last executing test programs:

1m19.814819713s ago: executing program 4 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
unshare(0x2040400)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x102)
mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0xa, &(0x7f0000000100)={[{@subsystem='memory'}, {@subsystem='cpuacct'}]})
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x20, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x800, 0x50)
fallocate(0xffffffffffffffff, 0x11, 0x0, 0x3fffe)

1m13.414336272s ago: executing program 4 (id=623):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m13.288321273s ago: executing program 2 (id=624):
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca0000000109021200017f00c0000904"], 0x0)

1m13.06397725s ago: executing program 4 (id=628):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0)

1m10.361457366s ago: executing program 2 (id=630):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

1m9.708749218s ago: executing program 4 (id=632):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103})
syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1, 0x5bd, &(0x7f0000000680)="$eJzs3U9sHFcdB/Dfm3jtdRonmzR1CwR1paoqCiKKHdomNhKYGFeIqLFwHBFOmHgTlvpPZCfIqQD1BgckxIEDBySEhBSBQIgj4kBPcEDcgXt74OIDEhIHhGZ21ruxt8Sqs3Fdfz5SvLNvfvPmzRwifffNvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOLzX5g6P5b2exQAAABAP70+9+Xz4/I/AAAAfKhdM/8PAAAAAAAAAAddiiy+Fym+NLmZjhXvW6pXmiv3NuanZ3ofNpyKI48U9fm/6tj4hU+//MqrF9uv///4x+0jcXXu2lT98urynbXG+npjsT6/0ry5utjYdQ97PX67s8UNqC+/cW/x1q31+vi5Cw/t3qi9M/TUaG3y4sSNWrt2fnpmZq6rZqDyvs++gyc8AAAADrfByOL1SPH2n3+TRiIii71n4Ud8dtBvw1HL83dxEfPTM8WFLDUXVu7mO2fbQbhWXmtpsJ2Rn0AW35OfRZzKxzoo0QMAALB7lSIFp3jtd5vpeEQcaefgTxYLA773gfUnOMge8nGeiYgX4gBkdgAAANhnQ5HFTyPF8olqnMgz834PCAAAAHjsBiKLVyPFvyY3U614HiAizs5Pz9SvXK9/ceXWalftbCpn1A/69wOeJM8mAAAA8AFQjSxGiif+N9PJ/R4MAAAA0BfDkcVfI8XHnv9Wsa5cFOvSn5i8NDg+1r3C3LOP6CevPRcRz+zyO/mVcq3B2TSbUvb4rwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDZShl8d9I8Z3r9U5jLUUWkdpvq/mf2fS54/szRAAAAAAAAADgUVIWP44UP6lspiwiNmrvDD01Wpu8OHGjdiSOFA8BpO76q3PXpuqXV5fvrDXW1xuL9fmV5s3VxcZuT1e90ly5tzE/PdOXi3mk4T6Pf7h6efXO/bXm7W/c7bn/aHXq6+t31xZu9t4dw1GPONLdcrYY8Pz0TDHopebCSnHobNrtiAEAACCikrL4T6R4sf4gbeXO1vP/A603nTT6i89E3l6obs+fxecGx4vPDVrbJyYvVcZf6t7uGVnPFoE6D7gzc13NA5Wdpfk5U8piKlK8O/FcMbIUR2NHZo5W3Uik+OFXz5R12WDUItrd1lo93mouNc7ntT+KFKdvtGujqK2WtU93asfy2qG832sP1w6Xtac7teN57Uyk+MdrvWuf6dReyGs3IsWDB/V27dG8dqSsHe3Unru5urTY61YCAAAAAAAAcHhVUha/ihR//EM9tefGB1rzzzvn/7/d+S7AW9s7eo85/73O/9e62t4q5/V/kI/im88Vc/nF/H+t9/z/VKT4y9UzZV1r7n2w3H+y+NuZ/78eKd5efbh2qKw91akd2/WNBQAAgA+QPP+fiRTf/9PvB9rZuMz/ZQLvnf8/OrCtoz7l/5Ndbfk51++/+cbC0lJjzYYNGza2Nvb+fyEAAHzY5fm/ESl+/re/b813l/n/WOtdJ///+7ud/D+xvaM+5f9TXW0T5VqElYGI6t3lO5XRiOr6/Tc/1VxeuN243VgZu/TK+MXx82MvVwbbc/udrT3fKgAAADiw8vw/Fyl+/c9fbq13t5v5/6PbO+pT/n+6qy0/Z2fSb8+XDgAAAIdGnv8vRYqvPP/brXXpH87/ndSe5//2+v+feKH12vnNgP7k/9NdbbXyvDs+ewAAAAAAAAAAAAAAAAAAAIADrpKyeClSvPjuQBop23az/t/i9o769P3/0a62xXgyv/+355sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcSllk0YwUH392M302b/haxLHuVwAAAODA+18AAAD//0qnGWg=")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc10700", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]})
write(0xffffffffffffffff, &(0x7f00000009c0)=';', 0x1)

1m8.629715653s ago: executing program 2 (id=635):
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)

1m6.373803923s ago: executing program 4 (id=637):
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)

1m6.320308547s ago: executing program 2 (id=638):
syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1, 0x5bd, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc10700", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]})
write(r0, &(0x7f00000009c0)=';', 0x1)

1m4.837159176s ago: executing program 4 (id=641):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x47}, 0x80, 0x0}, 0x240428f8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x800)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @local, 0xffffffff}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
socket$nl_route(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020304000100090104006bd648c610112f01fe80000000000000000000000000002eff0200000000000000000000000000011cb9"], 0x1043)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

1m4.055780557s ago: executing program 32 (id=641):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x47}, 0x80, 0x0}, 0x240428f8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x800)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @local, 0xffffffff}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
socket$nl_route(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020304000100090104006bd648c610112f01fe80000000000000000000000000002eff0200000000000000000000000000011cb9"], 0x1043)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

1m4.039906859s ago: executing program 2 (id=644):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m3.212200285s ago: executing program 2 (id=645):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

1m1.51475142s ago: executing program 33 (id=645):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

4.750803764s ago: executing program 0 (id=766):
syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
r0 = socket(0x10, 0x40000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$usbfs(0x0, 0x6, 0x142)
ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000240)=0x8)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000001c0))
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x208200, 0x0)
dup3(r5, r4, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0xf4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

3.52418957s ago: executing program 6 (id=776):
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)

3.414289289s ago: executing program 3 (id=778):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20008800)

3.176045338s ago: executing program 6 (id=780):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x63003, 0x40)
write$cgroup_subtree(r4, 0x0, 0x2f20)

3.175553068s ago: executing program 1 (id=781):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x4, 0x30}, 0xc)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x201, 0x2, 0x10000}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87)

3.111805193s ago: executing program 5 (id=782):
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0x6000004, 0x0, 0x0, 0xdd, 0x6})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.01729983s ago: executing program 3 (id=783):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2.947013836s ago: executing program 1 (id=784):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x200)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x101, 0x6})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

2.726859944s ago: executing program 3 (id=785):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000001c0)={0x2})

2.453170775s ago: executing program 3 (id=786):
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

2.387221471s ago: executing program 1 (id=787):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0xc)

2.243764391s ago: executing program 3 (id=788):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x4f23, 0x5, 0x10000, 0x1, 0x4, 0x856, 0x8, 0xc3a, 0x20a, 0x1, 0x2, 0x3c, 0x1001, 0x1, 0x4, 0x102, 0x0, 0x1a449, 0x1, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x6, 0x6, 0x1, 0xfffffff8]})

2.01323173s ago: executing program 6 (id=789):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000025, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eaf", 0x3}], 0x1}}], 0x1, 0x0)

1.942927705s ago: executing program 3 (id=790):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c500000000000109022400010000"], 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket(0x10, 0x5, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, r4)
fcntl$setpipe(r1, 0x407, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
ioctl$TCSETS(r5, 0x5402, 0x0)
r6 = dup(r5)
write$UHID_INPUT(r6, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.927458267s ago: executing program 1 (id=791):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x6, 0xfff1}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884)

1.781341478s ago: executing program 5 (id=792):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x80c00100000000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

1.75325122s ago: executing program 0 (id=793):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
ioctl$TCSETS(r0, 0x89f0, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"})

1.732247832s ago: executing program 6 (id=794):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x0, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"])

1.520760019s ago: executing program 5 (id=795):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

1.51079225s ago: executing program 1 (id=796):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}}, 0x0, 0x0, 0x2f, 0x0, "69786d158bd18fffc24718156d1203c4c2cdc7d49dbe9e18437798c76e17ec1d2ea94ed825114f5367907f53a2be8188b1f1d81dba318258dd4b47e2ba6af047e7bbe523192993af972fe638669cabad"}, 0xd8)

1.438717985s ago: executing program 5 (id=797):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvfrom$llc(r0, 0x0, 0x0, 0x22, 0x0, 0x0)

1.389301079s ago: executing program 6 (id=798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_getnexthop={0x28, 0x6a, 0x601, 0x70bd25, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44050}, 0xc044)

1.37428094s ago: executing program 0 (id=799):
socket$nl_generic(0x10, 0x3, 0x10)
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r3)
dup2(r2, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

1.26124484s ago: executing program 1 (id=800):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

1.189223195s ago: executing program 6 (id=801):
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

1.119099091s ago: executing program 0 (id=802):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x2, @multicast2}}}, 0x88)

775.722488ms ago: executing program 0 (id=803):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x6e45491b}}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x401, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000002, 0x0, 0x1c, 0x0, 0x1, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

433.032895ms ago: executing program 0 (id=804):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
close(0x3)

313.053465ms ago: executing program 5 (id=805):
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x7, 0xff])
socket$nl_xfrm(0x10, 0x3, 0x6)
io_setup(0x7, &(0x7f0000000140))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r2, 0x9dffffff}}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x501, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e0d05c9"], 0x10)

0s ago: executing program 5 (id=806):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

