last executing test programs:

4m45.893530647s ago: executing program 5 (id=43):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94)

4m44.412033259s ago: executing program 5 (id=50):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x21, 0x1da, &(0x7f0000000e80)="$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")

4m43.320176742s ago: executing program 5 (id=54):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x14, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x40, 0x49, 0x20, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, r3, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x40}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt\x00', 0x0)
mount(&(0x7f0000000900)=@filename='./dev/sda1\x00', &(0x7f0000000940)='./mnt\x00', &(0x7f0000000980)='ext4\x00', 0x8410, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./mnt\x00', 0xa0000, 0x14)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000a00)={0x0, 0x2904c, 0x17, 0x10003, '\x00', [{0x0, 0x5, 0xcd, 0xffffffffffffffff}, {0x801, 0x0, 0x8001}]})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/syz_tun/brport/root_block\x00', 0x2, 0x0)
write(r5, &(0x7f0000000380)='1\n', 0x2)

4m42.999463348s ago: executing program 5 (id=55):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c6, &(0x7f00000006c0)="$eJzs3U9vHGcdB/DvbhxnHaR04yZtQJWwilQhLJJdWyIpF6AUZKEKVeLA2SJOYmWTVvYWuT2ggDhUnPoSysFvAHEskg+0Rzj1bNQjEnffjGZ21ru2t65du951+/lIs8/zzDPzzG9+8ycza0Ub4BtraT5TW6llaf6NjaK9vbnY2d5cfNKvJ7mSpJ40ktSK2X9P8lnyLL0p3+53DJWHfPpR4+EnH3z8fq/VqKZy+dpR6x3PXizNXqxleVbjLZx6vMEeziWZrUoYu92+/4zsPuV1CQBMslpyadT8ZnK1elgv3gN6T8W9Z+wL7dm4AwAAAIBz8NxOdrKRa+OOAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6S6vf/a9VU79fnUuv//v90NS9V/ULbGncAAAAAAAAAAHAGvruTnWzkWr+9Wyv/5v9y2bhRfn4r72Q9K1nL7WxkOd10s5Z2kubQQNMby93uWvsYay6MXHPhfPYXAAAAAAAAAL6m/pSlwd//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgEtSSS72inG70683Up5I0kkwXyz1L/t2vX2Rb4w4AAAAAzsFzO9nJRq7127u18p3/hfK9v5F38jTdrKabTlZyv/wuoPfWX9/eXOxsby4+KabD4/7sfycKoxwxve8eRm/5VrnETB5ktZxzO7/LW+nkfurlmoVb/XhGx/XHIqbaTyrHjOx+VRZ7/quqnAzNMiOX9zLSqmIrsnH96Eyc8Ogc3FI79b1vfm58BTm/WpXF/rw+0TlfGDr7Xjg6E8nsb/9y91Hn6eNHD9bnJ2eXvqSDmVgcysSL36hMtMpM3NxrL+WX+U3mM5c3s5bV/D7L6WYlc3m9rC1X53Px2Tw6Uz/d13rziyKZro5L7y56spheLte9ltX8Om/lfnlEW7mbu1nIj/JqWvuO8M1jXPX1k1313/t+Vbmc5BdVORmKvF4fyuvwPbdZ9g3PGWRp9uzvjVPfqSrF2fPaxN0brx/4V6KfieePzsRfd4vP9c7Tx2uPlt8+5vZeqcoiAz+fqEwU58tscbDK1v6zo+h7fmRfu+y7sddXP9R3c6/vi67U6eoZ7vBIC2XfiyP7euvdGuob9bwFwMS7+oOr0zP/nfnXzIczf555NPNG47Ur9668NJ3L/7z846nWpVfqL9X+lg/zh8H7PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OWtv/ve4+VOZ2VNRUVFZa8y7jsT8FW7033y9p31d9/74eqT5YcrD1eevtq6d6/dbt9t3Xmw2lmpPscdJQBwlgYP/eOOBAAAAAAAAAAAAAAA+Dzn8d+Jx72PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA19vSfKa2Uku7dbtVtLc3FzvF1K8PlmwkqRWVfyT5LHmW3pTm0HC1z9vOpx81Hn7ywcfvD8Zq9JevHbXe8eyLpX4gptOOt3Dq8QZ7OJdktiph7P4fAAD//xl1A5k=") (fail_nth: 9)

