK>
[  295.112839][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.434479][   T86] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.434695][   T86] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.434872][   T86] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.435036][   T86] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.966998][ T7576] loop1: detected capacity change from 0 to 512
[  296.984783][ T7576] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  296.984795][ T7576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  297.021848][ T7576] EXT4-fs error (device loop1): ext4_iget_extra_inode:6003: inode #15: comm syz.1.361: corrupted in-inode xattr: invalid ea_ino
[  297.021869][ T7576] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  297.035348][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  297.035363][    C0] EXT4-fs (loop1): initial error at time 1792082286: ext4_iget_extra_inode:6003: inode 15
[  297.035378][    C0] EXT4-fs (loop1): last error at time 1792082286: ext4_iget_extra_inode:6003: inode 15
[  297.046801][ T7576] EXT4-fs (loop1): Remounting filesystem read-only
[  297.114756][ T7576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.169919][ T3302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.169933][ T3302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.195790][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8
[  298.492387][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.492401][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.720445][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.916994][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.363'.
[  299.564164][ T7603] loop0: detected capacity change from 0 to 512
[  299.579287][ T7604] loop1: detected capacity change from 0 to 16
[  299.583400][ T7604] erofs (device loop1): mounted with root inode @ nid 36.
[  299.603374][ T7604] erofs (device loop1): inline data across blocks @ nid 86
[  299.604140][ T7604] erofs (device loop1): inline data across blocks @ nid 86
[  300.615281][ T7603] EXT4-fs error (device loop0): ext4_quota_enable:7311: inode #4: comm syz.0.366: casefold flag without casefold feature
[  300.615302][ T7603] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  300.616964][ T7603] EXT4-fs (loop0): Remounting filesystem read-only
[  300.617021][ T7603] EXT4-fs warning (device loop0): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  300.617209][ T7603] EXT4-fs (loop0): mount failed
[  300.630223][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  300.630237][    C0] EXT4-fs (loop0): initial error at time 1792082290: ext4_quota_enable:7311: inode 4
[  300.630252][    C0] EXT4-fs (loop0): last error at time 1792082290: ext4_quota_enable:7311: inode 4
[  303.426832][ T7623] loop6: detected capacity change from 0 to 2048
[  304.734263][ T7629] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  304.755317][ T7326] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  304.799113][ T7326] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  304.799629][ T7326] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  304.834101][ T7326] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  304.846333][ T7326] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  304.889643][ T7326] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  304.909275][ T7326] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  304.933345][ T7326] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  305.372786][ T7623] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  305.496455][ T7623] Remounting filesystem read-only
[  305.539233][ T7644] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  305.620711][ T7634] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  305.640960][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.667475][ T7644] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  305.819713][ T7326] 8021q: adding VLAN 0 to HW filter on device team0
[  305.850567][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.850636][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.889762][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.889819][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.937351][ T7651] loop0: detected capacity change from 0 to 512
[  305.956442][ T7651] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  306.251606][ T7651] EXT4-fs (loop0): 1 orphan inode deleted
[  306.265599][ T1129] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  306.265696][ T1129] EXT4-fs error (device loop0): ext4_release_dquot:7156: comm kworker/u8:8: Failed to release dquot type 1
[  306.265707][ T1129] loop0: lost filesystem error report for type 5 error -117
[  306.408945][ T7651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.438071][ T7651] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.230044][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.351333][ T7671] loop6: detected capacity change from 0 to 1024
[  309.001530][ T7693] loop1: detected capacity change from 0 to 16
[  309.006017][ T7693] erofs (device loop1): mounted with root inode @ nid 36.
[  310.903354][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.006797][ T7713] ip6gre1: entered promiscuous mode
[  311.006812][ T7713] ip6gre1: entered allmulticast mode
[  311.030701][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.030857][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.057912][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.095295][ T7713] MPI: mpi too large (113288 bits)
[  311.195183][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.234415][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  314.813638][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  315.512065][ T7744] loop4: detected capacity change from 0 to 2048
[  317.557980][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  317.558015][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  317.788894][ T7744] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4.
[  318.999098][ T7326] veth0_vlan: entered promiscuous mode
[  320.042418][ T7326] veth1_vlan: entered promiscuous mode
[  320.073873][ T7756] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  320.156663][ T7757] loop6: detected capacity change from 0 to 136
[  320.159428][ T7759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.389'.
[  320.199470][ T7757] Attempt to read inode for relocated directory
[  320.421081][ T7326] veth0_macvtap: entered promiscuous mode
[  320.485862][ T7326] veth1_macvtap: entered promiscuous mode
[  320.558710][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.597665][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.644425][   T63] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.654978][ T5906] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.665367][   T45] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.665501][ T5905] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.146254][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.146268][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.893572][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  323.320713][   T33] audit: type=1326 audit(1792082313.154:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7770 comm="syz.4.395" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faacab9e559 code=0x0
[  323.364760][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.364777][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.594612][ T7795] loop0: detected capacity change from 0 to 128
[  326.010369][ T7799] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5604] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7799]
[  330.409447][ T7823] loop0: detected capacity change from 0 to 32768
[  330.432782][ T7823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.401 (7823)
[  331.455249][ T7823] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  331.455270][ T7823] BTRFS info (device loop0): using sha256 checksum algorithm
[  331.687993][ T7823] BTRFS info (device loop0): enabling ssd optimizations
[  331.688010][ T7823] BTRFS info (device loop0): turning on sync discard
[  331.688018][ T7823] BTRFS info (device loop0): enabling free space tree
[  331.688028][ T7823] BTRFS info (device loop0): use zlib compression, level 3
[  331.921181][ T7824] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.776745][   T33] audit: type=1800 audit(1792082322.104:111): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.401" name="file1" dev="loop0" ino=260 res=0 errno=-22
[  335.417429][ T5604] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  336.699052][ T7866] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  337.430637][ T7872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.729426][ T7892] loop5: detected capacity change from 0 to 164
[  337.730013][ T7892] iso9660: Unknown parameter 'ÿÿÿÿÿ.ÃNÛBþO'
[  338.893766][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  339.499288][ T7903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.404'.
[  339.558383][ T7906] loop5: detected capacity change from 0 to 1024
[  339.673173][ T7906] hfsplus: failed to load extents file
[  343.165646][ T7930] ubi0: attaching mtd0
[  343.167206][ T7930] ubi0: scanning is finished
[  343.167246][ T7930] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  343.250177][ T7930] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  343.311276][ T7932] loop6: detected capacity change from 0 to 1024
[  343.908447][ T7936] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.033624][ T7939] nvme_fabrics: missing parameter 'transport=%s'
[  345.033638][ T7939] nvme_fabrics: missing parameter 'nqn=%s'
[  345.368840][ T7950] Zero length message leads to an empty skb
[  345.447639][ T7950] ip_tables: iptables: counters copy to user failed while replacing table
[  345.555552][ T5737] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  345.753453][ T5737] usb 2-1: Using ep0 maxpacket: 32
[  345.920424][ T5737] usb 2-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  346.299670][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.299686][ T5737] usb 2-1: Product: syz
[  346.299693][ T5737] usb 2-1: Manufacturer: syz
[  346.299700][ T5737] usb 2-1: SerialNumber: syz
[  346.698734][ T5737] usb 2-1: config 0 descriptor??
[  346.758293][ T7958] loop6: detected capacity change from 0 to 64
[  347.037550][ T5737] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  347.094445][ T5737] dvb-usb: bulk message failed: -22 (4/0)
[  347.094461][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  347.094549][ T5737] dvb-usb: bulk message failed: -22 (5/0)
[  347.094556][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  347.217642][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'.
[  347.513122][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'.
[  347.560696][ T5737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  347.578531][ T5737] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  347.578571][ T5737] usb 2-1: media controller created
[  347.735822][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  349.149138][ T7968] loop4: detected capacity change from 0 to 256
[  349.226785][ T5737] usb 2-1: selecting invalid altsetting 3
[  349.226800][ T5737] ttusb2: set interface to alts=3 failed
[  350.530162][ T5737] DVB: Unable to find symbol tda10086_attach()
[  350.530173][ T5737] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  350.532998][ T5737] dvb-usb: bulk message failed: -22 (4/0)
[  350.533011][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  350.533077][ T5737] dvb-usb: bulk message failed: -22 (5/0)
[  350.533084][ T5737] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  350.533119][ T5737] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  350.623344][ T5737] usb 2-1: USB disconnect, device number 3
[  353.243269][ T7975] syz.6.428 (7975): drop_caches: 2
[  353.689235][ T5737] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  355.081469][   T33] audit: type=1800 audit(1792082344.914:112): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.433" name=08 dev="sda1" ino=2049 res=0 errno=-22
[  356.933006][ T8013] loop6: detected capacity change from 0 to 128
[  356.962072][ T8013] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  357.014519][ T8013] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  357.016697][ T8013] ext2 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.222379][ T8019] loop5: detected capacity change from 0 to 512
[  357.268569][ T8019] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  357.404863][ T8019] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory
[  357.404882][ T8019] loop5: lost filesystem error report for type 5 error -12
[  357.417161][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  357.417175][    C0] EXT4-fs (loop5): initial error at time 1792082347: ext4_process_orphan:346
[  357.417187][    C0] EXT4-fs (loop5): last error at time 1792082347: ext4_process_orphan:346
[  357.525884][ T8019] EXT4-fs (loop5): 1 truncate cleaned up
[  357.526709][ T8019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.406081][ T7059] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  358.408468][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.642234][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.441'.
[  358.660983][ T8031] CIFS: enabling forceuid mount option implicitly because uid= option is specified
[  358.661015][ T8031] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  358.661027][ T8031] CIFS mount error: No usable UNC path provided in device string!
[  358.661027][ T8031] 
[  358.661197][ T8031] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  358.801313][ T8035] loop1: detected capacity change from 0 to 512
[  359.240077][ T8041] loop1: detected capacity change from 0 to 2048
[  360.473251][ T8041]  loop1: unable to read partition table
[  360.473376][ T8041] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  360.818256][ T8043] db_root: cannot open: /dev/sequencer2
[  360.818267][ T8043] db_root: not a directory: /dev/sequencer2
[  361.081967][ T8060] syzkaller0: entered promiscuous mode
[  361.081983][ T8060] syzkaller0: entered allmulticast mode
[  361.169994][ T8063] loop0: detected capacity change from 0 to 512
[  361.526921][ T8063] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  361.526937][ T8063] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  362.424849][ T8063] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  362.436003][ T8063] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  362.540233][ T8063] System zones: 0-2, 18-18, 34-34
[  362.570663][ T8063] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.447: bad orphan inode 15
[  362.570684][ T8063] loop0: lost filesystem error report for type 5 error -117
[  362.575094][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  362.575110][    C0] EXT4-fs (loop0): initial error at time 1792082352: ext4_orphan_get:1430
[  362.575123][    C0] EXT4-fs (loop0): last error at time 1792082352: ext4_orphan_get:1430
[  362.628724][ T8063] ext4_test_bit(bit=14, block=18) = 1
[  362.628738][ T8063] is_bad_inode(inode)=0
[  362.628742][ T8063] NEXT_ORPHAN(inode)=2264924160
[  362.628747][ T8063] max_ino=32
[  362.628751][ T8063] i_nlink=0
[  362.726522][ T8067] sctp: [Deprecated]: syz.5.448 (pid 8067) Use of int in max_burst socket option.