ink becomes ready
[   78.851094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.903968][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.915090][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.929638][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.938707][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.964100][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.987108][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.998776][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.009603][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.020095][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.030842][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.040901][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.051974][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.061944][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.072796][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.081911][ T4285] Bluetooth: hci1: command 0x0419 tx timeout
[   79.085371][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.110744][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.120080][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.129824][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.142302][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.153697][ T4285] Bluetooth: hci0: command 0x0419 tx timeout
[   79.159739][ T4285] Bluetooth: hci4: command 0x0419 tx timeout
[   79.166534][ T4283] Bluetooth: hci3: command 0x0419 tx timeout
[   79.166555][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[   79.172903][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.188961][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.199783][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.209884][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.223025][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.233400][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.244237][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.255963][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.288108][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.298755][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.312432][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.321262][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.330846][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.340954][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.395362][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.435590][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.469421][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.509426][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.518316][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.550166][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.622546][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.679284][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.739516][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.757787][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.767133][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.804611][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.876077][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.892119][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.915350][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.985130][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.001199][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.011384][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.227759][ T4412] Bluetooth: MGMT ver 1.22
[   81.934850][ T4406] device syzkaller0 entered promiscuous mode
[   82.123877][ T4422] af_packet: tpacket_rcv: packet too big, clamped from 7844 to 3952. macoff=96
[   83.987535][ T4439] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[   84.003659][ T4440] device syzkaller0 entered promiscuous mode
[   86.606084][   T14] cfg80211: failed to load regulatory.db
[   88.164081][ T4480] tipc: Started in network mode
[   88.448426][ T4480] tipc: Node identity 7e1805153f4b, cluster identity 4711
[   88.484281][ T4480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.491242][ T4487] device syzkaller0 entered promiscuous mode
[   88.574252][ T4480] tipc: Resetting bearer <eth:syzkaller0>
[   88.640348][ T4479] tipc: Resetting bearer <eth:syzkaller0>
[   88.668492][ T4479] tipc: Disabling bearer <eth:syzkaller0>
[   89.795771][ T4502] device syzkaller0 entered promiscuous mode
[   89.813036][ T4504] device syzkaller0 entered promiscuous mode
[   93.411624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.684338][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   93.692717][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   93.701417][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.709708][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.718288][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.726584][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   93.735258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   93.743650][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   93.752303][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   97.477382][ T4564] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[   98.009853][ T4564] loop3: detected capacity change from 0 to 40427
[   98.042931][ T4564] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   98.051030][ T4564] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   98.085787][ T4564] F2FS-fs (loop3): invalid crc value
[   98.803485][ T4564] F2FS-fs (loop3): Found nat_bits in checkpoint
[   98.883164][ T4564] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   98.890550][ T4564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   99.850615][ T4279] syz-executor: attempt to access beyond end of device
[   99.850615][ T4279] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  100.024045][ T4595] tipc: Started in network mode
[  100.029006][ T4595] tipc: Node identity e21e60400132, cluster identity 4711
[  100.069751][ T4595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.193498][ T4595] tipc: Resetting bearer <eth:syzkaller0>
[  100.292771][ T4600] device syzkaller0 entered promiscuous mode
[  100.299156][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  100.325827][ T4594] tipc: Resetting bearer <eth:syzkaller0>
[  100.558472][ T4594] tipc: Disabling bearer <eth:syzkaller0>
[  104.394819][ T4640] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  104.704570][ T4640] loop0: detected capacity change from 0 to 40427
[  104.715461][ T4640] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  104.724464][ T4640] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  104.737774][ T4640] F2FS-fs (loop0): invalid crc value
[  104.738125][ T4642] loop4: detected capacity change from 0 to 512
[  104.813334][ T4640] F2FS-fs (loop0): Found nat_bits in checkpoint
[  104.900922][ T4640] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  104.908250][ T4640] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  105.248615][ T4642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.59: inode #1: comm syz.4.59: iget: illegal inode #
[  106.083563][ T4642] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.59: error while reading EA inode 1 err=-117
[  106.158757][ T4642] EXT4-fs (loop4): 1 orphan inode deleted
[  106.165081][ T4642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  106.257343][ T4666] loop1: detected capacity change from 0 to 512
[  106.658969][ T4666] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.64: inode #1: comm syz.1.64: iget: illegal inode #
[  107.182214][ T4666] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.64: error while reading EA inode 1 err=-117
[  107.221920][ T4666] EXT4-fs (loop1): 1 orphan inode deleted
[  107.227740][ T4666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  107.376739][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  107.876973][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  108.851531][ T4694] loop3: detected capacity change from 0 to 512
[  108.919691][ T4694] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.72: inode #1: comm syz.3.72: iget: illegal inode #
[  108.961175][ T4694] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.72: error while reading EA inode 1 err=-117
[  109.015511][ T4694] EXT4-fs (loop3): 1 orphan inode deleted
[  109.071529][ T4694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  109.198518][ T4703] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  109.514122][ T4703] loop1: detected capacity change from 0 to 40427
[  109.598260][ T4703] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  109.606203][ T4703] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  109.651895][ T4703] F2FS-fs (loop1): invalid crc value
[  110.305505][ T4703] F2FS-fs (loop1): Found nat_bits in checkpoint
[  110.367696][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  110.380978][ T4703] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  110.388219][ T4703] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  112.336341][ T4736] loop3: detected capacity change from 0 to 128
[  112.384080][ T4723] sp0: Synchronizing with TNC
[  112.438671][ T4266] syz-executor: attempt to access beyond end of device
[  112.438671][ T4266] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  112.479212][ T4736] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  112.515025][ T4736] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.905851][ T4698] [U] è
[  113.263633][ T4747] syz.3.80 (pid 4747) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  113.466126][ T4747] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  113.486044][ T4747] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  114.414768][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[  114.492924][ T4761] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  114.545029][ T4766] netlink: 14 bytes leftover after parsing attributes in process `syz.4.86'.
[  114.893089][ T4766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.939503][ T4766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.979607][ T4766] bond0 (unregistering): Released all slaves
[  115.274037][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  115.396647][ T4775] loop4: detected capacity change from 0 to 512
[  115.693099][ T4775] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.89: inode #1: comm syz.4.89: iget: illegal inode #
[  115.779634][ T4775] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.89: error while reading EA inode 1 err=-117
[  115.826566][ T4775] EXT4-fs (loop4): 1 orphan inode deleted
[  115.832802][ T4775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  116.848528][ T4794] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  117.119493][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  117.183582][ T4794] loop0: detected capacity change from 0 to 40427
[  117.192282][ T4794] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  117.200056][ T4794] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  117.213927][ T4794] F2FS-fs (loop0): invalid crc value
[  117.269736][ T4794] F2FS-fs (loop0): Found nat_bits in checkpoint
[  117.332916][ T4800] device syzkaller0 entered promiscuous mode
[  117.358006][ T4794] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  117.365203][ T4794] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  119.518093][ T4815] loop3: detected capacity change from 0 to 128
[  119.662381][ T4815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  119.711661][ T4815] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.713251][ T4831] tipc: Started in network mode
[  120.718200][ T4831] tipc: Node identity fa0577eaf381, cluster identity 4711
[  120.725861][ T4831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.734506][ T4831] device syzkaller0 entered promiscuous mode
[  120.799928][ T4834] Zero length message leads to an empty skb
[  120.865175][ T4834] tipc: Resetting bearer <eth:syzkaller0>
[  120.898443][ T4829] tipc: Resetting bearer <eth:syzkaller0>
[  120.934180][ T4827] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  121.063163][ T4829] tipc: Disabling bearer <eth:syzkaller0>
[  121.177413][ T4827] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  125.331772][ T4875] device syzkaller0 entered promiscuous mode
[  125.433586][ T4877] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  126.407029][ T4877] device syzkaller0 entered promiscuous mode
[  126.974130][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  127.186043][ T4897] loop0: detected capacity change from 0 to 64
[  130.487642][ T4918] device syzkaller0 entered promiscuous mode
[  131.026751][ T4921] loop2: detected capacity change from 0 to 4096
[  131.067564][ T4921] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  133.016134][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  133.022583][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  135.332063][ T4952] Falling back ldisc for ttyprintk.
[  136.002154][ T4960] loop3: detected capacity change from 0 to 64
[  139.318607][ T4988] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  139.337614][ T5004] tipc: Started in network mode
[  139.342868][ T5004] tipc: Node identity ea208b56c2c, cluster identity 4711
[  139.350193][ T5004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.404076][ T5003] device syzkaller0 entered promiscuous mode
[  139.445886][ T5003] tipc: Resetting bearer <eth:syzkaller0>
[  139.883047][ T5002] tipc: Resetting bearer <eth:syzkaller0>
[  140.015636][ T5002] tipc: Disabling bearer <eth:syzkaller0>
[  140.698235][ T4947] tipc: Node number set to 685804374
[  141.038211][ T5017] Falling back ldisc for ttyprintk.
[  141.418140][ T5026] loop0: detected capacity change from 0 to 64
[  141.503717][ T5025] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  142.007346][ T5028] loop2: detected capacity change from 0 to 40427
[  142.039312][ T5028] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  142.047170][ T5028] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  142.070107][ T5028] F2FS-fs (loop2): invalid crc value
[  142.300230][ T5028] F2FS-fs (loop2): Found nat_bits in checkpoint
[  142.362113][ T5028] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  142.369239][ T5028] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  143.614561][ T5045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.653205][ T4265] syz-executor: attempt to access beyond end of device
[  143.653205][ T4265] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  143.683952][ T5039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.725818][ T5040] device syzkaller0 entered promiscuous mode
[  143.743426][ T5043] device syzkaller0 entered promiscuous mode
[  143.787264][ T5039] tipc: Resetting bearer <eth:syzkaller0>
[  143.827683][ T5040] tipc: Resetting bearer <eth:syzkaller0>
[  143.992454][ T5037] tipc: Resetting bearer <eth:syzkaller0>
[  144.137868][ T5037] tipc: Disabling bearer <eth:syzkaller0>
[  144.226356][ T5038] tipc: Resetting bearer <eth:syzkaller0>
[  144.268705][ T5038] tipc: Disabling bearer <eth:syzkaller0>
[  144.658907][ T5052] device syzkaller0 entered promiscuous mode
[  144.689220][ T5059] tipc: Started in network mode
[  144.713213][ T5059] tipc: Node identity 0e05bf1b7b1a, cluster identity 4711
[  144.721877][ T5059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.807036][ T5065] loop0: detected capacity change from 0 to 512
[  144.876955][ T5065] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.157: inode #1: comm syz.0.157: iget: illegal inode #
[  144.959977][ T5065] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.157: error while reading EA inode 1 err=-117
[  144.985104][ T5065] EXT4-fs (loop0): 1 orphan inode deleted
[  144.990984][ T5065] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  145.126355][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  145.765584][ T5085] loop4: detected capacity change from 0 to 64
[  145.842844][ T4333] tipc: Node number set to 1965014811
[  147.372168][ T5061] device syzkaller0 entered promiscuous mode
[  147.381898][ T5059] tipc: Resetting bearer <eth:syzkaller0>
[  147.391283][ T5066] device syzkaller1 entered promiscuous mode
[  147.406630][ T5074] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  147.415971][ T5055] tipc: Resetting bearer <eth:syzkaller0>
[  147.482284][ T5055] tipc: Disabling bearer <eth:syzkaller0>
[  147.539330][ T5095] loop4: detected capacity change from 0 to 512
[  147.561095][ T5097] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  147.717552][ T5095] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.161: inode #1: comm syz.4.161: iget: illegal inode #
[  147.781856][ T5095] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.161: error while reading EA inode 1 err=-117
[  147.867519][ T5095] EXT4-fs (loop4): 1 orphan inode deleted
[  147.890573][ T5097] loop3: detected capacity change from 0 to 40427
[  147.898889][ T5095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  147.916267][ T5097] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  147.925148][ T5097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  147.936767][ T5097] F2FS-fs (loop3): invalid crc value
[  147.977786][ T5097] F2FS-fs (loop3): Found nat_bits in checkpoint
[  148.127614][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  148.253005][ T5097] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  148.260175][ T5097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  148.499546][ T5116] sp0: Synchronizing with TNC