4m42.509854574s ago: executing program 5 (id=56):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101301)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
prlimit64(0x0, 0xe, &(0x7f0000001840)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x8)
syz_mount_image$f2fs(&(0x7f0000002240), &(0x7f0000002280)='./file0\x00', 0x82, &(0x7f00000022c0)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES64, @ANYRES16], 0x1, 0x105b3, &(0x7f0000002380)="$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")
syz_mount_image$vfat(&(0x7f0000012940), &(0x7f0000012980)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000129c0))
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000012a00)='./file0/file1\x00', 0x40, 0x83)
readahead(r3, 0x6, 0x1)
recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/27, 0x1b}, {&(0x7f0000001400)=""/81, 0x51}, {&(0x7f0000001480)=""/211, 0xd3}, {&(0x7f0000001580)=""/176, 0xb0}, {&(0x7f0000001640)=""/176, 0xb0}], 0x8}, 0x9}], 0x1, 0x400100a0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000001900), 0x100000000, 0x80000)
ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000001940)={0x40000000, 0x4, "69165d7f9cf6cac449e4d8f0458323b3a34647ca24a25f50af9375fbb5c7617b", 0x6, 0x6e4d4af6, 0x1ff, 0x4, 0x8f9, 0x446, 0x6, 0xc86, [0x2, 0x4, 0x1, 0x7ff]})
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x62, 0x17, 0xff7f, 0x1003, 0x0, 0xfffffbff, 0x0})
r5 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000017c0)={'fscrypt:', @desc4}, &(0x7f0000001a40)={0x0, "ae80958cef02786f86e4015803a2a9dbace6c039b86e5b9420e94e247c3c777e4683c8d00be35064061bca995da9e86ef76ca559207229055f2008f697fc9800", 0x3b}, 0x48, 0xfffffffffffffffa)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000001880)='\x00', 0x89901)
open_tree(r6, &(0x7f00000018c0)='\x00', 0x89901)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xdb)
r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001f40)={'syztnl1\x00', &(0x7f0000001ec0)={'syztnl0\x00', <r8=>0x0, 0x2f, 0x3, 0x1, 0xee00, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x32}, 0x700, 0x8010, 0x3, 0x401}})
sendmsg$inet(r1, &(0x7f00000021c0)={&(0x7f0000001800)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001ac0)="6c420297b609d7b5833984ce65ee011de01a25c1aa4f56f553a96fe755c6cd97918cea5e4fe542ba68d60e0e100e9ff5a6f8de0bb329232fa674d11ec46d973383e06c9738", 0x45}, {&(0x7f0000001b40)="2b22285468cfd52ebdfc0ad4f2d3a722d5f4cc7f51114c04afabc2df481ac9b4cb70ad4d23b26de472a7f93b6dba3bf021201e2a7171c49e024bb13d4201a1cd535cccb7fae3c45c99f715a700fbd61fc98391e387d1dc9d7b1298", 0x5b}, {&(0x7f0000001bc0)="dcc5b851c9b122e2161a4b3cae7d7a6349325c808c75223759c3900370131aa05fbe9bbec87ec1999cd5c03228e619573b116f0e075ed24708bebe8cb85ba5738cfd7ba62208e59e28140f75f21d03107cebbb9a1c435738da3b7881ec64e5d2718b539ec8ba76113b86496d771cf31106514b34269eea7c790fb77f03a8b92503b71498fdaf009f2aa6b4b3f10c6d0ce04cc7825aacc8c40c3021ca8a069511437a307abe4935bc18c41d6b99c45e14d1805dd2d52e2a90fa6339ea4ac110e441c60575fb2b4b89720c6b3542785319910f106bdf76915ec3f009fff4f77f89", 0xe0}, {&(0x7f0000001cc0)="2c251b13124dea7f6abd8a110fb37c75a685484b87ed2c82fcfdcfdf1951f588f914516f63043c6615ec4a29f7c81ec6c222f1c0070b30af4d2a20e19845f797635fde2b646dff486c640217e1c4a0527365ff89764ff1ec8e6fc9a17b748c3514f7550822dc19ac0106b3d32d1d35694c6b7d8de9900141626d4913e411caac05b14e8f339e83", 0x87}, {&(0x7f0000001d80)="4639498df3d8760becdef7f50d99304611c5af05c8c05677995ec7878d46fca0e8f2f229a3950b2c653b6dd0d5939231c46d29", 0x33}, {&(0x7f0000001dc0)="7669248932038c7127fe549ed62d402fb87f7e410202850620024fcd35ca55bae2a13b1d2caddb7e5eacf41167da9470755c51f2182103985693925d96d4fae51e79ef85305369e9e80ba721a3b926c2594bea88ab45d1cbeb02f500066ade9f9efbed1821b5ab288dd0f0a2873b26e954786663bb68b3e829f43465f3ac", 0x7e}], 0x6, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="ffffffffac14143600000000940000000000000000000000070000004424e7530a01010000000008ac1414aa0000d136ffffffff00000008ac1e000100000003442ce6000000fc37000000400000a33e000000050000000b0000000600000002ffffffb1000008000000000294040100071705e0000001ac1414bbac1414aaffffffff0a0101028317d200000000ac1414bb7f0000017f000001e0000002000000000000140000000000000000000000020000000500000000000000"], 0x210}, 0x20004040)