[  362.726522][ T8067] Use struct sctp_assoc_value instead
[  362.757972][ T8063] EXT4-fs error (device loop0): ext4_do_update_inode:6677: inode #15: comm syz.0.447: corrupted inode contents
[  362.757994][ T8063] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  362.774414][ T8063] EXT4-fs error (device loop0): ext4_dirty_inode:7649: inode #15: comm syz.0.447: mark_inode_dirty error
[  362.774433][ T8063] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  362.797119][ T8063] EXT4-fs error (device loop0): ext4_do_update_inode:6677: inode #15: comm syz.0.447: corrupted inode contents
[  362.797141][ T8063] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  362.833079][ T8063] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.447: mark_inode_dirty error
[  362.833103][ T8063] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  362.864159][ T8063] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2965: inode #15: comm syz.0.447: mark inode dirty (error -117)
[  362.864181][ T8063] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  362.874049][ T8063] EXT4-fs warning (device loop0): ext4_evict_inode:357: xattr delete (err -117)
[  362.875045][ T8063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.934326][ T8077] netlink: 68 bytes leftover after parsing attributes in process `syz.4.449'.
[  362.989894][ T8077] loop4: detected capacity change from 0 to 1024
[  363.322134][ T8078] xt_CT: You must specify a L4 protocol and not use inversions on it
[  364.409893][ T8077] 9p: Bad value for 'wfdno'
[  364.634633][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.932176][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[  366.954239][ T8107] lo: entered promiscuous mode
[  366.970540][ T8107] tunl0: entered promiscuous mode
[  366.971725][ T8107] gre0: entered promiscuous mode
[  367.020230][ T8107] gretap0: entered promiscuous mode
[  367.044905][ T8107] erspan0: entered promiscuous mode
[  367.063792][ T8107] ip_vti0: entered promiscuous mode
[  367.173816][ T8107] ip6_vti0: entered promiscuous mode
[  367.341614][ T8107] sit0: entered promiscuous mode
[  367.363153][ T8107] ip6tnl0: entered promiscuous mode
[  367.655727][ T8107] ip6gre0: entered promiscuous mode
[  367.686566][ T8107] syz_tun: entered promiscuous mode
[  367.735589][ T8107] ip6gretap0: entered promiscuous mode
[  367.755622][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.757424][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.783279][ T8107] bridge0: entered promiscuous mode
[  367.799764][ T8107] vcan0: entered promiscuous mode
[  367.810612][ T8107] bond0: entered promiscuous mode
[  367.810667][ T8107] bond_slave_0: entered promiscuous mode
[  367.827432][ T8107] bond_slave_1: entered promiscuous mode
[  367.856538][ T8107] team0: entered promiscuous mode
[  367.856551][ T8107] team_slave_0: entered promiscuous mode
[  367.856680][ T8107] team_slave_1: entered promiscuous mode
[  367.888604][ T8107] dummy0: entered promiscuous mode
[  367.899984][ T8107] nlmon0: entered promiscuous mode
[  367.912822][ T8107] batadv0: entered promiscuous mode
[  367.929637][ T8107] vxcan0: entered promiscuous mode
[  367.930142][ T8107] vxcan1: entered promiscuous mode
[  368.006853][ T8107] veth0: entered promiscuous mode
[  368.055733][ T8107] veth1: entered promiscuous mode
[  368.077764][ T8107] wg0: entered promiscuous mode
[  368.110100][ T8107] wg1: entered promiscuous mode
[  368.129354][ T8107] wg2: entered promiscuous mode
[  368.130351][ T8107] veth0_to_bridge: entered promiscuous mode
[  368.164582][ T8107] veth1_to_bridge: entered promiscuous mode
[  368.186655][ T8107] veth0_to_bond: entered promiscuous mode
[  368.202282][ T8107] veth1_to_bond: entered promiscuous mode
[  368.220991][ T8107] veth0_to_team: entered promiscuous mode
[  368.240225][ T8107] veth1_to_team: entered promiscuous mode
[  368.260758][ T8107] veth0_to_batadv: entered promiscuous mode
[  368.275472][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.275646][ T8107] batadv_slave_0: entered promiscuous mode
[  368.297198][ T8107] veth1_to_batadv: entered promiscuous mode
[  368.311231][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.311265][ T8107] batadv_slave_1: entered promiscuous mode
[  368.395889][ T8107] xfrm0: entered promiscuous mode
[  368.407978][ T8107] veth0_to_hsr: entered promiscuous mode
[  368.431616][ T8107] veth1_to_hsr: entered promiscuous mode
[  368.481636][ T8107] hsr0: entered promiscuous mode
[  368.490890][ T8107] veth1_virt_wifi: entered promiscuous mode
[  368.504378][ T8107] veth0_virt_wifi: entered promiscuous mode
[  368.516945][ T8107] virt_wifi0: entered promiscuous mode
[  368.559987][ T8107] vlan0: entered promiscuous mode
[  368.575132][ T8107] vlan1: entered promiscuous mode
[  368.587698][ T8107] macvlan0: entered promiscuous mode
[  368.610708][ T8107] macvlan1: entered promiscuous mode
[  368.621467][ T8107] ipvlan0: entered promiscuous mode
[  368.629015][ T8107] ipvlan1: entered promiscuous mode
[  368.659931][ T8107] macvtap0: entered promiscuous mode
[  368.686030][ T8107] macsec0: entered promiscuous mode
[  368.700557][ T8107] geneve0: entered promiscuous mode
[  368.721330][ T8107] geneve1: entered promiscuous mode
[  368.752442][ T8107] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  368.768852][ T8107] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  368.802356][ T8107] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  368.824581][ T8107] netdevsim netdevsim4 netdevsim3: entered promiscuous mode
[  369.690677][ T8131] loop5: detected capacity change from 0 to 131072
[  369.691181][ T8131] xfs: Deprecated parameter 'ikeep'
[  369.691218][ T8131] XFS: ikeep mount option is deprecated.
[  369.817699][ T8131] XFS (loop5): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  369.859436][ T8107] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  370.896010][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  370.991110][ T8131] XFS (loop5): Starting recovery (logdev: internal)
[  371.047607][ T8107] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  371.065276][ T8107] ipip0: entered promiscuous mode
[  371.163489][ T5877] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.163519][ T5877] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.163537][ T5877] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.163554][ T5877] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.416669][ T8147] loop4: detected capacity change from 0 to 512
[  371.475788][ T8131] XFS (loop5): Ending recovery (logdev: internal)
[  371.478851][ T8131] XFS (loop5): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  371.534120][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  375.795668][ T8174] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16
[  376.533430][ T8177] capability: warning: `syz.1.471' uses deprecated v2 capabilities in a way that may be insecure
[  378.709027][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  378.717453][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  378.771058][ T8183] kAFS: unable to lookup cell '(G'
[  379.297829][ T8197] loop1: detected capacity change from 0 to 512
[  379.340254][ T8197] EXT4-fs error (device loop1): ext4_quota_enable:7311: inode #4: comm syz.1.475: iget: checksum invalid
[  379.340274][ T8197] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74
[  379.341720][ T8197] EXT4-fs error (device loop1): ext4_quota_enable:7314: comm syz.1.475: Bad quota inode: 4, type: 1
[  379.341738][ T8197] loop1: lost filesystem error report for type 5 error -117
[  379.353060][    C0] EXT4-fs (loop1): error count since last fsck: 2
[  379.353074][    C0] EXT4-fs (loop1): initial error at time 1792082369: ext4_quota_enable:7311: inode 4
[  379.353089][    C0] EXT4-fs (loop1): last error at time 1792082369: ext4_quota_enable:7314
[  379.354835][ T8197] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix.
[  379.355974][ T8197] EXT4-fs (loop1): mount failed
[  381.262048][ T8187] hub 5-0:1.0: USB hub found
[  381.296285][ T8187] hub 5-0:1.0: 1 port detected
[  384.811143][ T8255] loop5: detected capacity change from 0 to 256
[  384.833189][ T8255] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d)
[  391.247947][ T8289] loop0: detected capacity change from 0 to 164
[  393.106540][ T8308] loop0: detected capacity change from 0 to 512
[  393.144374][ T8308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.144441][ T8308] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)

syzkaller
syzkaller login: [  393.401614][ T8318] netlink: 'syz.1.504': attribute type 3 has an invalid length.
[  393.401629][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'.
[  394.677324][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.507'.
[  396.144330][ T8340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.517446][ T5604] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  399.551227][ T5604] EXT4-fs (loop0): Remounting filesystem read-only
[  399.590939][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.606537][ T3346] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  399.606553][ T3346] Quota error (device loop0): write_blk: dquota write failed
[  399.606561][ T3346] Quota error (device loop0): free_dqentry: Can't write quota data block 5
[  399.606707][ T3346] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  399.606717][ T3346] Quota error (device loop0): write_blk: dquota write failed
[  399.606723][ T3346] Quota error (device loop0): free_dqentry: Can't write quota data block 5
[  399.815569][ T8364] loop0: detected capacity change from 0 to 8
[  400.477948][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.518'.
[  400.547812][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.518'.
[  401.975430][ T5616] Bluetooth: hci4: command 0x0405 tx timeout
[  402.788789][ T8397] loop6: detected capacity change from 0 to 512
[  402.804244][ T8393] loop0: detected capacity change from 0 to 256
[  402.892453][ T8393] FAT-fs (loop0): data area starts beyond volume (32 > 0)
[  402.892469][ T8393] FAT-fs (loop0): Can't find a valid FAT filesystem
[  403.262686][ T8403] loop6: detected capacity change from 0 to 2048
[  403.407678][ T8403] Alternate GPT is invalid, using primary GPT.
[  403.407729][ T8403]  loop6: p1 p2 p3
[  403.407740][ T8403] loop6: partition table partially beyond EOD, truncated
[  403.752587][ T8406] loop4: detected capacity change from 0 to 2048
[  403.830091][ T8406]  loop4: p1 < > p3
[  403.852792][ T8411] loop6: detected capacity change from 0 to 128
[  403.867339][ T8411] ext2: Unknown parameter 'func'
[  403.871498][ T8406] loop4: p3 size 134217728 extends beyond EOD, truncated
[  405.462684][ T8408] udevd[8408]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  405.476906][ T8362] udevd[8362]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  405.478055][ T8361] udevd[8361]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  405.839811][ T8415] loop1: detected capacity change from 0 to 1024
[  407.972729][ T8435] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0)
[  407.972910][ T8435] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  408.002577][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  408.154457][   T10] usb 6-1: Using ep0 maxpacket: 16
[  408.172124][   T10] usb 6-1: New USB device found: idVendor=0c50, idProduct=f00a, bcdDevice=0.00
[  408.185796][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.185835][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.185867][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  408.185897][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.221887][ T5674] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  408.254517][   T10] usb 6-1: config 0 descriptor??
[  409.298067][ T5674] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00
[  409.299354][ T5674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.299371][ T5674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.299391][ T5674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.510797][ T5674] usb 1-1: config 0 descriptor??