[  149.329094][ T5107] [U] è
[  149.720028][ T5122] loop1: detected capacity change from 0 to 512
[  149.727815][ T5122] EXT4-fs: Ignoring removed orlov option
[  149.973141][ T5122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  150.671243][ T5122] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.168: corrupted in-inode xattr
[  150.818291][ T5122] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.168: couldn't read orphan inode 15 (err -117)
[  150.891940][ T5122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  151.197647][ T5138] loop4: detected capacity change from 0 to 64
[  153.726585][ T5130] device syzkaller0 entered promiscuous mode
[  154.544642][ T5137] sched: RT throttling activated
[  154.759625][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  155.207148][ T4279] syz-executor: attempt to access beyond end of device
[  155.207148][ T4279] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  155.982751][ T5174] loop1: detected capacity change from 0 to 512
[  156.008054][ T5174] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.176: inode #1: comm syz.1.176: iget: illegal inode #
[  156.026152][ T5174] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.176: error while reading EA inode 1 err=-117
[  156.068493][ T5174] EXT4-fs (loop1): 1 orphan inode deleted
[  156.075727][ T5174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  156.284721][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  158.660933][ T5148] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.670061][ T5150] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  159.723022][ T5217] loop2: detected capacity change from 0 to 64
[  160.141684][ T5221] loop0: detected capacity change from 0 to 512
[  160.492938][ T5222] loop3: detected capacity change from 0 to 64
[  160.515290][ T5221] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.183: inode #1: comm syz.0.183: iget: illegal inode #
[  160.602979][ T5221] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.183: error while reading EA inode 1 err=-117
[  160.622010][ T5221] EXT4-fs (loop0): 1 orphan inode deleted
[  160.633212][ T5221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  160.949828][ T5232] sp0: Synchronizing with TNC
[  161.562761][ T5227] [U] è
[  161.799945][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  161.967218][ T5240] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  162.229900][ T5241] device syzkaller0 entered promiscuous mode
[  162.238362][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  162.748967][ T5253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.850805][ T5266] device syzkaller0 entered promiscuous mode
[  164.232551][ T5279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.269335][ T5279] device syzkaller0 entered promiscuous mode
[  164.317362][ T5279] tipc: Resetting bearer <eth:syzkaller0>
[  164.353934][ T5278] tipc: Resetting bearer <eth:syzkaller0>
[  164.420203][ T5278] tipc: Disabling bearer <eth:syzkaller0>
[  164.507011][ T5284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.515193][ T5284] device syzkaller0 entered promiscuous mode
[  164.737347][ T5284] tipc: Resetting bearer <eth:syzkaller0>
[  165.082116][ T5283] tipc: Resetting bearer <eth:syzkaller0>
[  165.353431][ T5283] tipc: Disabling bearer <eth:syzkaller0>
[  166.214216][ T5298] loop0: detected capacity change from 0 to 512
[  166.496143][ T5300] loop1: detected capacity change from 0 to 512
[  166.503586][ T5300] EXT4-fs: Ignoring removed orlov option
[  166.543073][ T5298] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.207: inode #1: comm syz.0.207: iget: illegal inode #
[  166.630882][ T5300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  166.660427][ T5298] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.207: error while reading EA inode 1 err=-117
[  166.728248][ T5300] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.208: corrupted in-inode xattr
[  166.760205][ T5298] EXT4-fs (loop0): 1 orphan inode deleted
[  166.766598][ T5298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  166.795807][ T5300] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.208: couldn't read orphan inode 15 (err -117)
[  167.087055][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  167.701224][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  168.507868][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  168.630846][ T5324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.658424][ T5322] loop3: detected capacity change from 0 to 4096
[  168.666472][ T5324] device syzkaller0 entered promiscuous mode
[  168.678876][ T5322] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  168.729896][ T5324] tipc: Resetting bearer <eth:syzkaller0>
[  168.740303][ T5329] loop1: detected capacity change from 0 to 128
[  168.787551][ T5323] tipc: Resetting bearer <eth:syzkaller0>
[  168.815301][ T5329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  168.841145][ T5329] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.940644][ T5323] tipc: Disabling bearer <eth:syzkaller0>
[  168.973294][   T26] audit: type=1800 audit(1756601142.667:2): pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.216" name="file1" dev="loop3" ino=30 res=0 errno=0
[  169.574071][ T5338] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  169.585961][ T5338] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  169.834162][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  171.905768][ T5366] fuse: Unknown parameter 'group_id00000000000000000000'
[  171.924547][ T5367] loop4: detected capacity change from 0 to 512
[  171.994999][ T5367] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.224: inode #1: comm syz.4.224: iget: illegal inode #
[  172.077857][ T5367] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.224: error while reading EA inode 1 err=-117
[  172.257697][ T5367] EXT4-fs (loop4): 1 orphan inode deleted
[  172.271989][ T5367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  173.113439][ T5380] loop2: detected capacity change from 0 to 512
[  173.209168][ T5380] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.227: inode #1: comm syz.2.227: iget: illegal inode #
[  173.241624][ T5380] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.227: error while reading EA inode 1 err=-117
[  173.324683][ T5388] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  173.632931][ T5388] loop3: detected capacity change from 0 to 40427
[  173.657988][ T5388] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  173.666002][ T5388] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  173.697634][ T5388] F2FS-fs (loop3): invalid crc value
[  173.963562][ T5388] F2FS-fs (loop3): Found nat_bits in checkpoint
[  174.298586][ T5380] EXT4-fs (loop2): 1 orphan inode deleted
[  174.304443][ T5380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  174.379073][ T5388] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  174.386367][ T5388] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  174.736729][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  174.881798][ T5398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.907412][ T5398] device syzkaller0 entered promiscuous mode
[  174.986553][ T5398] tipc: Resetting bearer <eth:syzkaller0>
[  175.004662][ T4265] EXT4-fs (loop2): unmounting filesystem.
[  175.155578][ T5397] tipc: Resetting bearer <eth:syzkaller0>
[  175.181867][ T5402] loop4: detected capacity change from 0 to 64
[  175.811489][ T5397] tipc: Disabling bearer <eth:syzkaller0>
[  176.384373][ T4947] tipc: Node number set to 159676394
[  176.713470][ T4279] syz-executor: attempt to access beyond end of device
[  176.713470][ T4279] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  177.640884][ T5420] loop1: detected capacity change from 0 to 512
[  177.675791][ T5420] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.238: inode #1: comm syz.1.238: iget: illegal inode #
[  177.935438][ T5420] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.238: error while reading EA inode 1 err=-117
[  178.168508][ T5420] EXT4-fs (loop1): 1 orphan inode deleted
[  178.349533][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  178.595575][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  178.628715][ T5433] loop4: detected capacity change from 0 to 128
[  178.689131][ T5433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  178.703338][ T5433] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.460626][ T5440] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  179.472837][ T5440] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  180.009481][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  180.095520][ T5457] loop2: detected capacity change from 0 to 512
[  180.209460][ T5457] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.245: inode #1: comm syz.2.245: iget: illegal inode #
[  180.327198][ T5468] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  180.344456][ T5457] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.245: error while reading EA inode 1 err=-117
[  180.372510][ T5457] EXT4-fs (loop2): 1 orphan inode deleted
[  180.388679][ T5457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  180.647038][ T5463] loop3: detected capacity change from 0 to 4096
[  180.709724][ T5466] loop4: detected capacity change from 0 to 40427
[  180.737489][ T5466] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  180.745408][ T5466] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  180.756422][ T5466] F2FS-fs (loop4): invalid crc value
[  180.762835][ T5463] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  180.912989][ T5467] loop1: detected capacity change from 0 to 64
[  180.933539][ T5466] F2FS-fs (loop4): Found nat_bits in checkpoint
[  181.128087][ T4265] EXT4-fs (loop2): unmounting filesystem.
[  181.134551][   T26] audit: type=1800 audit(1756601154.827:3): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.235" name="file1" dev="loop3" ino=30 res=0 errno=0
[  181.166705][ T5466] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  181.174632][ T5466] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  183.118382][ T5500] loop0: detected capacity change from 0 to 128
[  183.184350][ T5500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  183.339775][ T5505] sp0: Synchronizing with TNC
[  183.505943][ T5500] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.976411][ T5497] [U] è
[  184.339851][ T5514] loop2: detected capacity change from 0 to 512
[  184.353842][ T5507] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  184.366161][ T5507] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  184.504488][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  184.934947][ T5514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.260: inode #1: comm syz.2.260: iget: illegal inode #
[  185.330309][ T5514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.260: error while reading EA inode 1 err=-117
[  185.375546][ T5514] EXT4-fs (loop2): 1 orphan inode deleted
[  185.434579][ T5514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  185.650443][ T5537] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  185.729656][ T5535] overlayfs: failed to resolve './file0': -2
[  186.491775][ T5537] loop4: detected capacity change from 0 to 40427
[  186.502829][ T5537] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  186.510669][ T5537] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  186.536421][ T5537] F2FS-fs (loop4): invalid crc value
[  186.725993][ T5537] F2FS-fs (loop4): Found nat_bits in checkpoint
[  186.778210][ T4265] EXT4-fs (loop2): unmounting filesystem.
[  186.817065][ T5537] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  186.824499][ T5537] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  186.885451][ T5548] loop0: detected capacity change from 0 to 64
[  187.227747][ T5551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.235254][ T5551] device syzkaller0 entered promiscuous mode
[  187.255393][ T5551] tipc: Resetting bearer <eth:syzkaller0>
[  187.315975][ T5550] tipc: Resetting bearer <eth:syzkaller0>
[  187.452375][ T5550] tipc: Disabling bearer <eth:syzkaller0>
[  187.754070][ T4268] syz-executor: attempt to access beyond end of device
[  187.754070][ T4268] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  190.194731][ T5579] device syzkaller0 entered promiscuous mode
[  190.448466][ T5586] loop1: detected capacity change from 0 to 64
[  190.590379][ T5588] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) !
[  190.824053][ T5595] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  191.144044][ T5595] loop3: detected capacity change from 0 to 40427
[  191.188031][ T5595] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  191.196026][ T5595] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  191.278136][ T5595] F2FS-fs (loop3): invalid crc value
[  191.284039][ T5599] loop4: detected capacity change from 0 to 64
[  191.330796][ T5595] F2FS-fs (loop3): Found nat_bits in checkpoint
[  191.383574][ T5595] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  191.391511][ T5595] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  191.405634][ T5608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.536599][ T5608] device syzkaller0 entered promiscuous mode
[  191.573868][ T5608] tipc: Resetting bearer <eth:syzkaller0>
[  191.602424][ T4279] syz-executor: attempt to access beyond end of device
[  191.602424][ T4279] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  191.617913][ T5607] tipc: Resetting bearer <eth:syzkaller0>
[  191.662404][ T5607] tipc: Disabling bearer <eth:syzkaller0>
[  191.709305][ T5614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.742729][ T5614] device syzkaller0 entered promiscuous mode
[  191.794339][ T5614] tipc: Resetting bearer <eth:syzkaller0>
[  191.838056][ T5613] tipc: Resetting bearer <eth:syzkaller0>
[  191.901917][ T5613] tipc: Disabling bearer <eth:syzkaller0>
[  192.192048][ T5621] loop2: detected capacity change from 0 to 512
[  192.381573][ T5621] EXT4-fs: Ignoring removed orlov option
[  192.470475][ T5621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  192.627074][ T5621] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.287: corrupted in-inode xattr
[  192.804331][ T5621] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.287: couldn't read orphan inode 15 (err -117)
[  193.014771][ T5621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  194.196411][ T4265] EXT4-fs (loop2): unmounting filesystem.
[  194.588042][ T5637] loop3: detected capacity change from 0 to 40427
[  194.632679][ T5637] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  194.641007][ T5637] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  194.658666][ T5637] F2FS-fs (loop3): invalid crc value
[  194.773468][ T5637] F2FS-fs (loop3): Found nat_bits in checkpoint
[  194.835020][ T5637] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  194.842336][ T5637] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  195.287483][ T5648] loop2: detected capacity change from 0 to 64
[  195.466877][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  195.473516][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  195.624483][   T26] audit: type=1800 audit(1756601168.450:4): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="file1" dev="loop3" ino=10 res=0 errno=0
[  197.666490][ T4285] Bluetooth: hci2: command 0x0406 tx timeout
[  197.672602][ T4285] Bluetooth: hci1: command 0x0406 tx timeout
[  197.683992][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  197.690056][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  197.697942][ T4278] Bluetooth: hci4: command 0x0406 tx timeout
[  198.008450][ T5676] sp0: Synchronizing with TNC
[  198.632436][ T5669] [U] è
[  199.663063][ T5685] loop3: detected capacity change from 0 to 512
[  199.670962][ T5685] EXT4-fs: Ignoring removed orlov option
[  199.699429][ T5685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  199.766019][ T5685] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.305: corrupted in-inode xattr
[  199.813744][ T5690] loop4: detected capacity change from 0 to 512
[  199.821017][ T5690] EXT4-fs: Ignoring removed orlov option
[  199.860596][ T5685] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.305: couldn't read orphan inode 15 (err -117)
[  199.949612][ T5685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  200.009578][ T5690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  200.036819][ T5690] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.304: corrupted in-inode xattr
[  200.321887][ T5690] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.304: couldn't read orphan inode 15 (err -117)
[  200.702139][ T5690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  201.818135][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  202.055507][ T5701] loop2: detected capacity change from 0 to 64
[  202.068228][ T5706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  202.080894][ T5706] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  202.368933][ T5709] loop1: detected capacity change from 0 to 64
[  203.767589][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  204.046668][ T5716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.084254][ T5716] tipc: Resetting bearer <eth:syzkaller0>
[  204.132428][ T5715] tipc: Disabling bearer <eth:syzkaller0>
[  204.259633][ T5724] random: crng reseeded on system resumption
[  205.867313][ T5738] fuse: Bad value for 'fd'