4m37.353764108s ago: executing program 5 (id=64):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x76dc)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000600))
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000800)={0x1, 0x8}, 0x8)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00@', @ANYRES16=r6, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040f204211400000040000109022400010000b00009040100090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000700)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="402429060000290b986e1a0000ee9fa47fad7cc0fadbba479c82dc874c88a7211f46d75fe34c250c0c1cb45655f4f5"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf256d000000856a82ab5a75ada18cf60db96f34c6f0a3f1b0f1135c55f11579aa7cdf0a811664e4857edebfaa972bd8ea325671282807cb1a16b67b0f05c3b9defe35520bcd2b01873ed345514ffc94e9936d3c0c66a98fb5e36dfc45f01db0dcd6f34505573a1390e960c5f83f7a371ac357bf1f91a70c422cfe70c537d232e304b82413fe56175e239b6c0b3c22f72a87a91d1ffd076d6a7e157ec4a999bd5f3261d8f34fd572b0be2e2e3c9983c8c24c5c58dc8138df35d0cda5ccf4fcb435dbe031cb43b9266658f67b07cff621fdb524e536"], 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x40044)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x10c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='smaps\x00')
r8 = memfd_create(&(0x7f0000000940)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad;\x92\n\x8d\xb6I\x1fQ\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\xa7Wd\xa4Eu\x8cs\xe0\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceYH\x8f\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xbf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xb6\x87\xa43\xdc50V-\x13F\xb6&\xcb\xa3\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xad\xcf`*8&\feeV\x17U=(\xff\xe5t\xe4\xe6\xd8\x8f\x81\xa02\xfed\xde\x03\xdbN98\xb1\x8b\xccg2_\xc4bA\xf1\xf8\xfb\xf8\xd0\xfb_\x1e\"\xedF\x17$\x9e\xd8\xae\xc1\xaf\xee%\x1c\xc6V\x17\x03\xa6&\xa86\xc3\xd5\x02\x10g\x02(EI\x8d\x19\xefJ\xc1x\x92\x8c\x05\xb9\xd2Y\xa0\x13|\x95\xce\x86in\xd4\xd0\xb4\x02?gl\x8f\x1e\xa0\xe5\xf9\xe5\xc9\x9eG\xa9\x14\xff\xe2p\xb4\xda\x1b\t\xc7t\xe3\xe8\xb2\xa5\\\xc6\f\r\xb4\xc1o\x9aS\xf2+\xf7\r04\xb3\xf8\xe38\v\xa4\xbdf', 0x1)
mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r8, 0xbc4cd000)