[  409.581804][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  409.581935][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  409.694543][   T10] usb 6-1: USB disconnect, device number 2
[  412.492708][ T5674] usbhid 1-1:0.0: can't add hid device: -71
[  412.492768][ T5674] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  412.520695][ T8467] bridge0: port 3(erspan0) entered blocking state
[  412.520750][ T8467] bridge0: port 3(erspan0) entered disabled state
[  412.520974][ T8467] erspan0: entered allmulticast mode
[  412.521956][ T8467] erspan0: entered promiscuous mode
[  412.522465][ T8467] bridge0: port 3(erspan0) entered blocking state
[  412.522612][ T8467] bridge0: port 3(erspan0) entered forwarding state
[  412.601254][ T8469] loop4: detected capacity change from 0 to 128
[  412.658022][ T5674] usb 1-1: USB disconnect, device number 4
[  412.856463][ T8472] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  412.877884][ T8477] loop5: detected capacity change from 0 to 8
[  415.809065][ T8486] CIFS: Attempting to mount //127.0.0.1/share
[  417.048229][ T8486] CIFS: VFS: Error connecting to socket. Aborting operation.
[  417.048420][ T8486] CIFS: VFS: cifs_mount failed w/return code = -4
[  417.406122][ T8501] loop5: detected capacity change from 0 to 32768
[  417.425539][ T8501] (syz.5.552,8501,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  417.426783][ T8501] (syz.5.552,8501,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  417.466032][ T8501] JBD2: Ignoring recovery information on journal
[  417.531007][ T8501] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  417.903864][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903880][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903885][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903890][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903895][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903900][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903906][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903910][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903915][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903920][ T8508] tc action pedit offset must be on 32 bit boundaries
[  417.903930][ T8508] 0: reclassify loop, rule prio 0, protocol 800
[  418.020540][ T7326] ocfs2: Unmounting device (7,5) on (node local)
[  418.464406][   T33] audit: type=1107 audit(1792082408.294:113): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š²}E¥’¥2þ+Ø0?T9Ë_1ÇzÅžäVÉñ­™W&	À	¨WzÚ`@èÓ¶X«*âe5Gð­‹$ƒg†hÍÔø—v™fp'
[  419.494137][ T8512] loop0: detected capacity change from 0 to 1024
[  419.614516][ T8512] EXT4-fs: Ignoring removed bh option
[  419.640437][ T8512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  420.993147][ T8525] loop4: detected capacity change from 0 to 32768
[  421.065144][ T8525] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  421.101575][ T8525] XFS (loop4): Ending clean mount
[  421.112604][ T8525] XFS (loop4): Quotacheck needed: Please wait.
[  422.301831][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  422.490705][ T8525] XFS (loop4): Quotacheck: Done.
[  422.838843][ T8539] overlayfs: missing 'lowerdir'
[  422.840988][   T33] audit: type=1800 audit(1792082412.674:114): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.559" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=-22
[  422.908269][ T8534] loop1: detected capacity change from 0 to 256
[  423.174064][ T5605] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  424.544277][ T6060] IPVS: starting estimator thread 0...
[  424.641122][ T8551] IPVS: using max 54 ests per chain, 129600 per kthread
[  427.259595][ T8564] loop4: detected capacity change from 0 to 512
[  427.282986][ T8564] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.567: iget: bad extended attribute block 134217728
[  427.283008][ T8564] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  427.283313][ T8564] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.567: couldn't read orphan inode 15 (err -117)
[  427.283329][ T8564] loop4: lost filesystem error report for type 5 error -117
[  427.283387][    C0] EXT4-fs (loop4): error count since last fsck: 2
[  427.283398][    C0] EXT4-fs (loop4): initial error at time 1792082417: ext4_orphan_get:1404: inode 15
[  427.283413][    C0] EXT4-fs (loop4): last error at time 1792082417: ext4_orphan_get:1409
[  427.324312][ T8564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.603799][ T8579] loop5: detected capacity change from 0 to 2048
[  428.608157][ T8569] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  428.669345][ T8579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.669411][ T8579] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.883711][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.988089][ T8583] loop1: detected capacity change from 0 to 4096
[  429.085509][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.291758][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.652483][ T8583] ntfs3(loop1): Failed to read $AttrDef (-4).
[  431.845694][ T7059] svc: failed to register nfsdv3 RPC service (errno 5).
[  431.845710][ T7059] failed to unregister udp with rpcbind
[  434.897135][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  440.016156][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  440.016191][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  440.418550][ T8662] loop0: detected capacity change from 0 to 512
[  440.419150][ T8662] EXT4-fs: Ignoring removed bh option
[  440.419206][ T8662] EXT4-fs: quotafile must be on filesystem root
[  440.455245][ T8662] loop0: detected capacity change from 0 to 512
[  440.473013][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[  440.494878][ T8662] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.590: iget: bad i_size value: 38620345925642
[  440.494900][ T8662] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  440.495181][ T8662] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.590: couldn't read orphan inode 15 (err -117)
[  440.495214][ T8662] loop0: lost filesystem error report for type 5 error -117
[  440.507884][    C0] EXT4-fs (loop0): error count since last fsck: 2
[  440.507898][    C0] EXT4-fs (loop0): initial error at time 1792082430: ext4_orphan_get:1404: inode 15
[  440.507913][    C0] EXT4-fs (loop0): last error at time 1792082430: ext4_orphan_get:1409
[  440.509446][ T8662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.086899][ T8670] bond0: (slave bond_slave_0): Releasing backup interface
[  441.183315][   T86] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:5: bg 0: block 5: invalid block bitmap
[  441.259970][   T86] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  441.259992][   T86] EXT4-fs (loop0): This should not happen!! Data will be lost
[  441.259992][   T86] 
[  441.260000][   T86] EXT4-fs (loop0): Total free blocks count 0
[  441.260006][   T86] EXT4-fs (loop0): Free/Dirty block details
[  441.260028][   T86] EXT4-fs (loop0): free_blocks=0
[  441.260070][   T86] EXT4-fs (loop0): dirty_blocks=16000
[  441.260077][   T86] EXT4-fs (loop0): Block reservation details
[  441.260084][   T86] EXT4-fs (loop0): i_reserved_data_blocks=16000
[  441.347556][ T8670] bond_slave_0: entered promiscuous mode
[  441.347572][ T8670] bond_slave_0: entered allmulticast mode
[  443.080447][ T5905] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  444.192438][ T8703] loop5: detected capacity change from 0 to 2048
[  444.269593][ T8703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.269666][ T8703] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  444.355837][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  444.461128][ T7326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.525275][   T10] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00
[  444.528747][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  444.528776][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  444.557006][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.557021][   T10] usb 2-1: Product: syz
[  444.557028][   T10] usb 2-1: Manufacturer: syz
[  444.557036][   T10] usb 2-1: SerialNumber: syz
[  444.681910][ T5604] EXT4-fs warning (device loop0): ext4_evict_inode:263: inode #18: comm syz-executor: data will be lost
[  445.948349][ T8720] loop5: detected capacity change from 0 to 16
[  445.988359][ T8720] erofs (device loop5): mounted with root inode @ nid 36.
[  447.726065][ T5674] usb 2-1: USB disconnect, device number 4
[  450.506293][ T5604] EXT4-fs: 15 callbacks suppressed
[  450.506306][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.590779][ T8758] loop4: detected capacity change from 0 to 4096
[  453.794861][ T8776] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  455.194301][ T8792] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint
[  458.629110][ T8806] FAULT_INJECTION: forcing a failure.
[  458.629110][ T8806] name failslab, interval 1, probability 0, space 0, times 0
[  458.629139][ T8806] CPU: 0 UID: 0 PID: 8806 Comm: syz.6.617 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  458.629154][ T8806] Tainted: [L]=SOFTLOCKUP
[  458.629157][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  458.629167][ T8806] Call Trace:
[  458.629173][ T8806]  <TASK>
[  458.629178][ T8806]  dump_stack_lvl+0xe8/0x150
[  458.629199][ T8806]  should_fail_ex+0x3eb/0x540
[  458.629219][ T8806]  should_failslab+0xa8/0x100
[  458.629232][ T8806]  ? inet_frag_find+0x8c6/0x1e50
[  458.629243][ T8806]  kmem_cache_alloc_noprof+0x9c/0x600
[  458.629263][ T8806]  ? inet_frag_find+0x8c6/0x1e50
[  458.629276][ T8806]  inet_frag_find+0x8c6/0x1e50
[  458.629287][ T8806]  ? __pfx_ip4_obj_cmpfn+0x10/0x10
[  458.629309][ T8806]  ? lock_acquire+0x115/0x350
[  458.629321][ T8806]  ? __pfx_inet_frag_find+0x10/0x10
[  458.629333][ T8806]  ? ip_route_input_noref+0xad/0x270
[  458.629348][ T8806]  ip_defrag+0x332/0x2030
[  458.629361][ T8806]  ? ip_route_input_noref+0xad/0x270
[  458.629371][ T8806]  ? ip_route_input_noref+0xad/0x270
[  458.629382][ T8806]  ? ip_route_input_noref+0x211/0x270
[  458.629393][ T8806]  ? __pfx_ip_route_input_noref+0x10/0x10
[  458.629407][ T8806]  ? ipt_do_table+0x2b9/0x15d0
[  458.629419][ T8806]  ? ip_defrag+0xdf/0x2030
[  458.629433][ T8806]  ? __pfx_ip_defrag+0x10/0x10
[  458.629449][ T8806]  ? ip_rcv_finish_core+0xd00/0x1c00
[  458.629470][ T8806]  ip_local_deliver+0xe8/0x190
[  458.629485][ T8806]  NF_HOOK+0x336/0x3c0
[  458.629499][ T8806]  ? __pfx_ip_rcv_finish+0x10/0x10
[  458.629512][ T8806]  ? NF_HOOK+0x9e/0x3c0
[  458.629524][ T8806]  ? __pfx_NF_HOOK+0x10/0x10
[  458.629539][ T8806]  ? __pfx_ip_rcv_finish+0x10/0x10
[  458.629555][ T8806]  ? netif_receive_skb+0x102/0xbf0
[  458.629570][ T8806]  ? __pfx_ip_rcv+0x10/0x10
[  458.629583][ T8806]  netif_receive_skb+0x45b/0xbf0
[  458.629600][ T8806]  ? __pfx_netif_receive_skb+0x10/0x10
[  458.629616][ T8806]  ? rcu_is_watching+0x16/0xb0
[  458.629629][ T8806]  ? tun_rx_batched+0x185/0x790
[  458.629641][ T8806]  tun_rx_batched+0x1de/0x790
[  458.629653][ T8806]  ? __pfx_tun_rx_batched+0x10/0x10
[  458.629663][ T8806]  ? lock_acquire+0x115/0x350
[  458.629678][ T8806]  ? tun_get_user+0x1d3f/0x4450
[  458.629687][ T8806]  ? __local_bh_enable_ip+0xd6/0x140
[  458.629702][ T8806]  tun_get_user+0x2bb1/0x4450
[  458.629716][ T8806]  ? tun_get_user+0x27a6/0x4450
[  458.629731][ T8806]  ? aa_file_perm+0x4ed/0x15f0
[  458.629743][ T8806]  ? __pfx_tun_get_user+0x10/0x10
[  458.629754][ T8806]  ? __lock_acquire+0x747/0x2de0
[  458.629772][ T8806]  ? ref_tracker_alloc+0x172/0x530
[  458.629787][ T8806]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  458.629800][ T8806]  ? lock_acquire+0x115/0x350
[  458.629811][ T8806]  ? tun_get+0x1c/0x2f0
[  458.629823][ T8806]  ? tun_get+0x1c/0x2f0
[  458.629832][ T8806]  ? tun_get+0x1c/0x2f0
[  458.629849][ T8806]  tun_chr_write_iter+0x113/0x200
[  458.629871][ T8806]  vfs_write+0x612/0xba0
[  458.629886][ T8806]  ? __pfx_vfs_write+0x10/0x10
[  458.629904][ T8806]  ? __fget_files+0x3a2/0x420
[  458.629926][ T8806]  ? __fget_files+0x2a/0x420
[  458.629938][ T8806]  ? fdget+0x1ac/0x250
[  458.629952][ T8806]  ksys_write+0x150/0x270
[  458.629965][ T8806]  ? __pfx_ksys_write+0x10/0x10
[  458.629985][ T8806]  do_syscall_64+0x166/0x520
[  458.629997][ T8806]  ? trace_irq_disable+0x3b/0x140
[  458.630009][ T8806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.630020][ T8806]  ? clear_bhb_loop+0x70/0xc0
[  458.630033][ T8806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.630044][ T8806] RIP: 0033:0x7f217015ed8e
[  458.630056][ T8806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  458.630066][ T8806] RSP: 002b:00007f217100ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  458.630079][ T8806] RAX: ffffffffffffffda RBX: 00007f21710106c0 RCX: 00007f217015ed8e
[  458.630086][ T8806] RDX: 0000000000000032 RSI: 00002000000003c0 RDI: 00000000000000c8
[  458.630092][ T8806] RBP: 00007f21702358b0 R08: 0000000000000000 R09: 0000000000000000
[  458.630099][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.630105][ T8806] R13: 00007f2170426038 R14: 00007f2170425fa0 R15: 00007ffeb76f5918
[  458.630122][ T8806]  </TASK>
[  459.924635][    T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  460.899843][   T33] audit: type=1326 audit(1792082450.734:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.6.625" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x0
[  461.041188][    T9] usb 2-1: device descriptor read/64, error -71
[  461.583466][    T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  461.863983][    T9] usb 2-1: device descriptor read/64, error -71
[  461.981473][    T9] usb usb2-port1: attempt power cycle
[  462.840945][ T8875] loop1: detected capacity change from 0 to 128
[  462.861535][ T8875] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  462.902515][ T8875] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  462.927568][ T8866] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.554362][ T8879] random: crng reseeded on system resumption
[  464.813460][ T4938] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  464.965972][ T4938] usb 6-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47
[  464.985820][ T4938] usb 6-1: config 0 has no interfaces?