[  206.238401][ T5743] loop1: detected capacity change from 0 to 64
[  206.292507][ T5736] loop0: detected capacity change from 0 to 40427
[  206.330661][ T5736] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  206.345409][ T5736] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  206.374618][ T5736] F2FS-fs (loop0): invalid crc value
[  206.537716][ T5736] F2FS-fs (loop0): Found nat_bits in checkpoint
[  206.631579][ T5736] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  206.645439][ T5736] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  206.708019][ T5756] loop4: detected capacity change from 0 to 512
[  206.741890][   T26] audit: type=1800 audit(1756601178.881:5): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.321" name="file1" dev="loop0" ino=10 res=0 errno=0
[  206.912123][ T5756] EXT4-fs: Ignoring removed orlov option
[  207.147082][ T5756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  207.451361][ T5756] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.327: corrupted in-inode xattr
[  207.728052][ T5756] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.327: couldn't read orphan inode 15 (err -117)
[  207.750943][ T5756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  210.021700][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  210.304009][ T5772] loop3: detected capacity change from 0 to 40427
[  210.319117][ T5772] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  210.326926][ T5772] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  210.337075][ T5772] F2FS-fs (loop3): invalid crc value
[  210.354750][ T5772] F2FS-fs (loop3): Found nat_bits in checkpoint
[  210.422024][ T5772] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  210.429227][ T5772] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  210.537317][ T5784] loop4: detected capacity change from 0 to 64
[  214.003315][   T26] audit: type=1800 audit(1756601185.664:6): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.330" name="file1" dev="loop3" ino=10 res=0 errno=0
[  214.588227][ T4534] kworker/u4:11: attempt to access beyond end of device
[  214.588227][ T4534] loop0: rw=1, sector=77824, nr_sectors = 2280 limit=40427
[  215.101200][ T4534] kworker/u4:11: attempt to access beyond end of device
[  215.101200][ T4534] loop0: rw=1, sector=80104, nr_sectors = 1816 limit=40427
[  215.384192][ T4534] kworker/u4:11: attempt to access beyond end of device
[  215.384192][ T4534] loop0: rw=1, sector=49152, nr_sectors = 4080 limit=40427
[  215.413280][ T4534] kworker/u4:11: attempt to access beyond end of device
[  215.413280][ T4534] loop0: rw=1, sector=53232, nr_sectors = 16 limit=40427
[  215.617218][ T5800] loop2: detected capacity change from 0 to 64
[  216.255678][ T4534] kworker/u4:11: attempt to access beyond end of device
[  216.255678][ T4534] loop0: rw=1, sector=57344, nr_sectors = 5176 limit=40427
[  216.344569][ T4534] kworker/u4:11: attempt to access beyond end of device
[  216.344569][ T4534] loop0: rw=1, sector=62520, nr_sectors = 1480 limit=40427
[  216.433686][ T5804] loop4: detected capacity change from 0 to 512
[  216.512917][ T5806] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  216.521377][ T5804] EXT4-fs: Ignoring removed orlov option
[  216.525804][ T5806] netlink: 14 bytes leftover after parsing attributes in process `syz.3.335'.
[  216.592243][ T5804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  216.641012][ T5804] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.340: corrupted in-inode xattr
[  216.715558][ T5804] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.340: couldn't read orphan inode 15 (err -117)
[  216.751402][ T5804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  216.792276][    C0] Illegal XDP return value 16128 on prog  (id 63) dev bond_slave_1, expect packet loss!
[  217.995299][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  218.292443][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.347069][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.367047][ T5819] loop2: detected capacity change from 0 to 512
[  218.379445][ T5806] bond0 (unregistering): Released all slaves
[  218.402910][ T5819] EXT4-fs: Ignoring removed orlov option
[  218.434126][ T5819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  218.448912][ T5819] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.343: corrupted in-inode xattr
[  219.146194][ T5819] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.343: couldn't read orphan inode 15 (err -117)
[  219.198724][ T5819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  219.486468][ T5827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.505670][ T5827] device syzkaller0 entered promiscuous mode
[  221.906003][ T5833] loop4: detected capacity change from 0 to 64
[  222.177385][ T5823] tipc: Resetting bearer <eth:syzkaller0>
[  222.226538][ T4265] EXT4-fs (loop2): unmounting filesystem.
[  222.248892][ T5823] tipc: Disabling bearer <eth:syzkaller0>
[  223.090363][ T5850] loop4: detected capacity change from 0 to 64
[  223.687864][ T5863] random: crng reseeded on system resumption
[  228.253946][ T5876] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  228.265752][ T5876] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  228.851857][ T5886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.919539][ T5891] device syzkaller0 entered promiscuous mode
[  229.145867][ T5885] tipc: Resetting bearer <eth:syzkaller0>
[  229.450817][ T5885] tipc: Disabling bearer <eth:syzkaller0>
[  229.989229][ T5902] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  230.001276][ T5902] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  231.082095][ T5905] loop1: detected capacity change from 0 to 64
[  231.125573][ T5913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.154351][ T5913] tipc: Resetting bearer <eth:syzkaller0>
[  231.237170][ T5912] tipc: Disabling bearer <eth:syzkaller0>
[  231.289712][ T5917] loop0: detected capacity change from 0 to 64
[  232.315031][ T5926] random: crng reseeded on system resumption
[  234.901009][ T5936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  234.966670][ T5936] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  237.946607][ T5964] random: crng reseeded on system resumption
[  238.230997][ T5971] loop0: detected capacity change from 0 to 64
[  238.585921][ T5974] loop3: detected capacity change from 0 to 64
[  240.434488][ T5987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  240.446408][ T5987] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  241.483334][ T5995] loop0: detected capacity change from 0 to 512
[  241.499871][ T5995] EXT4-fs: Ignoring removed orlov option
[  241.516952][ T5995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  241.532916][ T5995] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.392: corrupted in-inode xattr
[  241.627965][ T5995] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.392: couldn't read orphan inode 15 (err -117)
[  241.679655][ T5995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  244.250465][ T6019] loop1: detected capacity change from 0 to 64
[  244.291710][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  244.577722][ T6022] loop3: detected capacity change from 0 to 64
[  247.471300][ T6046] random: crng reseeded on system resumption
[  251.002607][ T6070] loop2: detected capacity change from 0 to 64
[  251.895651][ T6076] loop4: detected capacity change from 0 to 64
[  255.235267][ T6100] random: crng reseeded on system resumption
[  256.130071][ T6119] syz.1.418 uses obsolete (PF_INET,SOCK_PACKET)
[  256.497609][ T6132] loop2: detected capacity change from 0 to 64
[  257.935551][ T6142] loop1: detected capacity change from 0 to 64
[  260.244881][ T6163] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  260.256520][ T6163] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  261.498029][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  261.504476][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  262.241529][ T6168] random: crng reseeded on system resumption
[  262.910043][ T6181] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  262.921916][ T6181] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  264.025191][ T6184] loop0: detected capacity change from 0 to 64
[  264.980980][ T6190] loop2: detected capacity change from 0 to 64
[  266.164367][ T6201] loop0: detected capacity change from 0 to 512
[  266.246185][ T6201] EXT4-fs: Ignoring removed orlov option
[  266.317758][ T6201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  266.355010][ T6201] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.440: corrupted in-inode xattr
[  266.368444][ T6201] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.440: couldn't read orphan inode 15 (err -117)
[  266.380797][ T6201] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  267.163392][ T6215] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  267.175056][ T6215] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  267.632825][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  267.994086][ T6225] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  268.005889][ T6225] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  271.694135][ T6237] loop0: detected capacity change from 0 to 128
[  272.188034][ T6237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  272.252147][ T6237] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.157663][ T6250] loop1: detected capacity change from 0 to 64
[  273.864772][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  273.956696][ T6253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  273.975908][ T6253] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  277.220166][ T6284] random: crng reseeded on system resumption
[  277.432037][ T6282] loop1: detected capacity change from 0 to 128
[  277.658585][ T6282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  277.818081][ T6282] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.818183][ T6285] loop4: detected capacity change from 0 to 512
[  278.436081][ T6289] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  278.448017][ T6289] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  278.631203][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  279.176570][ T6306] loop2: detected capacity change from 0 to 64
[  279.570199][ T6285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.463: inode #1: comm syz.4.463: iget: illegal inode #
[  280.351751][ T6285] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.463: error while reading EA inode 1 err=-117
[  280.409567][ T6285] EXT4-fs (loop4): 1 orphan inode deleted
[  280.415642][ T6285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  280.711817][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  280.864662][ T6318] random: crng reseeded on system resumption
[  282.196547][ T6334] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  282.426004][ T6334] loop1: detected capacity change from 0 to 40427
[  282.452816][ T6334] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  282.460634][ T6334] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  282.470504][ T6334] F2FS-fs (loop1): invalid crc value
[  282.542708][ T6334] F2FS-fs (loop1): Found nat_bits in checkpoint
[  282.607217][ T6334] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  282.614398][ T6334] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  282.623613][ T6337] loop2: detected capacity change from 0 to 64
[  282.987568][ T4266] syz-executor: attempt to access beyond end of device
[  282.987568][ T4266] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  284.888402][ T6361] loop1: detected capacity change from 0 to 64
[  286.581675][ T6369] sp0: Synchronizing with TNC
[  287.090248][ T6362] [U] è
[  287.387373][ T6371] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  287.600178][ T6384] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  287.852167][ T6384] loop4: detected capacity change from 0 to 40427
[  287.880535][ T6384] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  287.888364][ T6384] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  287.900207][ T6384] F2FS-fs (loop4): invalid crc value
[  287.929870][ T6384] F2FS-fs (loop4): Found nat_bits in checkpoint
[  287.965747][ T6384] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  287.972823][ T6384] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  288.797904][ T4268] syz-executor: attempt to access beyond end of device
[  288.797904][ T4268] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  289.164992][ T6403] loop1: detected capacity change from 0 to 64
[  289.343821][ T6408] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  289.670801][ T6408] loop4: detected capacity change from 0 to 40427
[  289.691441][ T6408] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  289.699540][ T6408] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  289.709769][ T6408] F2FS-fs (loop4): invalid crc value
[  289.819863][ T6408] F2FS-fs (loop4): Found nat_bits in checkpoint
[  289.873885][ T6408] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  289.881061][ T6408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  290.077230][ T4268] syz-executor: attempt to access beyond end of device
[  290.077230][ T4268] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  290.719829][ T6424] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  290.732829][ T6424] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  292.046316][ T6433] loop2: detected capacity change from 0 to 64
[  292.610587][ T6430] netlink: 68 bytes leftover after parsing attributes in process `syz.4.497'.
[  293.086011][ T6440] loop3: detected capacity change from 0 to 64
[  293.231756][ T6443] sp0: Synchronizing with TNC
[  294.116822][ T6437] [U] è
[  294.558271][ T6449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  294.572121][ T6449] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  298.967494][ T6476] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  298.979116][ T6476] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  299.181807][ T6475] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  299.269750][ T6475] device syzkaller0 entered promiscuous mode
[  299.847599][ T6479] netlink: 68 bytes leftover after parsing attributes in process `syz.2.511'.
[  299.881767][ T6475] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  300.812706][ T6483] device syzkaller0 entered promiscuous mode
[  301.033250][ T6488] loop2: detected capacity change from 0 to 64
[  301.912701][ T6494] device syzkaller0 entered promiscuous mode
[  301.917848][ T6496] loop2: detected capacity change from 0 to 128
[  301.936526][ T6490] loop1: detected capacity change from 0 to 64
[  301.997745][ T6496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  302.032005][ T6496] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.039380][ T4265] EXT4-fs (loop2): unmounting filesystem.
[  303.205185][ T6515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  303.218362][ T6515] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  306.608078][ T6519] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  307.401981][ T6525] loop2: detected capacity change from 0 to 40427
[  307.622008][ T6525] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  307.629886][ T6525] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  307.669097][ T6525] F2FS-fs (loop2): invalid crc value
[  307.743923][ T6525] F2FS-fs (loop2): Found nat_bits in checkpoint
[  307.800161][ T6525] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  307.807449][ T6525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  307.849663][ T6534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  307.862073][ T6534] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  310.204082][ T6548] loop3: detected capacity change from 0 to 512
[  310.388510][ T6548] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.526: inode #1: comm syz.3.526: iget: illegal inode #
[  310.541195][ T6548] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.526: error while reading EA inode 1 err=-117
[  310.573582][ T6556] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  310.585183][ T6556] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  313.672677][ T6548] EXT4-fs (loop3): 1 orphan inode deleted
[  313.997282][ T6548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  314.168488][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  314.188993][ T6569] loop1: detected capacity change from 0 to 128
[  314.236812][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  314.296593][ T6569] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.327194][ T6576] random: crng reseeded on system resumption
[  315.128083][ T6581] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  315.140241][ T6581] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  315.320282][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  316.680794][ T6601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  316.692879][ T6601] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  318.114274][ T6614] loop0: detected capacity change from 0 to 512
[  318.139607][ T6614] EXT4-fs: Ignoring removed orlov option
[  318.380438][ T6618] loop3: detected capacity change from 0 to 64
[  318.419915][ T6614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  318.622395][ T6614] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.539: corrupted in-inode xattr
[  318.639615][ T6614] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.539: couldn't read orphan inode 15 (err -117)