4m22.012775558s ago: executing program 32 (id=64):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x76dc)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000600))
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000800)={0x1, 0x8}, 0x8)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00@', @ANYRES16=r6, @ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040f204211400000040000109022400010000b00009040100090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000700)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="402429060000290b986e1a0000ee9fa47fad7cc0fadbba479c82dc874c88a7211f46d75fe34c250c0c1cb45655f4f5"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf256d000000856a82ab5a75ada18cf60db96f34c6f0a3f1b0f1135c55f11579aa7cdf0a811664e4857edebfaa972bd8ea325671282807cb1a16b67b0f05c3b9defe35520bcd2b01873ed345514ffc94e9936d3c0c66a98fb5e36dfc45f01db0dcd6f34505573a1390e960c5f83f7a371ac357bf1f91a70c422cfe70c537d232e304b82413fe56175e239b6c0b3c22f72a87a91d1ffd076d6a7e157ec4a999bd5f3261d8f34fd572b0be2e2e3c9983c8c24c5c58dc8138df35d0cda5ccf4fcb435dbe031cb43b9266658f67b07cff621fdb524e536"], 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x40044)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x10c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='smaps\x00')
r8 = memfd_create(&(0x7f0000000940)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad;\x92\n\x8d\xb6I\x1fQ\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\xa7Wd\xa4Eu\x8cs\xe0\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceYH\x8f\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xbf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xb6\x87\xa43\xdc50V-\x13F\xb6&\xcb\xa3\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xad\xcf`*8&\feeV\x17U=(\xff\xe5t\xe4\xe6\xd8\x8f\x81\xa02\xfed\xde\x03\xdbN98\xb1\x8b\xccg2_\xc4bA\xf1\xf8\xfb\xf8\xd0\xfb_\x1e\"\xedF\x17$\x9e\xd8\xae\xc1\xaf\xee%\x1c\xc6V\x17\x03\xa6&\xa86\xc3\xd5\x02\x10g\x02(EI\x8d\x19\xefJ\xc1x\x92\x8c\x05\xb9\xd2Y\xa0\x13|\x95\xce\x86in\xd4\xd0\xb4\x02?gl\x8f\x1e\xa0\xe5\xf9\xe5\xc9\x9eG\xa9\x14\xff\xe2p\xb4\xda\x1b\t\xc7t\xe3\xe8\xb2\xa5\\\xc6\f\r\xb4\xc1o\x9aS\xf2+\xf7\r04\xb3\xf8\xe38\v\xa4\xbdf', 0x1)
mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r8, 0xbc4cd000)

3m43.239566752s ago: executing program 1 (id=157):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14)
read$nci(r0, &(0x7f0000000380)=""/100, 0x64)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(r0, &(0x7f00000005c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000900)=0x4)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000))
read$nci(r0, &(0x7f0000000680)=""/100, 0x64)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4)
write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
read$nci(r0, &(0x7f0000000840)=""/100, 0x64)
write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7)

3m41.904676121s ago: executing program 1 (id=160):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000080)={[{@norecovery}, {@debug}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000000d00)="$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")
socket$inet6(0xa, 0x80002, 0x0)
userfaultfd(0x80001)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x4, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000640)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000a00)='./bus\x00', 0x44828, 0x0, 0x1, 0x0, &(0x7f0000000a40))
chdir(&(0x7f0000001340)='./bus\x00')
r2 = open(&(0x7f0000001380)='.\x00', 0x8000, 0x50)
getdents(r2, 0x0, 0x0)
writev(r0, &(0x7f0000000840), 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3m40.82720726s ago: executing program 1 (id=162):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4051}, 0x44004)
prctl$PR_SCHED_CORE(0x42, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[<r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580), 0x6, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000007c0)={&(0x7f0000000600), 0x0, r2, r1, 0x5, 0x3, 0x0, 0x5, {0x9, 0x9a14, 0x2, 0x6, 0x6e4b, 0x80, 0xd, 0x1d8, 0x3, 0x200, 0x4, 0x1, 0x2, 0x5, "90650dfcda5879b1d7d397c56081fec9a5dc20f0ad6f7cc132beddda011a3168"}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r5=>0x0})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x3000000000, &(0x7f00004d6000/0x1000)=nil, 0x3)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002c8044000000090000f3ffffff0009000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044001}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x2a, 0xa, 0x1)
fcntl$lock(0xffffffffffffffff, 0x2a, &(0x7f0000000c00)={0x0, 0x0, 0x10001, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2401, 0x4a)
write(r6, &(0x7f0000000d40)='0', 0x1)
capset(&(0x7f0000000d80)={0x19980330}, &(0x7f0000000dc0)={0x7, 0x7, 0x4, 0x1ff, 0x101, 0x1})
io_setup(0x222, &(0x7f0000000e00))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