[  464.985856][ T4938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.992331][ T4938] usb 6-1: config 0 descriptor??
[  465.001702][ T8898] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  465.001717][ T8898] FAT-fs (loop1): Filesystem has been set read-only
[  465.005775][ T8898] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  466.162334][ T8909] loop4: detected capacity change from 0 to 40427
[  466.241296][ T8909] F2FS-fs (loop4): invalid crc value
[  466.293562][ T8909] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  466.297744][ T8909] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  466.297821][ T8909] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  466.297860][ T8909] F2FS-fs (loop4): Start checkpoint disabled!
[  466.334011][ T8909] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  466.351004][ T8909] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  467.274393][ T8918] syz.4.634: attempt to access beyond end of device
[  467.274393][ T8918] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  467.543919][ T8918] syz.4.634: attempt to access beyond end of device
[  467.543919][ T8918] loop4: rw=2049, sector=45104, nr_sectors = 48 limit=40427
[  467.758806][ T1011] kworker/u8:7: attempt to access beyond end of device
[  467.758806][ T1011] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  467.758891][ T1011] CPU: 0 UID: 0 PID: 1011 Comm: kworker/u8:7 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  467.758907][ T1011] Tainted: [L]=SOFTLOCKUP
[  467.758911][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  467.758917][ T1011] Workqueue: writeback wb_workfn (flush-7:4)
[  467.758938][ T1011] Call Trace:
[  467.758943][ T1011]  <TASK>
[  467.758948][ T1011]  dump_stack_lvl+0xe8/0x150
[  467.758966][ T1011]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  467.758985][ T1011]  f2fs_write_end_bio+0x118e/0x15d0
[  467.759008][ T1011]  __submit_merged_bio+0x258/0x6a0
[  467.759022][ T1011]  ? rcu_is_watching+0x16/0xb0
[  467.759039][ T1011]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  467.759063][ T1011]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  467.759092][ T1011]  f2fs_write_data_pages+0x2a13/0x36e0
[  467.759124][ T1011]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  467.759160][ T1011]  ? __pfx_read_node_cache+0x10/0x10
[  467.759188][ T1011]  ? __lock_acquire+0x747/0x2de0
[  467.759210][ T1011]  ? __lock_acquire+0x747/0x2de0
[  467.759221][ T1011]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  467.759233][ T1011]  do_writepages+0x338/0x560
[  467.759252][ T1011]  ? reacquire_held_locks+0x117/0x1a0
[  467.759264][ T1011]  ? writeback_sb_inodes+0x450/0x1af0
[  467.759282][ T1011]  __writeback_single_inode+0x136/0x1220
[  467.759298][ T1011]  ? do_raw_spin_unlock+0xf5/0x200
[  467.759315][ T1011]  writeback_sb_inodes+0x9de/0x1af0
[  467.759328][ T1011]  ? __lock_acquire+0x747/0x2de0
[  467.759353][ T1011]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  467.759392][ T1011]  ? rcu_is_watching+0x16/0xb0
[  467.759405][ T1011]  ? queue_io+0x2d3/0x470
[  467.759422][ T1011]  wb_writeback+0x41c/0xad0
[  467.759437][ T1011]  ? queue_io+0x1f1/0x470
[  467.759455][ T1011]  ? __pfx_wb_writeback+0x10/0x10
[  467.759468][ T1011]  ? do_raw_spin_lock+0x12b/0x2f0
[  467.759491][ T1011]  wb_workfn+0x431/0x10f0
[  467.759514][ T1011]  ? __pfx_wb_workfn+0x10/0x10
[  467.759530][ T1011]  ? trace_hrtimer_start+0x82/0x200
[  467.759544][ T1011]  ? do_raw_spin_lock+0x12b/0x2f0
[  467.759563][ T1011]  ? lock_acquire+0x115/0x350
[  467.759579][ T1011]  ? rcu_is_watching+0x16/0xb0
[  467.759593][ T1011]  ? process_scheduled_works+0x97a/0x1630
[  467.759607][ T1011]  process_scheduled_works+0xc3d/0x1630
[  467.759638][ T1011]  ? __pfx_process_scheduled_works+0x10/0x10
[  467.759655][ T1011]  ? assign_work+0x3cf/0x5d0
[  467.759671][ T1011]  worker_thread+0xa47/0xfb0
[  467.759701][ T1011]  kthread+0x38b/0x480
[  467.759711][ T1011]  ? __pfx_worker_thread+0x10/0x10
[  467.759723][ T1011]  ? __pfx_kthread+0x10/0x10
[  467.759734][ T1011]  ret_from_fork+0x514/0xb70
[  467.759746][ T1011]  ? __pfx_ret_from_fork+0x10/0x10
[  467.759756][ T1011]  ? __switch_to+0xc78/0x1410
[  467.759772][ T1011]  ? __pfx_kthread+0x10/0x10
[  467.759783][ T1011]  ret_from_fork_asm+0x1a/0x30
[  467.759803][ T1011]  </TASK>
[  467.759807][ T1011] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  468.162089][    T9] usb 6-1: USB disconnect, device number 3
[  470.227309][ T8942] loop1: detected capacity change from 0 to 128
[  470.282204][   T33] audit: type=1326 audit(1792082460.114:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.282234][   T33] audit: type=1326 audit(1792082460.114:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.352201][   T33] audit: type=1326 audit(1792082460.184:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.352231][   T33] audit: type=1326 audit(1792082460.184:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.411293][ T8945] random: crng reseeded on system resumption
[  470.426123][   T33] audit: type=1326 audit(1792082460.264:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.426152][   T33] audit: type=1326 audit(1792082460.264:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.426173][   T33] audit: type=1326 audit(1792082460.264:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.512858][   T33] audit: type=1326 audit(1792082460.344:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.512887][   T33] audit: type=1326 audit(1792082460.344:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.513846][   T33] audit: type=1326 audit(1792082460.354:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.6.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f217019e559 code=0x7ffc0000
[  470.662192][ T8942] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  470.680774][ T8942] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.652641][ T5607] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  475.091666][ T8968] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  475.091721][ T8968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  476.689000][ T8975] 9pnet_virtio: no channels available for device syz
[  481.569671][ T9001] null_blk: nullb1: using native zone append
[  481.612087][ T9001] null_blk: disk nullb1 created
[  486.244343][ T9055] loop5: detected capacity change from 0 to 32768
[  486.285921][ T9055] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  487.316875][ T9052] syzkaller0: entered promiscuous mode
[  487.316890][ T9052] syzkaller0: entered allmulticast mode
[  493.261443][ T7326] ocfs2: Unmounting device (7,5) on (node local)
[  493.729145][ T9095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.717817][ T9122] loop0: detected capacity change from 0 to 512
[  496.718896][ T9122] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  496.718906][ T9122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  496.755747][ T9122] EXT4-fs error (device loop0): ext4_init_orphan_info:619: comm syz.0.669: orphan file block 0: bad magic
[  496.755766][ T9122] loop0: lost filesystem error report for type 5 error -117
[  496.767845][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  496.767859][    C0] EXT4-fs (loop0): initial error at time 1792082486: ext4_init_orphan_info:619
[  496.767871][    C0] EXT4-fs (loop0): last error at time 1792082486: ext4_init_orphan_info:619
[  497.831809][ T9122] EXT4-fs (loop0): mount failed
[  501.457156][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  501.457192][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  501.660504][ T9150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.720397][ T9155] syz.5.688 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  502.720430][ T9155] CPU: 0 UID: 0 PID: 9155 Comm: syz.5.688 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  502.720456][ T9155] Tainted: [L]=SOFTLOCKUP
[  502.720463][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  502.720475][ T9155] Call Trace:
[  502.720484][ T9155]  <TASK>
[  502.720493][ T9155]  dump_stack_lvl+0xe8/0x150
[  502.720530][ T9155]  dump_header+0xd3/0x4b0
[  502.720552][ T9155]  oom_kill_process+0x3ab/0x9e0
[  502.720568][ T9155]  out_of_memory+0xfb1/0x13b0
[  502.720578][ T9155]  ? try_charge_memcg+0xc16/0x15f0
[  502.720599][ T9155]  ? __pfx_out_of_memory+0x10/0x10
[  502.720608][ T9155]  ? do_raw_spin_unlock+0xf5/0x200
[  502.720629][ T9155]  try_charge_memcg+0xccc/0x15f0
[  502.720652][ T9155]  ? __pfx_try_charge_memcg+0x10/0x10
[  502.720668][ T9155]  ? percpu_ref_tryget+0x15/0x180
[  502.720688][ T9155]  ? __obj_cgroup_charge+0x36/0x2d0
[  502.720701][ T9155]  __obj_cgroup_charge+0x20a/0x2d0
[  502.720711][ T9155]  ? __obj_cgroup_charge+0x36/0x2d0
[  502.720734][ T9155]  __memcg_slab_post_alloc_hook+0x772/0xdb0
[  502.720757][ T9155]  __kmalloc_cache_noprof+0x361/0x600
[  502.720774][ T9155]  ? __kmalloc_cache_noprof+0x148/0x600
[  502.720789][ T9155]  ? kvm_init_irq_routing+0x4f/0x110
[  502.720803][ T9155]  ? kvm_init_irq_routing+0x4f/0x110
[  502.720821][ T9155]  kvm_init_irq_routing+0x4f/0x110
[  502.720836][ T9155]  kvm_dev_ioctl+0x5f7/0x1700
[  502.720850][ T9155]  ? __fget_files+0x2a/0x420
[  502.720860][ T9155]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  502.720872][ T9155]  ? bpf_lsm_file_ioctl+0x9/0x20
[  502.720884][ T9155]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  502.720894][ T9155]  __se_sys_ioctl+0xfc/0x170
[  502.720908][ T9155]  do_syscall_64+0x166/0x520
[  502.720919][ T9155]  ? trace_irq_disable+0x3b/0x140
[  502.720931][ T9155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.720942][ T9155]  ? clear_bhb_loop+0x70/0xc0
[  502.720956][ T9155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.720966][ T9155] RIP: 0033:0x7fa19259e559
[  502.720978][ T9155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.720987][ T9155] RSP: 002b:00007fa1934aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  502.721000][ T9155] RAX: ffffffffffffffda RBX: 00007fa192825fa0 RCX: 00007fa19259e559
[  502.721007][ T9155] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005
[  502.721014][ T9155] RBP: 00007fa1926358b0 R08: 0000000000000000 R09: 0000000000000000
[  502.721020][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.721026][ T9155] R13: 00007fa192826038 R14: 00007fa192825fa0 R15: 00007ffd42f78a48
[  502.721043][ T9155]  </TASK>
[  503.058609][ T9155] memory: usage 96kB, limit 96kB, failcnt 81
[  503.058625][ T9155] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0
[  503.058633][ T9155] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  503.058640][ T9155] Memory cgroup stats for /syz5/test:
[  503.058861][ T9155] cache 0
[  503.058867][ T9155] rss 0
[  503.058871][ T9155] rss_huge 0
[  503.058874][ T9155] shmem 0
[  503.058878][ T9155] mapped_file 0
[  503.058881][ T9155] dirty 0
[  503.058884][ T9155] writeback 0
[  503.058887][ T9155] workingset_refault_anon 0
[  503.058891][ T9155] workingset_refault_file 0
[  503.058895][ T9155] swap 0
[  503.058898][ T9155] swapcached 0
[  503.058901][ T9155] pgpgin 0
[  503.058904][ T9155] pgpgout 0
[  503.058908][ T9155] pgfault 0
[  503.058911][ T9155] pgmajfault 0
[  503.058914][ T9155] inactive_anon 0
[  503.058918][ T9155] active_anon 0
[  503.058921][ T9155] inactive_file 0
[  503.058924][ T9155] active_file 0
[  503.058928][ T9155] unevictable 0
[  503.058931][ T9155] hierarchical_memory_limit 98304
[  503.058935][ T9155] hierarchical_memsw_limit 9223372036854771712
[  503.058939][ T9155] total_cache 0
[  503.058943][ T9155] total_rss 0
[  503.058946][ T9155] total_rss_huge 0
[  503.058950][ T9155] total_shmem 0
[  503.058953][ T9155] total_mapped_file 0
[  503.058957][ T9155] total_dirty 0
[  503.058960][ T9155] total_writeback 0
[  503.058964][ T9155] total_workingset_refault_anon 0
[  503.058968][ T9155] total_workingset_refault_file 0
[  503.058972][ T9155] total_swap 0
[  503.058975][ T9155] total_swapcached 0
[  503.058979][ T9155] total_pgpgin 0
[  503.058982][ T9155] total_pgpgout 0
[  503.058986][ T9155] total_pgfault 0
[  503.058989][ T9155] total_pgmajfault 0
[  503.058993][ T9155] total_inactive_anon 0
[  503.058996][ T9155] total_active_anon 0
[  503.059000][ T9155] total_inactive_file 0
[  503.059004][ T9155] total_active_file 0
[  503.059008][ T9155] total_unevictable 0
[  503.059011][ T9155] anon_cost 0
[  503.059049][ T9155] file_cost 0
[  503.059054][ T9155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.688,pid=9154,uid=0
[  503.060934][ T9155] Memory cgroup out of memory: Killed process 9154 (syz.5.688) total-vm:202752kB, anon-rss:1444kB, file-rss:21792kB, shmem-rss:5344kB, UID:0 pgtables:152kB oom_score_adj:1000
[  503.648410][   T33] kauditd_printk_skb: 61 callbacks suppressed
[  503.648421][   T33] audit: type=1326 audit(1792082493.484:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.648463][   T33] audit: type=1326 audit(1792082493.484:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.652034][   T33] audit: type=1326 audit(1792082493.484:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.652062][   T33] audit: type=1326 audit(1792082493.484:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.652083][   T33] audit: type=1326 audit(1792082493.484:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.774446][   T33] audit: type=1326 audit(1792082493.614:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.774475][   T33] audit: type=1326 audit(1792082493.614:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.774520][   T33] audit: type=1326 audit(1792082493.614:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.889128][   T33] audit: type=1326 audit(1792082493.724:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  503.889158][   T33] audit: type=1326 audit(1792082493.724:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.696" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacab9e559 code=0x7ffc0000
[  504.061164][ T9199] loop1: detected capacity change from 0 to 512
[  505.255810][ T9201] futex_wake_op: syz.4.696 tries to shift op by 144; fix this program
[  510.174500][ T9244] loop0: detected capacity change from 0 to 8
[  510.747139][ T9243] SQUASHFS error: Failed to read block 0x4de: -5
[  510.747465][ T9243] SQUASHFS error: Failed to read block 0x4de: -5
[  510.764101][   T33] kauditd_printk_skb: 29 callbacks suppressed
[  510.764112][   T33] audit: type=1800 audit(1792082500.584:226): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.709" name="file1" dev="loop0" ino=5 res=0 errno=-5
[  513.411074][ T9257] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  513.411091][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  513.411735][ T9257] vhci_hcd vhci_hcd.0: Device attached
[  513.560626][ T9258] vhci_hcd: connection closed
[  513.573227][   T45] vhci_hcd vhci_hcd.1: stop threads
[  513.584639][   T45] vhci_hcd vhci_hcd.1: release socket
[  513.592059][   T45] vhci_hcd vhci_hcd.1: disconnect device
[  513.615282][ T5674] vhci_hcd vhci_hcd.1: vhci_device speed not set
			
[  515.504451][   T10] usb 7-1: Using ep0 maxpacket: 8
[  515.507299][   T10] usb 7-1: New USB device found: idVendor=2006, idProduct=0118, bcdDevice=0.00
[  515.600658][   T10] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11
[  515.600680][   T10] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3

syzkaller[  515.600693][   T10] usb 7-1: config 0 interface 0 has no altsetting 0

syzkaller login: [  515.600711][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.653594][   T10] usb 7-1: config 0 descriptor??
[  518.303170][   T10] hkems 0003:2006:0118.0001: unknown main item tag 0x2
[  518.303198][   T10] hkems 0003:2006:0118.0001: unknown main item tag 0x0
[  518.303214][   T10] hkems 0003:2006:0118.0001: unknown main item tag 0x0
[  518.531750][   T10] hkems 0003:2006:0118.0001: implement() called with too large value 1 (n: 0)! (kworker/0:1)
[  518.559953][   T10] hkems 0003:2006:0118.0001: force feedback for EMS based devices by Ignaz Forster <ignaz.forster@gmx.de>
[  519.310559][   T10] input: HID 2006:0118 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:2006:0118.0001/input/input6
[  519.811692][ T9301] ip_tables: iptables: counters copy to user failed while replacing table
[  520.276466][ T9311] loop5: detected capacity change from 0 to 128
[  520.323637][ T9311] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  520.356875][ T9311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  521.389824][   T10] hkems 0003:2006:0118.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 2006:0118] on usb-dummy_hcd.6-1/input0
[  521.437561][   T10] usb 7-1: USB disconnect, device number 2
[  521.665082][ T9321] fido_id[9321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  521.871576][ T9330] loop4: detected capacity change from 0 to 512
[  521.906220][ T9330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  521.906236][ T9330] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  521.955408][ T5608] Bluetooth: hci4: unexpected event for opcode 0x0c25
[  521.955826][ T9330] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  521.956023][ T9330] EXT4-fs (loop4): orphan cleanup on readonly fs
[  522.032989][ T9331] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  522.117325][ T9330] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5
[  522.117380][ T9330] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  522.117392][ T9330] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.724: Failed to acquire dquot type 1
[  522.117403][ T9330] loop4: lost filesystem error report for type 5 error -117
[  522.127114][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  522.127127][    C0] EXT4-fs (loop4): initial error at time 1792082511: ext4_acquire_dquot:7120
[  522.127140][    C0] EXT4-fs (loop4): last error at time 1792082511: ext4_acquire_dquot:7120
[  522.151521][ T9330] EXT4-fs (loop4): Remounting filesystem read-only
[  522.215347][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  522.215365][  T147] Quota error (device loop4): write_blk: dquota write failed
[  522.215373][  T147] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[  522.215381][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  522.215390][  T147] Quota error (device loop4): write_blk: dquota write failed
[  522.215397][  T147] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  522.215445][  T147] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  522.215454][  T147] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  522.222688][ T9330] EXT4-fs (loop4): 1 truncate cleaned up
[  522.320849][ T9330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  522.692335][ T9340] netlink: 'syz.4.724': attribute type 13 has an invalid length.
[  523.128072][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.264102][   T33] audit: type=1326 audit(1792082514.104:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.734" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  524.267735][   T33] audit: type=1326 audit(1792082514.104:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.734" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  524.267762][   T33] audit: type=1326 audit(1792082514.104:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.734" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dba39e559 code=0x7ffc0000
[  531.854305][ T5737] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  532.003440][ T5737] usb 5-1: Using ep0 maxpacket: 8
[  532.004042][ T5737] usb 5-1: New USB device found: idVendor=2006, idProduct=0118, bcdDevice=0.00
[  532.004986][ T5737] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11
[  532.005018][ T5737] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  532.005032][ T5737] usb 5-1: config 0 interface 0 has no altsetting 0
[  532.005050][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.083183][ T5737] usb 5-1: config 0 descriptor??
[  533.365064][ T9423] capability: warning: `syz.0.756' uses 32-bit capabilities (legacy support in use)
[  533.456907][ T5737] hkems 0003:2006:0118.0002: unknown main item tag 0x2
[  533.456929][ T5737] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[  533.456944][ T5737] hkems 0003:2006:0118.0002: unknown main item tag 0x0
[  533.486321][ T5737] hkems 0003:2006:0118.0002: implement() called with too large value 1 (n: 0)! (kworker/0:6)
[  533.486393][ T5737] hkems 0003:2006:0118.0002: force feedback for EMS based devices by Ignaz Forster <ignaz.forster@gmx.de>
[  533.518299][ T5737] input: HID 2006:0118 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:2006:0118.0002/input/input7
[  533.682982][ T9428] loop1: detected capacity change from 0 to 512
[  533.738366][ T5737] hkems 0003:2006:0118.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 2006:0118] on usb-dummy_hcd.4-1/input0
[  533.785941][ T9428] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  533.824818][ T9428] EXT4-fs (loop1): 1 truncate cleaned up
[  533.825764][ T9428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  534.069198][ T5737] usb 5-1: USB disconnect, device number 6
[  534.410783][ T9437] fido_id[9437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  534.628152][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.095585][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.5.763'.