[  318.716722][ T6614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  318.947932][ T6627] fuse: Bad value for 'fd'
[  318.960459][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  319.238471][ T6631] loop0: detected capacity change from 0 to 512
[  319.390213][ T6631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  319.458530][ T6631] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  319.614691][ T6631] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  319.815477][ T6631] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  319.967457][ T6631] EXT4-fs (loop0): 1 truncate cleaned up
[  320.037149][ T6631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  320.513911][ T4264] EXT4-fs (loop0): unmounting filesystem.
[  320.935725][ T4347] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  322.154475][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.176743][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.198344][ T4347] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  322.219640][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.244588][ T4347] usb 1-1: config 0 descriptor??
[  322.525647][ T6671] loop1: detected capacity change from 0 to 64
[  323.333003][ T4347] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  323.353002][ T4347] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  323.507522][ T6679] loop4: detected capacity change from 0 to 64
[  323.891614][ T4347] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[  325.568302][ T6685] random: crng reseeded on system resumption
[  325.861935][ T4347] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71
[  325.970038][ T6695] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  325.982459][ T6695] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  326.248143][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  326.254771][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  328.491145][ T4347] usb 1-1: USB disconnect, device number 2
[  328.750134][ T6699] loop3: detected capacity change from 0 to 512
[  328.849551][ T6699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.559: inode #1: comm syz.3.559: iget: illegal inode #
[  328.916725][ T6697] fido_id[6697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  328.928124][ T6699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.559: error while reading EA inode 1 err=-117
[  329.277569][ T6699] EXT4-fs (loop3): 1 orphan inode deleted
[  329.287231][ T6699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  330.034196][ T6713] binder: 6712:6713 ioctl c0306201 2000000003c0 returned -14
[  330.042341][ T6713] binder_alloc: 6712: binder_alloc_buf, no vma
[  330.093139][ T4279] EXT4-fs (loop3): unmounting filesystem.
[  330.270893][ T6718] loop0: detected capacity change from 0 to 64
[  330.341790][ T6711] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  330.355339][ T6711] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  334.736062][ T6735] loop3: detected capacity change from 0 to 64
[  335.077195][ T6741] overlayfs: failed to resolve './file0': -2
[  338.991201][ T6759] loop4: detected capacity change from 0 to 512
[  339.159857][ T6764] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  339.171604][ T6764] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  340.031978][ T6759] EXT4-fs: failed to create workqueue
[  340.069131][ T6759] EXT4-fs (loop4): mount failed
[  340.237328][ T6768] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  340.300818][ T6768] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  343.329594][ T6774] random: crng reseeded on system resumption
[  344.253371][ T6780] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  344.264973][ T6780] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  344.382134][ T6785] loop4: detected capacity change from 0 to 512
[  344.445744][ T6785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  344.493657][ T6785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  344.503169][ T6785] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.434237][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  345.923729][ T6808] loop2: detected capacity change from 0 to 64
[  346.058253][ T6807] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  346.072876][ T6807] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  347.757126][ T6814] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  347.769371][ T6814] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  348.947194][ T6820] random: crng reseeded on system resumption
[  351.027698][ T6827] loop1: detected capacity change from 0 to 512
[  351.121034][ T6827] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  351.262372][ T6827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  351.476956][ T6840] loop3: detected capacity change from 0 to 64
[  351.489497][ T6827] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.167743][ T6837] loop4: detected capacity change from 0 to 512
[  352.233210][ T6837] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.592: inode #1: comm syz.4.592: iget: illegal inode #
[  352.272034][ T6837] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.592: error while reading EA inode 1 err=-117
[  352.750957][ T6847] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  352.762831][ T6847] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  353.284786][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  353.305475][ T6837] EXT4-fs (loop4): 1 orphan inode deleted
[  354.329723][ T6837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  355.309991][ T4268] EXT4-fs (loop4): unmounting filesystem.
[  355.345428][ T6853] loop2: detected capacity change from 0 to 512
[  355.637436][ T6850] loop3: detected capacity change from 0 to 40427
[  355.677106][ T6854] loop1: detected capacity change from 0 to 40427
[  355.677821][ T6850] F2FS-fs (loop3): invalid crc value
[  355.698596][ T6850] F2FS-fs (loop3): Found nat_bits in checkpoint
[  355.736314][ T6853] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  355.746011][ T6850] F2FS-fs (loop3): Start checkpoint disabled!
[  355.766482][ T6854] F2FS-fs (loop1): invalid crc value
[  355.790038][ T6853] UDF-fs: Scanning with blocksize 512 failed
[  355.799708][ T6850] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  355.806959][ T6854] F2FS-fs (loop1): Found nat_bits in checkpoint
[  355.826558][ T6853] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  355.849279][ T6854] F2FS-fs (loop1): Start checkpoint disabled!
[  355.895362][ T6853] UDF-fs: Scanning with blocksize 1024 failed
[  355.895371][ T6854] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  355.931335][ T6862] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  355.931335][ T6862]    program syz.4.597 not setting count and/or reply_len properly
[  355.967493][ T6853] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  356.095684][ T6853] UDF-fs: Scanning with blocksize 2048 failed
[  356.509922][ T6853] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  356.797891][ T6853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.970212][   T26] audit: type=1804 audit(1756601319.425:7): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.596" name="/newroot/120/file0/bus" dev="loop2" ino=42 res=1 errno=0
[  357.019106][ T4588] kworker/u4:12: attempt to access beyond end of device
[  357.019106][ T4588] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  357.064185][   T58] kworker/u4:4: attempt to access beyond end of device
[  357.064185][   T58] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  357.178027][ T6867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  357.189691][ T6867] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  360.530860][ T6871] random: crng reseeded on system resumption
[  361.874539][ T6877] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  361.910894][ T6878] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  361.922581][ T6878] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  362.358282][ T6877] loop0: detected capacity change from 0 to 40427
[  362.376057][ T6877] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  362.383934][ T6877] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  362.401796][ T6877] F2FS-fs (loop0): invalid crc value
[  362.504232][ T6877] F2FS-fs (loop0): Found nat_bits in checkpoint
[  362.571461][ T6877] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  362.578752][ T6877] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  365.866756][ T6891] loop1: detected capacity change from 0 to 64
[  369.403888][ T6910] netlink: 68 bytes leftover after parsing attributes in process `syz.2.609'.
[  370.561475][ T6918] loop4: detected capacity change from 0 to 40427
[  370.596119][ T6918] F2FS-fs (loop4): invalid crc value
[  370.623749][ T6918] F2FS-fs (loop4): Found nat_bits in checkpoint
[  370.737362][ T6918] F2FS-fs (loop4): Start checkpoint disabled!
[  370.785152][ T6918] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  370.900729][ T6931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  370.912307][ T6931] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  374.768765][ T6938] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  374.780386][ T6938] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  377.392395][ T4591] kworker/u4:15: attempt to access beyond end of device
[  377.392395][ T4591] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  377.540173][ T6947] loop2: detected capacity change from 0 to 64
[  378.326393][ T6949] random: crng reseeded on system resumption
[  380.907133][ T6959] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  380.935105][ T6959] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  381.768063][ T6986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.807295][ T6986] tipc: Resetting bearer <eth:syzkaller0>
[  381.882444][ T6984] tipc: Disabling bearer <eth:syzkaller0>
[  382.167281][ T6998] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  382.179264][ T6998] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  382.222914][   T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  382.453128][   T22] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  382.494712][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.639455][  T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  382.755138][   T22] pwc: Logitech/Cisco VT Camera webcam detected.
[  382.994935][   T22] pwc: Failed to set LED on/off time (-71)
[  383.025839][   T22] pwc: send_video_command error -71
[  383.087681][   T22] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  383.181167][   T22] Philips webcam: probe of 3-1:127.0 failed with error -71
[  383.354021][   T22] usb 3-1: USB disconnect, device number 2
[  385.100155][  T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.298492][  T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.322427][  T126] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  385.340229][  T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.357157][  T126] usb 1-1: config 0 descriptor??
[  385.363580][  T126] usb 1-1: can't set config #0, error -71
[  385.428289][ T7011] usb 1-1: USB disconnect, device number 3
[  385.442307][ T7013] loop4: detected capacity change from 0 to 512
[  385.453983][ T7013] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  385.465588][ T7013] UDF-fs: Scanning with blocksize 512 failed
[  385.473511][ T7013] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  385.494045][ T7013] UDF-fs: Scanning with blocksize 1024 failed
[  385.527164][ T7013] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  385.546962][ T7013] UDF-fs: Scanning with blocksize 2048 failed
[  385.570413][ T7013] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  385.593439][ T7011] hub 1-0:1.0: USB hub found
[  385.607312][ T7011] hub 1-0:1.0: 1 port detected
[  385.680088][ T7013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  385.971605][ T7017] loop1: detected capacity change from 0 to 40427
[  386.040219][ T7017] F2FS-fs (loop1): invalid crc value
[  386.060296][ T7017] F2FS-fs (loop1): Found nat_bits in checkpoint
[  386.094854][ T7017] F2FS-fs (loop1): Start checkpoint disabled!
[  386.121209][ T7017] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  387.033129][ T7013] loop4: detected capacity change from 512 to 64
[  387.161567][ T7029] random: crng reseeded on system resumption
[  388.737157][ T4268] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=33, location=5
[  388.842367][ T4268] UDF-fs: error (device loop4): udf_read_inode: (ino 33) failed !bh
[  388.882781][ T4268] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=33, location=5
[  388.908577][ T4268] UDF-fs: error (device loop4): udf_read_inode: (ino 33) failed !bh
[  389.143814][ T7036] loop2: detected capacity change from 0 to 512
[  389.155439][ T7038] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  389.175670][ T7036] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  389.226516][ T7036] UDF-fs: Scanning with blocksize 512 failed
[  389.255691][ T4588] kworker/u4:12: attempt to access beyond end of device
[  389.255691][ T4588] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  389.470683][ T7038] loop0: detected capacity change from 0 to 40427
[  389.513377][ T7038] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  389.521162][ T7038] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  389.532187][ T7038] F2FS-fs (loop0): invalid crc value
[  389.551222][ T6107] syz.4.415: attempt to access beyond end of device
[  389.551222][ T6107] loop4: rw=2049, sector=144, nr_sectors = 8 limit=64
[  389.633056][ T6107] Buffer I/O error on dev loop4, logical block 18, lost sync page write
[  389.649638][ T7038] F2FS-fs (loop0): Found nat_bits in checkpoint
[  389.711793][ T4588] kworker/u4:12: attempt to access beyond end of device
[  389.711793][ T4588] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  389.742408][ T7038] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  389.749535][ T7038] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  390.075869][ T7036] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  390.087898][ T7036] UDF-fs: Scanning with blocksize 1024 failed
[  390.106455][ T7036] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  390.121875][ T7036] UDF-fs: Scanning with blocksize 2048 failed
[  390.129449][ T7036] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  390.142067][ T7036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  390.243525][   T26] audit: type=1800 audit(1756601350.559:8): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.638" name="bus" dev="loop2" ino=42 res=0 errno=0
[  390.293079][ T7036] loop2: detected capacity change from 512 to 64
[  390.403824][ T4588] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.428144][ T4265] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=33, location=5
[  390.464090][ T4265] UDF-fs: error (device loop2): udf_read_inode: (ino 33) failed !bh
[  390.504967][ T4265] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=33, location=5
[  390.540933][ T4265] UDF-fs: error (device loop2): udf_read_inode: (ino 33) failed !bh
[  390.608493][ T4588] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.070766][ T6468] syz.2.505: attempt to access beyond end of device
[  391.070766][ T6468] loop2: rw=2049, sector=144, nr_sectors = 8 limit=64
[  391.087417][ T4588] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.123199][ T6468] Buffer I/O error on dev loop2, logical block 18, lost sync page write
[  391.246403][ T4588] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.716177][ T7052] loop0: detected capacity change from 0 to 40427
[  391.726507][ T7052] F2FS-fs (loop0): invalid crc value
[  391.738052][ T7052] F2FS-fs (loop0): Found nat_bits in checkpoint
[  391.777625][ T7052] F2FS-fs (loop0): Start checkpoint disabled!
[  391.789537][ T7052] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  391.897222][ T4588] tipc: Left network mode
[  391.931037][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  391.937404][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  391.997412][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  392.006878][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  392.023835][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  392.032239][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  392.044248][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  392.051656][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  392.798239][ T7066] loop1: detected capacity change from 0 to 512
[  392.844704][ T7066] EXT4-fs: Ignoring removed orlov option
[  392.977748][ T7066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  393.067315][ T7066] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.647: corrupted in-inode xattr
[  393.131054][ T7066] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.647: couldn't read orphan inode 15 (err -117)
[  393.196382][ T7066] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  393.453003][ T6592] kworker/u4:23: attempt to access beyond end of device
[  393.453003][ T6592] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  393.524164][   T11] kworker/u4:1: attempt to access beyond end of device
[  393.524164][   T11] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  394.226606][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[  394.351215][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  394.592282][ T7057] chnl_net:caif_netlink_parms(): no params data found