[  535.486258][ T9456] loop4: detected capacity change from 0 to 32768
[  536.596393][ T9456] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  536.659238][ T9456] XFS (loop4): Ending clean mount
[  537.006256][ T9471] comedi comedi3: dt2817: I/O base address or length out of range
[  538.035756][ T5605] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  540.053543][ T9485] db_root: cannot open: /dev/sequencer2
[  540.053555][ T9485] db_root: not a directory: /dev/sequencer2
[  542.153445][ T5674] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  542.764859][ T5674] usb 6-1: Using ep0 maxpacket: 8
[  542.766260][ T5674] usb 6-1: New USB device found: idVendor=2006, idProduct=0118, bcdDevice=0.00
[  542.781872][ T5674] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11
[  542.781891][ T5674] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  542.781905][ T5674] usb 6-1: config 0 interface 0 has no altsetting 0
[  542.781923][ T5674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.900361][ T5674] usb 6-1: config 0 descriptor??
[  545.086146][ T5674] hkems 0003:2006:0118.0003: unknown main item tag 0x2
[  545.086170][ T5674] hkems 0003:2006:0118.0003: unknown main item tag 0x0
[  545.086185][ T5674] hkems 0003:2006:0118.0003: unknown main item tag 0x0
[  545.466110][ T9512] netlink: 'syz.1.778': attribute type 1 has an invalid length.
[  545.486136][ T5674] hkems 0003:2006:0118.0003: implement() called with too large value 1 (n: 0)! (kworker/0:4)
[  545.486211][ T5674] hkems 0003:2006:0118.0003: force feedback for EMS based devices by Ignaz Forster <ignaz.forster@gmx.de>
[  545.533813][ T5674] input: HID 2006:0118 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:2006:0118.0003/input/input8
[  545.896233][ T5674] hkems 0003:2006:0118.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 2006:0118] on usb-dummy_hcd.5-1/input0
[  546.881104][ T5674] usb 6-1: USB disconnect, device number 4
[  546.966563][ T9518] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  548.106808][ T9521] bridge1: entered promiscuous mode
[  548.106826][ T9521] bridge1: entered allmulticast mode
[  548.355628][ T9524] fido_id[9524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  552.653574][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  553.402802][ T9545] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  555.101798][ T9572] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  555.794291][ T9584] loop6: detected capacity change from 0 to 8
[  557.575583][ T9590] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  562.896959][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  562.896999][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  563.603273][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'.
[  565.509690][ T9644] loop1: detected capacity change from 0 to 128
[  565.538910][ T9644] EXT4-fs (loop1): Test dummy encryption mode enabled
[  565.564668][ T9644] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  565.567167][ T9644] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  566.805687][ T9655] fscrypt: AES-256-XTS using blk-crypto-fallback
[  567.028181][ T5607] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  570.509721][ T9670] loop6: detected capacity change from 0 to 256
[  571.779750][ T5674] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  573.966311][ T5905] IPVS: starting estimator thread 0...
[  574.053484][ T9699] IPVS: using max 55 ests per chain, 132000 per kthread
[  574.065457][ T5737] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  575.153380][ T5737] usb 2-1: Using ep0 maxpacket: 16
[  575.160010][ T5737] usb 2-1: New USB device found: idVendor=046c, idProduct=14e8, bcdDevice=b.28
[  575.170423][ T5737] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  575.170437][ T5737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.170447][ T5737] usb 2-1: config 0 has no interface number 0
[  575.252527][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.252543][ T5737] usb 2-1: Product: syz
[  575.252551][ T5737] usb 2-1: Manufacturer: syz
[  575.252558][ T5737] usb 2-1: SerialNumber: syz
[  575.286332][ T5737] usb 2-1: config 0 descriptor??
[  575.301112][ T5737] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[  575.301191][ T5737] uvcvideo 2-1:0.105: No valid video chain found.
[  576.250575][ T9705] netlink: 44 bytes leftover after parsing attributes in process `syz.4.826'.
[  576.250592][ T9705] netlink: 43 bytes leftover after parsing attributes in process `syz.4.826'.
[  576.250600][ T9705] netlink: 'syz.4.826': attribute type 5 has an invalid length.
[  576.250607][ T9705] netlink: 43 bytes leftover after parsing attributes in process `syz.4.826'.
[  576.401874][ T4938] usb 2-1: USB disconnect, device number 8
[  580.829891][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056168800: rx timeout, send abort
[  581.330162][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056169000: rx timeout, send abort
[  581.331608][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056168800: abort rx timeout. Force session deactivation
[  581.619187][ T9731] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  581.830197][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056169000: abort rx timeout. Force session deactivation
[  582.029630][ T9735] loop6: detected capacity change from 0 to 512
[  583.420835][ T9743] netlink: 'syz.0.827': attribute type 267 has an invalid length.
[  583.505831][   T33] kauditd_printk_skb: 30 callbacks suppressed
[  583.505844][   T33] audit: type=1800 audit(1792082573.344:260): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.837" name="file1" dev="loop6" ino=145 res=0 errno=-22
[  584.256471][ T9748] loop6: detected capacity change from 0 to 512
[  584.336061][ T9748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  584.336133][ T9748] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  584.370639][ T9748] EXT4-fs (loop6): shut down requested (0)
[  586.746737][ T7059] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.778537][ T9781] loop0: detected capacity change from 0 to 512
[  586.779150][ T9781] ext4: Unknown parameter 'nouser_xattr'
[  587.199646][ T9784] loop6: detected capacity change from 0 to 40427
[  587.274129][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807de33c00: rx timeout, send abort
[  587.421832][ T9784] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  587.421848][ T9784] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  587.445094][ T9784] F2FS-fs (loop6): invalid crc value
[  587.489345][ T9784] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  587.515055][ T9784] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  587.515073][ T9784] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  587.774173][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807de33c00: abort rx timeout. Force session deactivation
[  587.774277][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807de33800: rx timeout, send abort
[  588.274306][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807de33800: abort rx timeout. Force session deactivation
[  588.504944][ T9797] syz.6.848: attempt to access beyond end of device
[  588.504944][ T9797] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  588.818077][ T7059] syz-executor: attempt to access beyond end of device
[  588.818077][ T7059] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  589.005308][ T7059] CPU: 0 UID: 0 PID: 7059 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  589.005329][ T7059] Tainted: [L]=SOFTLOCKUP
[  589.005333][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  589.005340][ T7059] Call Trace:
[  589.005345][ T7059]  <TASK>
[  589.005349][ T7059]  dump_stack_lvl+0xe8/0x150
[  589.005369][ T7059]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  589.005389][ T7059]  f2fs_write_end_bio+0x118e/0x15d0
[  589.005413][ T7059]  __submit_merged_bio+0x258/0x6a0
[  589.005428][ T7059]  ? rcu_is_watching+0x16/0xb0
[  589.005444][ T7059]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  589.005461][ T7059]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  589.005488][ T7059]  f2fs_write_data_pages+0x2a13/0x36e0
[  589.005518][ T7059]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  589.005536][ T7059]  ? is_bpf_text_address+0x292/0x2b0
[  589.005550][ T7059]  ? is_bpf_text_address+0x26/0x2b0
[  589.005577][ T7059]  ? stack_trace_save+0xa9/0x100
[  589.005589][ T7059]  ? __pfx_stack_trace_save+0x10/0x10
[  589.005614][ T7059]  ? lockdep_unlock+0x5c/0xd0
[  589.005624][ T7059]  ? __lock_acquire+0x1511/0x2de0
[  589.005649][ T7059]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  589.005661][ T7059]  do_writepages+0x338/0x560
[  589.005680][ T7059]  ? do_raw_spin_unlock+0xf5/0x200
[  589.005697][ T7059]  filemap_fdatawrite+0x1e9/0x2f0
[  589.005713][ T7059]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  589.005751][ T7059]  ? do_raw_spin_unlock+0xf5/0x200
[  589.005767][ T7059]  f2fs_sync_dirty_inodes+0x471/0x970
[  589.005787][ T7059]  f2fs_write_checkpoint+0x860/0x24d0
[  589.005817][ T7059]  kill_f2fs_super+0x2dc/0x700
[  589.005831][ T7059]  ? rcu_do_enqueue+0x616/0x870
[  589.005842][ T7059]  ? lockdep_hardirqs_on+0x7b/0x110
[  589.005854][ T7059]  ? __pfx_kill_f2fs_super+0x10/0x10
[  589.005873][ T7059]  ? __pfx_call_rcu+0x10/0x10
[  589.005889][ T7059]  ? shrinker_free+0x2a7/0x3b0
[  589.005909][ T7059]  deactivate_locked_super+0xbe/0x110
[  589.005926][ T7059]  cleanup_mnt+0x204/0x2a0
[  589.005940][ T7059]  task_work_run+0x1d9/0x260
[  589.005953][ T7059]  ? __pfx_task_work_run+0x10/0x10
[  589.005969][ T7059]  exit_to_user_mode_loop+0x204/0x770
[  589.005981][ T7059]  ? rcu_is_watching+0x16/0xb0
[  589.005996][ T7059]  do_syscall_64+0x328/0x520
[  589.006007][ T7059]  ? trace_irq_disable+0x3b/0x140
[  589.006018][ T7059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.006028][ T7059]  ? clear_bhb_loop+0x70/0xc0
[  589.006041][ T7059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.006051][ T7059] RIP: 0033:0x7f217019f797
[  589.006062][ T7059] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  589.006071][ T7059] RSP: 002b:00007ffeb76f4b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  589.006084][ T7059] RAX: 0000000000000000 RBX: 00007f2170234cf3 RCX: 00007f217019f797
[  589.006091][ T7059] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb76f4c40
[  589.006097][ T7059] RBP: 00007ffeb76f4c40 R08: 00007ffeb76f5c40 R09: 00000000ffffffff
[  589.006104][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb76f5cd0
[  589.006110][ T7059] R13: 00007f2170234cf3 R14: 000000000008f7de R15: 00007ffeb76f5d10
[  589.006126][ T7059]  </TASK>
[  589.006317][ T7059] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  593.623119][ T9815] sctp: [Deprecated]: syz.4.856 (pid 9815) Use of struct sctp_assoc_value in delayed_ack socket option.
[  593.623119][ T9815] Use struct sctp_sack_info instead
[  593.626409][ T9815] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  594.350239][ T9817] trusted_key: encrypted_key: key user:syz not found
[  595.108724][ T9821] loop0: detected capacity change from 0 to 4096
[  596.089843][ T5737] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  596.109343][ T9821] EXT4-fs (loop0): Test dummy encryption mode enabled
[  596.135780][ T9821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  596.353699][ T9827] netlink: 'syz.6.861': attribute type 4 has an invalid length.
[  596.353715][ T9827] netlink: 17 bytes leftover after parsing attributes in process `syz.6.861'.
[  596.533835][ T5737] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  596.539204][ T5737] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  596.539218][ T5737] usb 5-1: config 0 has no interface number 0
[  596.539239][ T5737] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  597.122082][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.122100][ T5737] usb 5-1: Product: syz
[  597.122107][ T5737] usb 5-1: Manufacturer: syz
[  597.122114][ T5737] usb 5-1: SerialNumber: syz
[  597.152861][ T5737] usb 5-1: config 0 descriptor??
[  597.175982][ T5737] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  598.942422][ T9834] hub 6-0:1.0: USB hub found
[  598.942584][ T9834] hub 6-0:1.0: 1 port detected
[  598.998028][ T5737] usb 5-1: USB disconnect, device number 7
[  599.019661][ T5737] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  599.047108][ T9842] loop1: detected capacity change from 0 to 256
[  599.047750][ T9842] exfat: Deprecated parameter 'namecase'
[  599.047776][ T9842] exfat: Deprecated parameter 'utf8'
[  599.072463][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.183632][ T9842] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  601.659870][ T9841] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  601.963536][ T9856] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  602.392769][ T9860] loop6: detected capacity change from 0 to 128
[  602.423503][ T9860] EXT4-fs (loop6): Test dummy encryption mode enabled
[  602.449575][ T9860] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  602.465968][ T9860] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  603.817291][ T7059] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  606.467054][ T9879] loop0: detected capacity change from 0 to 2048
[  606.571305][ T9880] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  607.453472][ T9888] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001
[  610.107389][ T9898] loop6: detected capacity change from 0 to 40427
[  610.129555][ T9898] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  610.129570][ T9898] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  610.148833][ T9898] F2FS-fs (loop6): invalid crc value
[  610.190716][ T9898] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  610.206181][ T9898] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  610.206199][ T9898] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  610.298454][ T9880] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  610.298482][ T9880] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  610.591200][ T9905] loop1: detected capacity change from 0 to 32768
[  611.394221][ T9907] syz.6.879: attempt to access beyond end of device
[  611.394221][ T9907] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  611.406158][ T9905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.880 (9905)
[  611.601884][ T9906] xt_hashlimit: size too large, truncated to 1048576
[  611.670728][ T9905] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  611.670832][ T9905] BTRFS info (device loop1): using sha256 checksum algorithm
[  611.696041][ T9880] Remounting filesystem read-only
[  611.750241][ T5604] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  611.929710][ T7059] syz-executor: attempt to access beyond end of device
[  611.929710][ T7059] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  612.003418][ T9905] BTRFS info (device loop1): enabling ssd optimizations
[  612.003454][ T9905] BTRFS info (device loop1): turning on sync discard
[  612.003465][ T9905] BTRFS info (device loop1): enabling free space tree
[  612.003526][ T9905] BTRFS info (device loop1): use zlib compression, level 3
[  612.036007][ T7059] CPU: 0 UID: 0 PID: 7059 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  612.036034][ T7059] Tainted: [L]=SOFTLOCKUP
[  612.036041][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  612.036052][ T7059] Call Trace:
[  612.036059][ T7059]  <TASK>
[  612.036068][ T7059]  dump_stack_lvl+0xe8/0x150
[  612.036101][ T7059]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  612.036122][ T7059]  f2fs_write_end_bio+0x118e/0x15d0
[  612.036143][ T7059]  __submit_merged_bio+0x258/0x6a0
[  612.036158][ T7059]  ? rcu_is_watching+0x16/0xb0
[  612.036175][ T7059]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  612.036191][ T7059]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  612.036218][ T7059]  f2fs_write_data_pages+0x2a13/0x36e0
[  612.036248][ T7059]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  612.036265][ T7059]  ? is_bpf_text_address+0x292/0x2b0
[  612.036279][ T7059]  ? is_bpf_text_address+0x26/0x2b0
[  612.036307][ T7059]  ? stack_trace_save+0xa9/0x100
[  612.036318][ T7059]  ? __pfx_stack_trace_save+0x10/0x10
[  612.036344][ T7059]  ? lockdep_unlock+0x5c/0xd0
[  612.036353][ T7059]  ? __lock_acquire+0x1511/0x2de0
[  612.036378][ T7059]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  612.036389][ T7059]  do_writepages+0x338/0x560
[  612.036409][ T7059]  ? do_raw_spin_unlock+0xf5/0x200
[  612.036425][ T7059]  filemap_fdatawrite+0x1e9/0x2f0
[  612.036442][ T7059]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  612.036479][ T7059]  ? do_raw_spin_unlock+0xf5/0x200
[  612.036495][ T7059]  f2fs_sync_dirty_inodes+0x471/0x970
[  612.036515][ T7059]  f2fs_write_checkpoint+0x860/0x24d0
[  612.036546][ T7059]  kill_f2fs_super+0x2dc/0x700
[  612.036560][ T7059]  ? rcu_do_enqueue+0x616/0x870
[  612.036571][ T7059]  ? lockdep_hardirqs_on+0x7b/0x110
[  612.036582][ T7059]  ? __pfx_kill_f2fs_super+0x10/0x10
[  612.036601][ T7059]  ? __pfx_call_rcu+0x10/0x10
[  612.036618][ T7059]  ? shrinker_free+0x2a7/0x3b0
[  612.036633][ T7059]  deactivate_locked_super+0xbe/0x110
[  612.036651][ T7059]  cleanup_mnt+0x204/0x2a0
[  612.036665][ T7059]  task_work_run+0x1d9/0x260
[  612.036678][ T7059]  ? __pfx_task_work_run+0x10/0x10
[  612.036697][ T7059]  exit_to_user_mode_loop+0x204/0x770
[  612.036709][ T7059]  ? rcu_is_watching+0x16/0xb0
[  612.036724][ T7059]  do_syscall_64+0x328/0x520
[  612.036735][ T7059]  ? trace_irq_disable+0x3b/0x140
[  612.036747][ T7059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.036757][ T7059]  ? clear_bhb_loop+0x70/0xc0
[  612.036769][ T7059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.036779][ T7059] RIP: 0033:0x7f217019f797
[  612.036791][ T7059] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  612.036800][ T7059] RSP: 002b:00007ffeb76f4b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  612.036812][ T7059] RAX: 0000000000000000 RBX: 00007f2170234cf3 RCX: 00007f217019f797
[  612.036819][ T7059] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb76f4c40
[  612.036825][ T7059] RBP: 00007ffeb76f4c40 R08: 00007ffeb76f5c40 R09: 00000000ffffffff
[  612.036832][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb76f5cd0
[  612.036839][ T7059] R13: 00007f2170234cf3 R14: 0000000000095525 R15: 00007ffeb76f5d10
[  612.036855][ T7059]  </TASK>
[  612.121755][ T7059] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  613.415443][   T33] audit: type=1800 audit(1792082602.714:261): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="file1" dev="loop1" ino=260 res=0 errno=-22
[  613.587629][   T33] audit: type=1800 audit(1792082603.424:262): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="file2" dev="loop1" ino=261 res=0 errno=-22
[  614.273207][ T5607] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  614.507344][ T5674] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  614.730225][ T9942] netlink: 132 bytes leftover after parsing attributes in process `syz.6.883'.
[  614.919008][ T9943] IPVS: lc: FWM 3 0x00000003 - no destination available
[  614.970191][ T5674] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  617.187286][ T9950] netlink: 132 bytes leftover after parsing attributes in process `syz.5.897'.
[  620.379787][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'.
[  620.715028][ T9969] loop1: detected capacity change from 0 to 512
[  621.699647][ T9969] vfat: Unknown parameter 'ÿÿÿÿÿ0xffffffffffffffff'
[  622.978421][ T9977] loop4: detected capacity change from 0 to 32768
[  623.012563][   T33] audit: type=1800 audit(1792082612.844:263): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.894" name=08 dev="sda1" ino=2049 res=0 errno=-22
[  624.418719][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  624.418754][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  624.468048][ T9977] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  626.160627][ T5605] ocfs2: Unmounting device (7,4) on (node local)
[  626.430822][ T9996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.902'.
[  626.594648][ T5737] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  626.743586][ T5737] usb 2-1: Using ep0 maxpacket: 8
[  626.762440][ T5737] usb 2-1: New USB device found: idVendor=2006, idProduct=0118, bcdDevice=0.00
[  627.055580][ T5737] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11
[  627.055601][ T5737] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  627.055616][ T5737] usb 2-1: config 0 interface 0 has no altsetting 0
[  627.055634][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.423188][ T5737] usb 2-1: config 0 descriptor??
[  628.645137][T10007] hpfs: hpfs_map_sector(): read error
[  629.202096][ T5737] hkems 0003:2006:0118.0005: unknown main item tag 0x2
[  629.202121][ T5737] hkems 0003:2006:0118.0005: unknown main item tag 0x0
[  629.202136][ T5737] hkems 0003:2006:0118.0005: unknown main item tag 0x0
[  629.202867][ T5737] hkems 0003:2006:0118.0005: implement() called with too large value 1 (n: 0)! (kworker/0:6)
[  629.202934][ T5737] hkems 0003:2006:0118.0005: force feedback for EMS based devices by Ignaz Forster <ignaz.forster@gmx.de>
[  630.333819][ T5737] input: HID 2006:0118 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:2006:0118.0005/input/input9
[  630.961524][T10020] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  631.024687][ T5737] hkems 0003:2006:0118.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 2006:0118] on usb-dummy_hcd.1-1/input0
[  631.070350][ T5737] usb 2-1: USB disconnect, device number 9
[  632.121587][T10025] fido_id[10025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  632.337138][T10033] loop5: detected capacity change from 0 to 256
[  633.501318][T10043] netlink: 132 bytes leftover after parsing attributes in process `syz.6.914'.
[  633.513358][ T5737] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  633.684288][ T5737] usb 2-1: Using ep0 maxpacket: 8
[  633.719619][ T5737] usb 2-1: device descriptor read/all, error -71
[  634.892479][T10051] No such timeout policy "syz1"
[  635.213882][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056b9b800: rx timeout, send abort
[  635.713918][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056b9b800: abort rx timeout. Force session deactivation
[  635.714276][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056b9bc00: rx timeout, send abort
[  636.214304][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056b9bc00: abort rx timeout. Force session deactivation
[  639.632092][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.920'.
[  640.089397][T10063] loop1: detected capacity change from 0 to 8192
[  641.079394][T10082] loop5: detected capacity change from 0 to 2048
[  641.135280][T10082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  641.731131][T10096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.926'.
[  645.571781][T10109] jffs2: notice: (10109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  645.747434][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  645.904688][T10123] loop5: detected capacity change from 0 to 2048
[  645.961775][T10123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  646.499103][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  647.775707][T10147] loop4: detected capacity change from 0 to 512
[  647.797920][T10147] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.941: bad orphan inode 15
[  647.797940][T10147] loop4: lost filesystem error report for type 5 error -117
[  647.798105][T10147] ext4_test_bit(bit=14, block=5) = 0
[  647.799010][T10147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  647.922332][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  647.961028][T10150] netlink: 132 bytes leftover after parsing attributes in process `syz.5.942'.
[  648.027049][T10154] EXT4-fs error (device loop4): __ext4_new_inode:1083: comm syz.4.941: reserved inode found cleared - inode=1
[  648.069729][T10147] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  648.104150][    T9] usb 1-1: Using ep0 maxpacket: 32
[  648.104640][    T9] usb 1-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  648.106349][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  648.106372][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 130, setting to 64
[  648.160024][    T9] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  648.160039][    T9] usb 1-1: Product: syz
[  648.160046][    T9] usb 1-1: Manufacturer: syz
[  648.160054][    T9] usb 1-1: SerialNumber: syz
[  648.188209][    T9] usb 1-1: config 0 descriptor??