[  395.228212][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.276708][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.350803][ T7057] device bridge_slave_0 entered promiscuous mode
[  395.369812][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  395.387441][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  395.395408][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  395.404032][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  395.412675][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  395.420540][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  395.434261][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.442085][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.461025][ T7057] device bridge_slave_1 entered promiscuous mode
[  395.748283][ T7105] random: crng reseeded on system resumption
[  396.226313][ T7057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.450025][   T48] Bluetooth: hci0: command 0x041b tx timeout
[  396.573857][ T7057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.097912][ T7111] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  397.145886][ T4588] device hsr_slave_0 left promiscuous mode
[  397.173818][ T4588] device hsr_slave_1 left promiscuous mode
[  397.182557][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.279733][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.298658][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.306246][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.325051][ T4588] device bridge_slave_1 left promiscuous mode
[  397.607667][ T7111] loop1: detected capacity change from 0 to 40427
[  397.657359][ T7114] hub 1-0:1.0: USB hub found
[  397.663318][ T7114] hub 1-0:1.0: 1 port detected
[  397.709596][   T48] Bluetooth: hci3: command 0x0409 tx timeout
[  397.720203][ T7111] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  397.728059][ T7111] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  397.738572][ T4588] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.755497][ T7111] F2FS-fs (loop1): invalid crc value
[  397.797197][ T7111] F2FS-fs (loop1): Found nat_bits in checkpoint
[  397.861786][ T4588] device bridge_slave_0 left promiscuous mode
[  397.870394][ T4588] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.881242][ T7111] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  397.888387][ T7111] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  398.592267][ T4588] device veth1_macvtap left promiscuous mode
[  398.673251][   T48] Bluetooth: hci0: command 0x040f tx timeout
[  398.714298][ T4588] device veth0_macvtap left promiscuous mode
[  398.830698][ T4588] device veth1_vlan left promiscuous mode
[  398.965901][ T4588] device veth0_vlan left promiscuous mode
[  399.871436][   T48] Bluetooth: hci3: command 0x041b tx timeout
[  400.807811][ T7157] loop1: detected capacity change from 0 to 64
[  400.896701][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[  401.897923][ T4588] team0 (unregistering): Port device team_slave_1 removed
[  401.959783][ T4588] team0 (unregistering): Port device team_slave_0 removed
[  402.098221][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  402.493660][ T7057] team0: Port device team_slave_0 added
[  402.502928][ T7057] team0: Port device team_slave_1 added
[  402.566046][ T7161] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  403.330545][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.348600][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.116489][ T7057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.130263][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.138833][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.208573][ T7057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.317214][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  404.592043][ T7181] loop1: detected capacity change from 0 to 40427
[  404.627243][ T7181] F2FS-fs (loop1): invalid crc value
[  404.709413][ T7181] F2FS-fs (loop1): Found nat_bits in checkpoint
[  404.745631][ T7181] F2FS-fs (loop1): Start checkpoint disabled!
[  404.789505][ T7181] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  404.975923][ T7190] siw: device registration error -23
[  405.810360][ T7188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.870548][ T7057] device hsr_slave_0 entered promiscuous mode
[  405.904892][ T7057] device hsr_slave_1 entered promiscuous mode
[  405.995814][ T7057] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  406.003531][ T7057] Cannot create hsr debugfs directory
[  406.185433][ T7188] tipc: Resetting bearer <eth:syzkaller0>
[  406.205148][ T7204] trusted_key: encrypted_key: master key parameter 'defaJ%çº!}5Àx‰' is invalid
[  406.238862][ T7178] tipc: Disabling bearer <eth:syzkaller0>
[  406.547121][ T4946] kworker/u4:18: attempt to access beyond end of device
[  406.547121][ T4946] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  406.583399][ T7204] loop3: detected capacity change from 0 to 40427
[  406.597327][ T7204] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  406.605172][ T7204] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  406.614953][ T7204] F2FS-fs (loop3): invalid crc value
[  406.620636][ T4946] kworker/u4:18: attempt to access beyond end of device
[  406.620636][ T4946] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  406.706660][ T7204] F2FS-fs (loop3): Found nat_bits in checkpoint
[  406.751421][ T7204] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  406.759042][ T7204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  406.864341][ T7216] random: crng reseeded on system resumption
[  408.906988][ T7057] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  408.918809][ T7057] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  408.948928][ T7057] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  408.972163][ T7057] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  409.056976][ T7099] chnl_net:caif_netlink_parms(): no params data found
[  409.439246][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.446464][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.483779][ T7099] device bridge_slave_0 entered promiscuous mode
[  409.864503][ T4588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.934942][ T7245] loop0: detected capacity change from 0 to 40427
[  409.961920][ T7245] F2FS-fs (loop0): invalid crc value
[  409.987423][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.998447][ T7245] F2FS-fs (loop0): Found nat_bits in checkpoint
[  410.002448][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.097627][ T7245] F2FS-fs (loop0): Start checkpoint disabled!
[  410.151765][ T7251] loop1: detected capacity change from 0 to 64
[  410.173589][ T7099] device bridge_slave_1 entered promiscuous mode
[  410.822430][ T7057] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.912221][ T7245] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  411.616144][ T7260] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  412.435116][ T4588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.451218][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.561375][ T4588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.618756][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.639386][ T7261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  412.706218][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  412.717448][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  412.738485][ T4400] kworker/u4:9: attempt to access beyond end of device
[  412.738485][ T4400] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  412.756591][ T7057] 8021q: adding VLAN 0 to HW filter on device team0
[  412.808332][ T7262] tipc: Resetting bearer <eth:syzkaller0>
[  412.834531][ T4588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.855964][ T7099] team0: Port device team_slave_0 added
[  412.866456][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  412.880008][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  412.891253][ T4909] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.894986][   T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  412.899690][ T4909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.924874][ T7259] tipc: Disabling bearer <eth:syzkaller0>
[  412.946704][ T7099] team0: Port device team_slave_1 added
[  413.051787][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  413.101112][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  413.123935][   T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  413.127115][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  413.154095][   T22] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  413.170094][ T4909] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.177251][ T4909] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.186362][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.210225][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.237049][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.269701][   T22] usb 4-1: config 0 descriptor??
[  413.304789][ T7270] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  413.433617][   T22] pwc: Askey VC010 type 2 USB webcam detected.
[  413.593801][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.812117][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  413.908281][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  413.936327][   T22] pwc: recv_control_msg error -32 req 02 val 2b00
[  413.966495][   T22] pwc: recv_control_msg error -32 req 02 val 2700
[  414.039415][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.065902][   T22] pwc: recv_control_msg error -32 req 02 val 2c00
[  414.082196][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.218415][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.287436][   T22] pwc: recv_control_msg error -32 req 04 val 1000
[  414.327750][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  414.335858][   T22] pwc: recv_control_msg error -32 req 04 val 1300
[  414.346606][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  415.033074][   T22] pwc: recv_control_msg error -32 req 04 val 1400
[  415.072107][ T7280] hub 1-0:1.0: USB hub found
[  415.076949][ T7280] hub 1-0:1.0: 1 port detected
[  415.080349][   T22] pwc: recv_control_msg error -32 req 02 val 2000
[  415.203157][   T22] pwc: recv_control_msg error -32 req 02 val 2100
[  415.243777][   T22] pwc: recv_control_msg error -32 req 04 val 1500
[  415.277327][   T22] pwc: recv_control_msg error -32 req 02 val 2500
[  415.293510][   T22] pwc: recv_control_msg error -32 req 02 val 2400
[  415.312569][   T22] pwc: recv_control_msg error -32 req 02 val 2600
[  415.334429][   T22] pwc: recv_control_msg error -32 req 02 val 2900
[  415.356584][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  415.378931][ T7285] loop1: detected capacity change from 0 to 128
[  415.400333][   T22] pwc: recv_control_msg error -32 req 02 val 2800
[  415.410067][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  415.445961][   T22] pwc: recv_control_msg error -71 req 04 val 1100
[  415.461073][ T7285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  415.480654][   T22] pwc: recv_control_msg error -71 req 04 val 1200
[  415.493470][ T7285] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.532953][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  415.551599][   T22] pwc: Registered as video103.
[  415.586682][ T7283] loop0: detected capacity change from 0 to 40427
[  415.777660][   T22] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  415.801354][   T22] usb 4-1: USB disconnect, device number 2
[  415.823602][ T7283] F2FS-fs (loop0): invalid crc value
[  415.832042][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  416.238446][ T7295] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  416.250620][ T7295] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  416.286785][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  416.354768][ T7283] F2FS-fs (loop0): Found nat_bits in checkpoint
[  416.400722][ T7283] F2FS-fs (loop0): Start checkpoint disabled!
[  416.438869][ T7283] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  416.528479][ T7099] device hsr_slave_0 entered promiscuous mode
[  416.536071][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  416.679731][ T7099] device hsr_slave_1 entered promiscuous mode
[  416.783477][ T7099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  417.005009][ T7099] Cannot create hsr debugfs directory
[  417.072138][ T7057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  417.089429][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  417.098929][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  417.107584][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  417.494009][ T4588] tipc: Left network mode
[  417.558383][ T7314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.577145][ T7314] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  417.607017][ T4270] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  417.730218][ T7314] tipc: Resetting bearer <eth:syzkaller0>
[  417.801070][ T7313] tipc: Disabling bearer <eth:syzkaller0>
[  417.817350][   T58] kworker/u4:4: attempt to access beyond end of device
[  417.817350][   T58] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  417.839674][ T4270] usb 2-1: config 0 has an invalid interface number: 46 but max is 0
[  417.847809][ T4270] usb 2-1: config 0 has no interface number 0
[  417.861105][ T4270] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  417.894279][ T4270] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  417.914106][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.922157][ T4270] usb 2-1: Product: syz
[  417.930190][ T4270] usb 2-1: Manufacturer: syz
[  417.936075][ T4270] usb 2-1: SerialNumber: syz
[  417.954786][ T4270] usb 2-1: config 0 descriptor??
[  417.992502][ T7312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  418.047865][ T4270] ums-karma 2-1:0.46: USB Mass Storage device detected
[  418.147007][ T7322] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  419.255198][ T7328] loop3: detected capacity change from 0 to 40427
[  419.278736][ T7328] F2FS-fs (loop3): invalid crc value
[  419.410748][ T4270] ums-karma: probe of 2-1:0.46 failed with error -5
[  419.425919][ T7328] F2FS-fs (loop3): Found nat_bits in checkpoint
[  419.471711][ T7328] F2FS-fs (loop3): Start checkpoint disabled!
[  419.695138][ T7337] loop0: detected capacity change from 0 to 64
[  420.437516][ T7328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  420.478242][ T7099] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  421.264851][ T7099] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  421.330739][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  421.368246][ T4909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  421.375764][ T7099] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  421.456430][ T7099] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  421.674162][ T7346] loop0: detected capacity change from 0 to 40427
[  421.698674][ T7346] F2FS-fs (loop0): invalid crc value
[  421.704415][ T6592] kworker/u4:23: attempt to access beyond end of device
[  421.704415][ T6592] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  421.785739][ T7346] F2FS-fs (loop0): Found nat_bits in checkpoint
[  421.817180][ T7346] F2FS-fs (loop0): Start checkpoint disabled!
[  421.835489][ T7346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  421.886270][ T7057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.450673][ T6592] kworker/u4:23: attempt to access beyond end of device
[  423.450673][ T6592] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  423.559352][ T6592] kworker/u4:23: attempt to access beyond end of device
[  423.559352][ T6592] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  423.574370][ T7366] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  423.574370][ T7366]    program syz.3.686 not setting count and/or reply_len properly
[  423.914846][ T4588] device hsr_slave_0 left promiscuous mode
[  423.961567][ T4588] device hsr_slave_1 left promiscuous mode
[  423.999637][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.013676][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.135891][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.143364][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.230199][ T4588] device bridge_slave_1 left promiscuous mode
[  424.244175][ T7379] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  424.255660][ T7379] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  424.304981][ T4588] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.401643][ T4588] device bridge_slave_0 left promiscuous mode
[  424.461029][ T4588] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.839730][ T4588] device veth1_macvtap left promiscuous mode
[  424.890056][ T4588] device veth0_macvtap left promiscuous mode
[  424.951787][ T4588] device veth1_vlan left promiscuous mode
[  425.000746][ T4588] device veth0_vlan left promiscuous mode
[  426.711312][ T7383] overlayfs: failed to resolve './file1': -2
[  427.421452][ T4870] usb 2-1: USB disconnect, device number 2
[  427.687316][ T7386] loop3: detected capacity change from 0 to 32768
[  428.141657][   T26] audit: type=1800 audit(1756601385.950:9): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.689" name="file1" dev="loop3" ino=7 res=0 errno=0
[  429.919606][ T7400] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  429.919606][ T7400]    program syz.1.692 not setting count and/or reply_len properly
[  430.434239][ T4588] team0 (unregistering): Port device team_slave_1 removed
[  430.479619][ T4588] team0 (unregistering): Port device team_slave_0 removed
[  430.550963][ T4588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  430.601590][ T4588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.147720][ T4588] bond0 (unregistering): Released all slaves
[  431.255702][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.275867][ T7403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.369800][ T7405] tipc: Resetting bearer <eth:syzkaller0>
[  431.413178][ T7416] device syzkaller0 entered promiscuous mode
[  431.464256][ T7402] tipc: Disabling bearer <eth:syzkaller0>
[  431.503457][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  431.522520][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  431.591130][ T7099] 8021q: adding VLAN 0 to HW filter on device team0
[  431.980471][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  432.108540][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  432.177115][ T7430] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  432.192115][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  432.239602][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  432.277298][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.284484][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.489960][ T7435] loop3: detected capacity change from 0 to 40427
[  432.499488][ T7435] F2FS-fs (loop3): invalid crc value
[  432.523335][ T7435] F2FS-fs (loop3): Found nat_bits in checkpoint
[  432.558301][ T7435] F2FS-fs (loop3): Start checkpoint disabled!
[  432.569472][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  432.590806][ T7435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  432.645278][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  433.660072][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  433.750814][ T7445] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.697' sets config #0
[  433.761494][ T7445] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.697' sets config #1
[  433.851241][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  433.936783][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  433.978451][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.985647][ T5454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.075605][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  434.189333][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  434.537753][ T7057] device veth0_vlan entered promiscuous mode
[  434.592151][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  434.613492][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  434.646998][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  434.670793][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  434.801612][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  434.864525][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  435.009769][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  435.048707][ T7057] device veth1_vlan entered promiscuous mode
[  435.151708][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  435.274001][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  435.292139][ T4590] kworker/u4:14: attempt to access beyond end of device
[  435.292139][ T4590] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  435.325560][ T7099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  435.336795][ T4590] kworker/u4:14: attempt to access beyond end of device
[  435.336795][ T4590] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  435.358103][ T7099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  435.400963][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  435.420482][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  435.563499][ T7057] device veth0_macvtap entered promiscuous mode
[  435.583394][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  435.592124][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  435.599607][ T7465] loop1: detected capacity change from 0 to 128
[  435.680426][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  435.721777][ T7465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  435.851732][ T7465] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  435.925040][ T7057] device veth1_macvtap entered promiscuous mode
[  436.441293][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  437.066417][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.097771][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  437.111730][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.121596][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.185066][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.228091][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  437.260657][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.282475][ T7489] loop1: detected capacity change from 0 to 512
[  437.313873][ T7057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.353396][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.383767][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.399629][ T7489] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  437.418239][ T7489] UDF-fs: Scanning with blocksize 512 failed
[  437.462230][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.484741][ T7489] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  437.524068][ T7489] UDF-fs: Scanning with blocksize 1024 failed
[  437.532877][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.561582][ T7495] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  437.561582][ T7495]    program syz.0.705 not setting count and/or reply_len properly
[  437.595343][ T7489] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  437.615914][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  437.636678][ T7492] loop3: detected capacity change from 0 to 40427
[  437.637502][ T7489] UDF-fs: Scanning with blocksize 2048 failed
[  437.662131][ T7492] F2FS-fs (loop3): invalid crc value
[  437.671547][ T7492] F2FS-fs (loop3): Found nat_bits in checkpoint
[  437.704029][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  437.721050][ T7492] F2FS-fs (loop3): Start checkpoint disabled!
[  437.730120][ T7057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.737939][ T7492] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  437.738938][ T7489] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  437.756751][ T7057] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.766334][ T7057] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.775447][ T7057] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.786239][ T7057] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.811064][ T7489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  437.825975][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  437.856964][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  437.926521][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  438.032988][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  438.261711][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  438.314401][ T5454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  438.551644][   T26] audit: type=1800 audit(1756601395.735:10): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.704" name="bus" dev="loop1" ino=42 res=0 errno=0
[  438.574883][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.042980][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.092624][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.113004][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.126468][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  439.201845][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.249969][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  439.319870][ T4400] kworker/u4:9: attempt to access beyond end of device
[  439.319870][ T4400] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  439.411147][ T4400] kworker/u4:9: attempt to access beyond end of device
[  439.411147][ T4400] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  439.837894][  T126] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  439.995685][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  440.015446][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  440.042342][  T126] usb 6-1: config 0 has an invalid interface number: 46 but max is 0
[  440.058498][  T126] usb 6-1: config 0 has no interface number 0
[  440.078635][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  440.089388][  T126] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  440.102072][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  440.112923][ T7099] device veth0_vlan entered promiscuous mode
[  440.122188][  T126] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  440.141254][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  440.155988][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  440.169013][  T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.189046][ T7099] device veth1_vlan entered promiscuous mode
[  440.197793][  T126] usb 6-1: Product: syz
[  440.209154][  T126] usb 6-1: Manufacturer: syz
[  440.225130][  T126] usb 6-1: SerialNumber: syz
[  440.281509][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  440.282253][  T126] usb 6-1: config 0 descriptor??
[  440.330479][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  440.343549][ T7512] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  440.351312][ T7099] device veth0_macvtap entered promiscuous mode
[  440.360331][  T126] ums-karma 6-1:0.46: USB Mass Storage device detected
[  440.377565][ T7099] device veth1_macvtap entered promiscuous mode
[  440.406214][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.459384][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.476074][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.496357][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.554312][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.651609][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.702817][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.763910][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.815620][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.843648][  T126] ums-karma: probe of 6-1:0.46 failed with error -5
[  440.873871][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  440.905604][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  440.957732][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  440.995607][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  441.052899][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.090988][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.129599][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.178994][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.206156][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.220104][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.252306][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.294443][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.330812][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.360460][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  441.439286][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  441.482388][ T7099] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.506008][ T7099] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.543823][ T7099] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.574834][ T7099] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.853651][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.889614][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.954851][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  441.997835][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.027345][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.070475][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  442.616191][ T7559] hub 1-0:1.0: USB hub found
[  442.621714][ T7559] hub 1-0:1.0: 1 port detected
[  443.354438][ T7539] comedi comedi0: reset error (fatal)
[  443.423605][ T7553] comedi comedi3: Buffer allocation failed
[  443.708045][ T4333] usb 6-1: USB disconnect, device number 2
[  443.771351][ T4533] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  444.019507][ T4533] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  444.036999][ T4533] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.082631][ T4533] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  444.102782][ T4533] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  444.121741][ T4533] usb 7-1: Manufacturer: syz
[  444.165442][ T4533] usb 7-1: config 0 descriptor??
[  444.214495][   T33] Bluetooth: hci5: Frame reassembly failed (-84)
[  444.509026][ T4533] rc_core: IR keymap rc-hauppauge not found
[  444.515452][ T4533] Registered IR keymap rc-empty
[  444.537032][ T4533] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  444.617395][ T4533] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6
[  444.667605][ T4533] usb 7-1: USB disconnect, device number 2
[  444.713528][ T7601] binder: 7597:7601 ioctl c0306201 200000000080 returned -14
[  445.044931][ T7609] nbd5: detected capacity change from 0 to 1024
[  445.097493][   T52] block nbd5: Send control failed (result -89)
[  445.104136][   T52] block nbd5: Request send failed, requeueing
[  445.113279][ T4285] block nbd5: Receive control failed (result -32)
[  445.124595][   T52] block nbd5: Dead connection, failed to find a fallback
[  445.131875][   T52] block nbd5: shutting down sockets
[  445.137543][   T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.147030][   T52] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.155935][   T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.165097][   T52] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.175800][ T1042] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.185739][ T1042] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.199734][ T1042] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.210388][ T1042] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.219102][   T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.228274][   T52] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.236290][   T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.245375][   T52] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.253421][   T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.262757][   T52] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.270903][   T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.280344][   T52] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.288267][ T7614] ldm_validate_partition_table(): Disk read failed.
[  445.297583][   T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.306739][   T52] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.314837][   T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  445.323991][   T52] Buffer I/O error on dev nbd5, logical block 0, async page read
[  445.333415][ T7614] Dev nbd5: unable to read RDB block 0
[  445.364200][ T4533] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  445.387692][ T7614]  nbd5: unable to read partition table
[  445.397103][ T5131] ldm_validate_partition_table(): Disk read failed.
[  445.411181][ T5131] Dev nbd5: unable to read RDB block 0
[  445.425779][ T5131]  nbd5: unable to read partition table
[  445.434985][ T3638] ldm_validate_partition_table(): Disk read failed.
[  445.463642][ T3638] Dev nbd5: unable to read RDB block 0
[  445.470290][ T3638]  nbd5: unable to read partition table
[  445.477265][ T5131] ldm_validate_partition_table(): Disk read failed.
[  445.484519][ T5131] Dev nbd5: unable to read RDB block 0
[  445.491836][ T5131]  nbd5: unable to read partition table
[  445.581926][ T4533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.596618][ T4533] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  445.606481][ T4533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.633024][ T4533] usb 1-1: config 0 descriptor??
[  445.871409][ T4533] usbhid 1-1:0.0: can't add hid device: -71
[  445.886683][ T4533] usbhid: probe of 1-1:0.0 failed with error -71
[  445.917375][ T4533] usb 1-1: USB disconnect, device number 4
[  446.317465][ T7640] input: syz0 as /devices/virtual/input/input7
[  446.342160][ T7644] netlink: 'syz.3.740': attribute type 1 has an invalid length.
[  446.390294][ T4285] Bluetooth: hci5: command 0xfc11 tx timeout
[  446.398140][   T48] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  446.467517][ T7644] device gretap1 entered promiscuous mode
[  446.513852][ T7644] bond0: (slave gretap1): making interface the new active one
[  446.534684][ T4533] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  446.544738][ T7644] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  446.634707][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'.
[  446.690873][ T7652] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.767407][ T4533] usb 1-1: Using ep0 maxpacket: 32
[  446.790779][ T4533] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.816211][ T4533] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  446.844765][ T4533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.914642][ T4533] usb 1-1: config 0 descriptor??
[  446.932899][ T4533] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  447.026697][ T4533] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  447.421916][   T14] usb 1-1: USB disconnect, device number 5