[  648.228160][T10147] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem
[  648.277678][    T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  648.461536][    T9] usb 1-1: USB disconnect, device number 5
[  648.462615][   T63] usb 1-1: Failed to submit usb control message: -71
[  648.462635][   T63] usb 1-1: unable to send the bmi data to the device: -71
[  648.462645][   T63] usb 1-1: unable to get target info from device
[  648.462663][   T63] usb 1-1: could not get target info (-71)
[  648.462958][   T63] usb 1-1: could not probe fw (-71)
[  648.591654][ T5605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.455264][T10161] loop5: detected capacity change from 0 to 32768
[  651.030958][T10174] tipc: New replicast peer: 255.255.255.255
[  651.031643][T10174] tipc: Enabled bearer <udp:syz2>, priority 10
[  653.076885][T10196] loop4: detected capacity change from 0 to 256
[  653.101845][    T9] tipc: Node number set to 11922831
[  653.141603][T10197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.954'.
[  653.440763][T10191] nvme_rdma: malformed address passed: 127.:4420
[  653.481264][T10209] loop1: detected capacity change from 0 to 512
[  653.520904][T10209] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  654.643406][T10214] netlink: 'syz.1.957': attribute type 2 has an invalid length.
[  658.891532][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805632a000: rx timeout, send abort
[  659.391569][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805632a000: abort rx timeout. Force session deactivation
[  659.391688][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805632bc00: rx timeout, send abort
[  659.891712][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805632bc00: abort rx timeout. Force session deactivation
[  661.832065][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'.
[  661.832160][T10256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  663.077837][T10256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.022216][T10265] ip6tnl1: entered promiscuous mode
[  664.022231][T10265] ip6tnl1: entered allmulticast mode
[  669.787482][T10295] netlink: 'syz.5.981': attribute type 4 has an invalid length.
[  669.787498][T10295] netlink: 17 bytes leftover after parsing attributes in process `syz.5.981'.
[  674.294931][T10329] loop5: detected capacity change from 0 to 128
[  674.316370][T10329] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  674.332018][T10329] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  674.385532][T10323] ceph: No mds server is up or the cluster is laggy
[  677.292292][ T7326] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  678.523166][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'.
[  678.717924][T10363] comedi comedi1: Minor 19 could not be opened
[  684.860550][T10399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1008'.
[  685.775254][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  685.775288][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  688.767550][T10420] Cannot find del_set index 14804 as target
[  691.701058][T10423] loop4: detected capacity change from 0 to 256
[  692.832241][T10428] 
[  692.834578][T10428] ======================================================
[  692.841570][T10428] WARNING: possible circular locking dependency detected
[  692.848565][T10428] syzkaller #0 Tainted: G             L      
[  692.854600][T10428] ------------------------------------------------------
[  692.861588][T10428] syz.5.1006/10428 is trying to acquire lock:
[  692.867622][T10428] ffff88804b251740 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x46/0x80
[  692.877335][T10428] 
[  692.877335][T10428] but task is already holding lock:
[  692.884677][T10428] ffff88802ade1ca0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700
[  692.894382][T10428] 
[  692.894382][T10428] which lock already depends on the new lock.
[  692.894382][T10428] 
[  692.904758][T10428] 
[  692.904758][T10428] the existing dependency chain (in reverse order) is:
[  692.913743][T10428] 
[  692.913743][T10428] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}:
[  692.921529][T10428]        __d_alloc_parallel+0xc32/0x1700
[  692.927138][T10428]        __lookup_slow+0x82/0x2f0
[  692.932135][T10428]        lookup_slow+0x59/0x80
[  692.936892][T10428]        link_path_walk+0xd22/0x1910
[  692.942171][T10428]        path_openat+0x1b7/0x20f0
[  692.947185][T10428]        do_file_open+0x258/0x570
[  692.952183][T10428]        do_sys_openat2+0x115/0x200
[  692.957357][T10428]        __x64_sys_openat+0x138/0x170
[  692.962703][T10428]        do_syscall_64+0x166/0x520
[  692.967791][T10428]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.974179][T10428] 
[  692.974179][T10428] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}:
[  692.982574][T10428]        down_read_killable+0x4b/0x3b0
[  692.988010][T10428]        iterate_dir+0x287/0x880
[  692.992922][T10428]        ovl_dir_read+0x141/0x4a0
[  692.997919][T10428]        ovl_dir_read_merged+0x2fb/0x520
[  693.003526][T10428]        ovl_check_empty_dir+0xbd/0x500
[  693.009046][T10428]        ovl_do_remove+0x1ad/0xdc0
[  693.014132][T10428]        vfs_rmdir+0x3e6/0x6a0
[  693.018872][T10428]        filename_rmdir+0x292/0x520
[  693.024043][T10428]        __se_sys_unlinkat+0x71/0x1a0
[  693.029389][T10428]        do_syscall_64+0x166/0x520
[  693.034473][T10428]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.040860][T10428] 
[  693.040860][T10428] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[  693.049515][T10428]        __lock_acquire+0x164c/0x2de0
[  693.054864][T10428]        lock_acquire+0x115/0x350
[  693.059860][T10428]        down_read+0x45/0x320
[  693.064532][T10428]        lookup_slow+0x46/0x80
[  693.069271][T10428]        ovl_lookup_single+0x323/0xe90
[  693.074708][T10428]        ovl_lookup_layer+0x377/0x440
[  693.080056][T10428]        ovl_lookup+0x9ae/0x1c80
[  693.084967][T10428]        lookup_open+0x94b/0x1970
[  693.089964][T10428]        path_openat+0x70c/0x20f0
[  693.094961][T10428]        do_file_open+0x258/0x570
[  693.099958][T10428]        do_sys_openat2+0x115/0x200
[  693.105131][T10428]        __x64_sys_openat+0x138/0x170
[  693.110478][T10428]        do_syscall_64+0x166/0x520
[  693.115565][T10428]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.121972][T10428] 
[  693.121972][T10428] other info that might help us debug this:
[  693.121972][T10428] 
[  693.132173][T10428] Chain exists of:
[  693.132173][T10428]   &ovl_i_mutex_dir_key[depth] --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP
[  693.132173][T10428] 
[  693.147190][T10428]  Possible unsafe locking scenario:
[  693.147190][T10428] 
[  693.154610][T10428]        CPU0                    CPU1
[  693.159948][T10428]        ----                    ----
[  693.165287][T10428]   lock(DCACHE_PAR_LOOKUP);
[  693.169853][T10428]                                lock(&type->i_mutex_dir_key#5);
[  693.177542][T10428]                                lock(DCACHE_PAR_LOOKUP);
[  693.184620][T10428]   rlock(&ovl_i_mutex_dir_key[depth]);
[  693.190149][T10428] 
[  693.190149][T10428]  *** DEADLOCK ***
[  693.190149][T10428] 
[  693.198263][T10428] locks held by syz.5.1006/10428: 2, last CPU#0:
[  693.204575][T10428]  #0: ffff88804b2506d8 (&ovl_i_mutex_dir_key[depth]#2){.+.+}-{4:4}, at: lookup_open+0x221/0x1970
[  693.215167][T10428]  #1: ffff88802ade1ca0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700
[  693.225307][T10428] 
[  693.225307][T10428] stack backtrace:
[  693.231172][T10428] CPU: 0 UID: 0 PID: 10428 Comm: syz.5.1006 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  693.242162][T10428] Tainted: [L]=SOFTLOCKUP
[  693.246459][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  693.256491][T10428] Call Trace:
[  693.259749][T10428]  <TASK>
[  693.262661][T10428]  dump_stack_lvl+0xe8/0x150
[  693.267232][T10428]  print_circular_bug+0x2e2/0x300
[  693.272235][T10428]  check_noncircular+0x12f/0x150
[  693.277166][T10428]  __lock_acquire+0x164c/0x2de0
[  693.281995][T10428]  ? lock_acquire+0x115/0x350
[  693.286648][T10428]  lock_acquire+0x115/0x350
[  693.291124][T10428]  ? lookup_slow+0x46/0x80
[  693.295519][T10428]  down_read+0x45/0x320
[  693.299651][T10428]  ? lookup_slow+0x46/0x80
[  693.304040][T10428]  ? d_lookup+0x8a/0xa0
[  693.308183][T10428]  lookup_slow+0x46/0x80
[  693.312424][T10428]  ovl_lookup_single+0x323/0xe90
[  693.317356][T10428]  ? __pfx_ovl_lookup_single+0x10/0x10
[  693.322792][T10428]  ? rcu_is_watching+0x16/0xb0
[  693.327544][T10428]  ovl_lookup_layer+0x377/0x440
[  693.332383][T10428]  ? __kmalloc_noprof+0x387/0x710
[  693.337396][T10428]  ? ovl_lookup+0x762/0x1c80
[  693.341967][T10428]  ovl_lookup+0x9ae/0x1c80
[  693.346361][T10428]  ? lock_acquire+0x115/0x350
[  693.351021][T10428]  ? __pfx_ovl_lookup+0x10/0x10
[  693.355849][T10428]  ? __d_lookup+0x66/0x790
[  693.360260][T10428]  ? __pfx___d_alloc_parallel+0x10/0x10
[  693.365783][T10428]  ? d_lookup+0x1f/0xa0
[  693.369917][T10428]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  693.376051][T10428]  ? lockdep_hardirqs_on+0x7b/0x110
[  693.381228][T10428]  lookup_open+0x94b/0x1970
[  693.385718][T10428]  path_openat+0x70c/0x20f0
[  693.390202][T10428]  do_file_open+0x258/0x570
[  693.394684][T10428]  ? __pfx_do_file_open+0x10/0x10
[  693.399686][T10428]  ? _raw_spin_unlock+0x28/0x50
[  693.404518][T10428]  ? alloc_fd+0x6af/0x760
[  693.408828][T10428]  do_sys_openat2+0x115/0x200
[  693.413482][T10428]  ? __se_sys_futex+0x3a8/0x450
[  693.418311][T10428]  ? __pfx_do_sys_openat2+0x10/0x10
[  693.423485][T10428]  ? rcu_is_watching+0x16/0xb0
[  693.428232][T10428]  __x64_sys_openat+0x138/0x170
[  693.433059][T10428]  do_syscall_64+0x166/0x520
[  693.437626][T10428]  ? trace_irq_disable+0x3b/0x140
[  693.442628][T10428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.448668][T10428]  ? clear_bhb_loop+0x70/0xc0
[  693.453321][T10428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.459188][T10428] RIP: 0033:0x7fa19259e559
[  693.463579][T10428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.483160][T10428] RSP: 002b:00007fa1934aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  693.491545][T10428] RAX: ffffffffffffffda RBX: 00007fa192825fa0 RCX: 00007fa19259e559
[  693.499491][T10428] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000009
[  693.507433][T10428] RBP: 00007fa1926358b0 R08: 0000000000000000 R09: 0000000000000000
[  693.515378][T10428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  693.523324][T10428] R13: 00007fa192826038 R14: 00007fa192825fa0 R15: 00007ffd42f78a48
[  693.531278][T10428]  </TASK>
[  694.376597][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'.