[  447.464666][   T14] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  447.565920][ T4350] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  447.587265][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  447.769898][   T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  447.787448][ T4350] usb 7-1: Using ep0 maxpacket: 16
[  447.801357][ T4350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  447.833113][ T4350] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  447.842199][ T4350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.860246][ T4350] usb 7-1: Product: syz
[  447.864596][ T4350] usb 7-1: Manufacturer: syz
[  447.872174][ T4350] usb 7-1: SerialNumber: syz
[  447.892126][ T4350] usb 7-1: config 0 descriptor??
[  447.917216][ T4350] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  447.956023][ T4350] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  447.985114][   T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  448.023485][   T22] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  448.054714][   T22] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  448.093093][   T22] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  448.119251][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.149116][   T22] usb 6-1: Product: syz
[  448.159931][   T22] usb 6-1: Manufacturer: syz
[  448.174486][ T7699] 9pnet_virtio: no channels available for device syz
[  448.175052][   T22] usb 6-1: SerialNumber: syz
[  448.223617][   T22] hub 6-1:1.0: bad descriptor, ignoring hub
[  448.239445][   T22] hub: probe of 6-1:1.0 failed with error -5
[  448.442361][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'.
[  448.453826][   T22] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  448.564547][ T4350] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  448.827260][ T4333] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  449.043018][ T4333] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  449.056604][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.076005][ T4333] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  449.105182][ T4333] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  449.126736][ T4333] usb 2-1: Manufacturer: syz
[  449.149883][ T4333] usb 2-1: config 0 descriptor??
[  449.158738][ T7677] usb 6-1: reset high-speed USB device number 3 using dummy_hcd
[  449.364653][ T4333] rc_core: IR keymap rc-hauppauge not found
[  449.375199][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.390660][ T4333] Registered IR keymap rc-empty
[  449.407698][ T4333] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  449.418279][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.453889][ T4333] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  449.515642][ T4333] usb 2-1: USB disconnect, device number 3
[  449.663555][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'.
[  449.678317][ T6961] usb 6-1: USB disconnect, device number 3
[  449.686140][ T4350] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  449.697882][ T4350] em28xx 7-1:0.0: board has no eeprom
[  449.707660][ T6961] usblp0: removed
[  449.805107][ T4350] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  449.824045][ T4350] em28xx 7-1:0.0: dvb set to bulk mode.
[  449.831260][   T14] em28xx 7-1:0.0: Binding DVB extension
[  449.885573][ T4350] usb 7-1: USB disconnect, device number 3
[  449.909109][ T4350] em28xx 7-1:0.0: Disconnecting em28xx
[  450.093732][   T14] em28xx 7-1:0.0: Registering input extension
[  450.111339][ T4350] em28xx 7-1:0.0: Closing input extension
[  450.159796][ T4350] em28xx 7-1:0.0: Freeing device
[  450.393868][ T4333] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  450.612518][ T4333] usb 4-1: Using ep0 maxpacket: 8
[  450.637819][ T4333] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  450.680939][ T7762] netlink: 'syz.5.768': attribute type 1 has an invalid length.
[  450.696804][ T4333] usb 4-1: config 0 has no interface number 0
[  450.717383][ T4333] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  450.766377][ T4333] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  450.777442][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.794939][ T4333] usb 4-1: config 0 descriptor??
[  450.822206][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.768'.
[  450.849971][ T4333] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  451.043985][   T14] usb 4-1: USB disconnect, device number 3
[  451.785629][ T7758] syz.0.766 (7758): drop_caches: 2
[  453.240085][ T7829] TCP: TCP_TX_DELAY enabled
[  453.616034][ T4533] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  453.810681][ T4533] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.838046][ T4533] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  453.860104][ T4533] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  453.884511][ T4533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.924824][ T4533] usb 4-1: config 0 descriptor??
[  454.102805][ T7864] netlink: 'syz.0.802': attribute type 4 has an invalid length.
[  454.195286][ T7865] netlink: 'syz.0.802': attribute type 4 has an invalid length.
[  454.898988][ T7879] netlink: 'syz.5.805': attribute type 4 has an invalid length.
[  454.906782][ T7879] netlink: 152 bytes leftover after parsing attributes in process `syz.5.805'.
[  455.361721][ T7862] syz.1.800 (7862): drop_caches: 2
[  455.388916][ T7884] ------------[ cut here ]------------
[  455.394835][ T7884] WARNING: CPU: 1 PID: 7884 at kernel/softirq.c:401 __local_bh_enable_ip+0x176/0x1b0
[  455.404373][ T7884] Modules linked in:
[  455.408328][ T7884] CPU: 1 PID: 7884 Comm: syz.5.806 Not tainted syzkaller #0
[  455.415685][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  455.425777][ T7884] RIP: 0010:__local_bh_enable_ip+0x176/0x1b0
[  455.431811][ T7884] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 ff fe ff ff e8 3c 00 00 00 eb a5 <0f> 0b e9 2c ff ff ff 48 c7 c1 e4 a5 1f 8e 80 e1 07 80 c1 03 38 c1
[  455.451459][ T7884] RSP: 0018:ffffc9000369ea00 EFLAGS: 00010046
[  455.457568][ T7884] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001
[  455.465568][ T7884] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8832f0a2
[  455.473554][ T7884] RBP: ffffc9000369ea98 R08: dffffc0000000000 R09: ffffed100a57ccb2
[  455.481536][ T7884] R10: ffffed100a57ccb2 R11: 1ffff1100a57ccb1 R12: ffff888052be6680
[  455.489519][ T7884] R13: ffffea00019d2fc0 R14: dffffc0000000000 R15: 1ffff920006d3d40
[  455.497503][ T7884] FS:  00007f0cd1fd86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  455.506446][ T7884] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  455.513048][ T7884] CR2: 00007f2c494f56c0 CR3: 0000000069c65000 CR4: 00000000003506e0
[  455.521038][ T7884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  455.529107][ T7884] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  455.537107][ T7884] Call Trace:
[  455.540495][ T7884]  <TASK>
[  455.543449][ T7884]  ? _local_bh_enable+0xa0/0xa0
[  455.548326][ T7884]  ? do_raw_spin_unlock+0x11d/0x230
[  455.553561][ T7884]  ? page_pool_put_defragged_page+0x592/0x8c0
[  455.559675][ T7884]  page_pool_put_defragged_page+0x592/0x8c0
[  455.565606][ T7884]  tun_device_event+0xa62/0x1020
[  455.570566][ T7884]  raw_notifier_call_chain+0xcb/0x160
[  455.575954][ T7884]  dev_change_tx_queue_len+0x11d/0x260
[  455.581426][ T7884]  ? dev_set_mtu+0xc0/0xc0
[  455.585851][ T7884]  ? dev_change_flags+0xe3/0x1a0
[  455.590801][ T7884]  do_setlink+0xf4e/0x3c40
[  455.595259][ T7884]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  455.601448][ T7884]  ? stack_trace_save+0x98/0xe0
[  455.606313][ T7884]  ? __stack_depot_save+0x35/0x460
[  455.611528][ T7884]  ? __nla_validate_parse+0x1fd2/0x2990
[  455.617085][ T7884]  ? netlink_rcv_skb+0x1de/0x420
[  455.622029][ T7884]  ? netlink_unicast+0x74d/0x8d0
[  455.626988][ T7884]  ? __nla_validate+0x50/0x50
[  455.631695][ T7884]  ? validate_linkmsg+0x3db/0x4c0
[  455.636728][ T7884]  rtnl_newlink+0x10a3/0x1ff0
[  455.641417][ T7884]  ? rtnl_newlink+0xa71/0x1ff0
[  455.646215][ T7884]  ? rtnl_setlink+0x450/0x450
[  455.650904][ T7884]  ? trace_raw_output_contention_end+0xd0/0xd0
[  455.657077][ T7884]  ? rcu_is_watching+0x11/0xa0
[  455.661856][ T7884]  ? trace_contention_end+0x5f/0x170
[  455.667152][ T7884]  ? __mutex_lock+0x19e/0xaf0
[  455.671840][ T7884]  ? rcu_read_unlock+0x8c/0xa0
[  455.676630][ T7884]  ? rtnl_setlink+0x450/0x450
[  455.681314][ T7884]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[  455.686451][ T7884]  rtnetlink_rcv_msg+0x79b/0xed0
[  455.691407][ T7884]  ? rtnetlink_bind+0x80/0x80
[  455.696092][ T7884]  ? __local_bh_enable_ip+0x12a/0x1b0
[  455.701497][ T7884]  ? lockdep_hardirqs_on+0x94/0x140
[  455.706730][ T7884]  ? __local_bh_enable_ip+0x12a/0x1b0
[  455.712127][ T7884]  ? _local_bh_enable+0xa0/0xa0
[  455.717003][ T7884]  ? __dev_queue_xmit+0x26f/0x3760
[  455.722129][ T7884]  ? __dev_queue_xmit+0x26f/0x3760
[  455.727278][ T7884]  ? __dev_queue_xmit+0x15c9/0x3760
[  455.732500][ T7884]  ? __dev_queue_xmit+0x26f/0x3760
[  455.737641][ T7884]  ? netdev_core_pick_tx+0x340/0x340
[  455.742949][ T7884]  ? ref_tracker_free+0x630/0x7c0
[  455.748003][ T7884]  ? refcount_inc+0x70/0x70
[  455.752521][ T7884]  ? __copy_skb_header+0x417/0x5a0
[  455.757666][ T7884]  ? __skb_clone+0x480/0x790
[  455.762304][ T7884]  netlink_rcv_skb+0x1de/0x420
[  455.768231][ T7884]  ? rtnetlink_bind+0x80/0x80
[  455.772922][ T7884]  ? netlink_ack+0x1100/0x1100
[  455.777725][ T7884]  ? netlink_deliver_tap+0x2e/0x1b0
[  455.783023][ T7884]  netlink_unicast+0x74d/0x8d0
[  455.787806][ T7884]  netlink_sendmsg+0x89e/0xbc0
[  455.792592][ T7884]  ? netlink_getsockopt+0x540/0x540
[  455.797813][ T7884]  ? aa_sock_msg_perm+0x94/0x150
[  455.802858][ T7884]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  455.808152][ T7884]  ? security_socket_sendmsg+0x7c/0xa0
[  455.813627][ T7884]  ? netlink_getsockopt+0x540/0x540
[  455.818852][ T7884]  ____sys_sendmsg+0x59b/0x970
[  455.823640][ T7884]  ? __sys_sendmsg_sock+0x30/0x30
[  455.828676][ T7884]  ? __import_iovec+0x315/0x500
[  455.833555][ T7884]  ? import_iovec+0x6f/0xa0
[  455.838081][ T7884]  ___sys_sendmsg+0x21c/0x290
[  455.842777][ T7884]  ? __sys_sendmsg+0x270/0x270
[  455.847675][ T7884]  ? __fdget+0x17c/0x200
[  455.851936][ T7884]  __se_sys_sendmsg+0x19e/0x270
[  455.856804][ T7884]  ? __se_sys_futex+0x14a/0x440
[  455.861678][ T7884]  ? __x64_sys_sendmsg+0x80/0x80
[  455.866730][ T7884]  ? lockdep_hardirqs_on+0x94/0x140
[  455.871957][ T7884]  do_syscall_64+0x4c/0xa0
[  455.876380][ T7884]  ? clear_bhb_loop+0x60/0xb0
[  455.881064][ T7884]  ? clear_bhb_loop+0x60/0xb0
[  455.885750][ T7884]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  455.891663][ T7884] RIP: 0033:0x7f0cd118ebe9
[  455.896102][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  455.915722][ T7884] RSP: 002b:00007f0cd1fd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.924149][ T7884] RAX: ffffffffffffffda RBX: 00007f0cd13c5fa0 RCX: 00007f0cd118ebe9
[  455.932130][ T7884] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e
[  455.940107][ T7884] RBP: 00007f0cd1211e19 R08: 0000000000000000 R09: 0000000000000000
[  455.948084][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.956065][ T7884] R13: 00007f0cd13c6038 R14: 00007f0cd13c5fa0 R15: 00007fffbc8198b8
[  455.964082][ T7884]  </TASK>
[  455.967135][ T7884] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  455.974416][ T7884] CPU: 1 PID: 7884 Comm: syz.5.806 Not tainted syzkaller #0
[  455.981707][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  455.991769][ T7884] Call Trace:
[  455.995059][ T7884]  <TASK>
[  455.998001][ T7884]  dump_stack_lvl+0x168/0x22e
[  456.002695][ T7884]  ? memcpy+0x3c/0x60
[  456.006696][ T7884]  ? show_regs_print_info+0x12/0x12
[  456.011908][ T7884]  ? load_image+0x3b0/0x3b0
[  456.016444][ T7884]  panic+0x2c9/0x710
[  456.020359][ T7884]  ? bpf_jit_dump+0xd0/0xd0
[  456.024888][ T7884]  __warn+0x2f8/0x4f0
[  456.028888][ T7884]  ? __local_bh_enable_ip+0x176/0x1b0
[  456.034284][ T7884]  ? __local_bh_enable_ip+0x176/0x1b0
[  456.039671][ T7884]  report_bug+0x2ba/0x4f0
[  456.044011][ T7884]  ? __local_bh_enable_ip+0x176/0x1b0
[  456.049406][ T7884]  handle_bug+0x3a/0x70
[  456.053570][ T7884]  exc_invalid_op+0x16/0x40
[  456.058082][ T7884]  asm_exc_invalid_op+0x16/0x20
[  456.062949][ T7884] RIP: 0010:__local_bh_enable_ip+0x176/0x1b0
[  456.068959][ T7884] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 ff fe ff ff e8 3c 00 00 00 eb a5 <0f> 0b e9 2c ff ff ff 48 c7 c1 e4 a5 1f 8e 80 e1 07 80 c1 03 38 c1
[  456.088574][ T7884] RSP: 0018:ffffc9000369ea00 EFLAGS: 00010046
[  456.094648][ T7884] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000001
[  456.102627][ T7884] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8832f0a2
[  456.110605][ T7884] RBP: ffffc9000369ea98 R08: dffffc0000000000 R09: ffffed100a57ccb2
[  456.118585][ T7884] R10: ffffed100a57ccb2 R11: 1ffff1100a57ccb1 R12: ffff888052be6680
[  456.126564][ T7884] R13: ffffea00019d2fc0 R14: dffffc0000000000 R15: 1ffff920006d3d40
[  456.134549][ T7884]  ? page_pool_put_defragged_page+0x592/0x8c0
[  456.140636][ T7884]  ? _local_bh_enable+0xa0/0xa0
[  456.145507][ T7884]  ? do_raw_spin_unlock+0x11d/0x230
[  456.150740][ T7884]  ? page_pool_put_defragged_page+0x592/0x8c0
[  456.156847][ T7884]  page_pool_put_defragged_page+0x592/0x8c0
[  456.162850][ T7884]  tun_device_event+0xa62/0x1020
[  456.167816][ T7884]  raw_notifier_call_chain+0xcb/0x160
[  456.173201][ T7884]  dev_change_tx_queue_len+0x11d/0x260
[  456.178671][ T7884]  ? dev_set_mtu+0xc0/0xc0
[  456.183100][ T7884]  ? dev_change_flags+0xe3/0x1a0
[  456.188047][ T7884]  do_setlink+0xf4e/0x3c40
[  456.192486][ T7884]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  456.198656][ T7884]  ? stack_trace_save+0x98/0xe0
[  456.203524][ T7884]  ? __stack_depot_save+0x35/0x460
[  456.208655][ T7884]  ? __nla_validate_parse+0x1fd2/0x2990
[  456.214217][ T7884]  ? netlink_rcv_skb+0x1de/0x420
[  456.219167][ T7884]  ? netlink_unicast+0x74d/0x8d0
[  456.224132][ T7884]  ? __nla_validate+0x50/0x50
[  456.228846][ T7884]  ? validate_linkmsg+0x3db/0x4c0
[  456.233887][ T7884]  rtnl_newlink+0x10a3/0x1ff0
[  456.238582][ T7884]  ? rtnl_newlink+0xa71/0x1ff0
[  456.243372][ T7884]  ? rtnl_setlink+0x450/0x450
[  456.248320][ T7884]  ? trace_raw_output_contention_end+0xd0/0xd0
[  456.254487][ T7884]  ? rcu_is_watching+0x11/0xa0
[  456.259267][ T7884]  ? trace_contention_end+0x5f/0x170
[  456.264591][ T7884]  ? __mutex_lock+0x19e/0xaf0
[  456.269291][ T7884]  ? rcu_read_unlock+0x8c/0xa0
[  456.274080][ T7884]  ? rtnl_setlink+0x450/0x450
[  456.278770][ T7884]  ? rtnetlink_rcv_msg+0x1d8/0xed0
[  456.283893][ T7884]  rtnetlink_rcv_msg+0x79b/0xed0
[  456.288855][ T7884]  ? rtnetlink_bind+0x80/0x80
[  456.293543][ T7884]  ? __local_bh_enable_ip+0x12a/0x1b0
[  456.298937][ T7884]  ? lockdep_hardirqs_on+0x94/0x140
[  456.304178][ T7884]  ? __local_bh_enable_ip+0x12a/0x1b0
[  456.309564][ T7884]  ? _local_bh_enable+0xa0/0xa0
[  456.314437][ T7884]  ? __dev_queue_xmit+0x26f/0x3760
[  456.319565][ T7884]  ? __dev_queue_xmit+0x26f/0x3760
[  456.324711][ T7884]  ? __dev_queue_xmit+0x15c9/0x3760
[  456.329938][ T7884]  ? __dev_queue_xmit+0x26f/0x3760
[  456.335158][ T7884]  ? netdev_core_pick_tx+0x340/0x340
[  456.340458][ T7884]  ? ref_tracker_free+0x630/0x7c0
[  456.345494][ T7884]  ? refcount_inc+0x70/0x70
[  456.350009][ T7884]  ? __copy_skb_header+0x417/0x5a0
[  456.355138][ T7884]  ? __skb_clone+0x480/0x790
[  456.359745][ T7884]  netlink_rcv_skb+0x1de/0x420
[  456.364521][ T7884]  ? rtnetlink_bind+0x80/0x80
[  456.369209][ T7884]  ? netlink_ack+0x1100/0x1100
[  456.373992][ T7884]  ? netlink_deliver_tap+0x2e/0x1b0
[  456.379213][ T7884]  netlink_unicast+0x74d/0x8d0
[  456.383996][ T7884]  netlink_sendmsg+0x89e/0xbc0
[  456.388776][ T7884]  ? netlink_getsockopt+0x540/0x540
[  456.393999][ T7884]  ? aa_sock_msg_perm+0x94/0x150
[  456.398958][ T7884]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  456.404251][ T7884]  ? security_socket_sendmsg+0x7c/0xa0
[  456.409727][ T7884]  ? netlink_getsockopt+0x540/0x540
[  456.414945][ T7884]  ____sys_sendmsg+0x59b/0x970
[  456.419756][ T7884]  ? __sys_sendmsg_sock+0x30/0x30
[  456.424788][ T7884]  ? __import_iovec+0x315/0x500
[  456.429662][ T7884]  ? import_iovec+0x6f/0xa0
[  456.434181][ T7884]  ___sys_sendmsg+0x21c/0x290
[  456.438874][ T7884]  ? __sys_sendmsg+0x270/0x270
[  456.443681][ T7884]  ? __fdget+0x17c/0x200
[  456.447943][ T7884]  __se_sys_sendmsg+0x19e/0x270
[  456.452803][ T7884]  ? __se_sys_futex+0x14a/0x440
[  456.457676][ T7884]  ? __x64_sys_sendmsg+0x80/0x80
[  456.462631][ T7884]  ? lockdep_hardirqs_on+0x94/0x140
[  456.467843][ T7884]  do_syscall_64+0x4c/0xa0
[  456.472279][ T7884]  ? clear_bhb_loop+0x60/0xb0
[  456.476994][ T7884]  ? clear_bhb_loop+0x60/0xb0
[  456.481684][ T7884]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  456.487622][ T7884] RIP: 0033:0x7f0cd118ebe9
[  456.492067][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  456.511779][ T7884] RSP: 002b:00007f0cd1fd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  456.520211][ T7884] RAX: ffffffffffffffda RBX: 00007f0cd13c5fa0 RCX: 00007f0cd118ebe9
[  456.528195][ T7884] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e
[  456.536181][ T7884] RBP: 00007f0cd1211e19 R08: 0000000000000000 R09: 0000000000000000
[  456.544172][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.552149][ T7884] R13: 00007f0cd13c6038 R14: 00007f0cd13c5fa0 R15: 00007fffbc8198b8
[  456.560143][ T7884]  </TASK>
[  456.563483][ T7884] Kernel Offset: disabled
[  456.567943][ T7884] Rebooting in 86400 seconds..