3m40.458559822s ago: executing program 1 (id=165):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (fail_nth: 9)

3m38.016211521s ago: executing program 1 (id=168):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x104}}, 0x0)

3m35.935408673s ago: executing program 1 (id=170):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0xd, 0xe, 0x0, 0x1, [@generic="1c", @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@remote}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 9)

3m20.162484851s ago: executing program 33 (id=170):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0xd, 0xe, 0x0, 0x1, [@generic="1c", @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@remote}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 9)

2m18.945848551s ago: executing program 3 (id=305):
syz_80211_inject_frame(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f0000001400)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x7000002, 0x14032, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)

2m15.113970151s ago: executing program 3 (id=313):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x113900, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r1)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40050)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000340)=@gettaction={0x0, 0x32, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}]}]}, 0x32}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4401000010000100feffffff00010000fe88000000000000000000000000000120010000000000000000000000000000000107144e2300050000000067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r6, 0x922, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000180)="2000000014000504010000000000000023000000010000000500020008000000", 0x20)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r8, &(0x7f00000001c0)={0x23, 0x1, 0x8}, 0x10)
ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@get={0xe0, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {{'sha256\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f00000014c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r10, &(0x7f0000001500)="2b0000000600aabbccddeec0", 0xc)

2m11.751464511s ago: executing program 3 (id=319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)

2m8.962521803s ago: executing program 3 (id=323):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x81)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/142, 0x8e}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001480)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0})
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x890, &(0x7f0000000080)=ANY=[], 0x1, 0xda8, &(0x7f0000000440)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./myproc\x00', 0x1ff)
syz_mount_image$vfat(&(0x7f0000001240), &(0x7f0000001280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000001300))
r2 = openat(0xffffffffffffff9c, &(0x7f0000001340)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000001380)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000001400)=[0x1000], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f0000001440)=[0x9], 0x1, 0x8, 0x98f, 0xffff}})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000001300)='.\x00', &(0x7f00000015c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000001600)='./bus\x00', &(0x7f0000001640), 0x40, &(0x7f0000001680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000016c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x200)
openat(0xffffffffffffff9c, &(0x7f0000001780)='./file0\x00', 0x400, 0x9)
ioctl(r0, 0x40140921, &(0x7f0000000420))

2m3.827210234s ago: executing program 3 (id=326):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40d00)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000340)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x8, 0x3}, @sack_perm, @timestamp, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0xfffffffd}, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='bbr', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000440), 0x4)

2m2.915860062s ago: executing program 3 (id=327):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x61)
sendmmsg$inet(r0, &(0x7f0000000380), 0x4000095, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000003c0)=0x8586, 0x4)

2m1.260945111s ago: executing program 34 (id=327):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x61)
sendmmsg$inet(r0, &(0x7f0000000380), 0x4000095, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000003c0)=0x8586, 0x4)

21.560262926s ago: executing program 4 (id=473):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000019500)=0x80000000000003)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000808)
sendto(0xffffffffffffffff, &(0x7f0000019600)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000019640)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x104}}, 0x0)

19.647976365s ago: executing program 4 (id=475):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0)
syz_emit_ethernet(0xab, &(0x7f0000000940)=ANY=[@ANYBLOB="0180c20000010180c200000008004500009d00000000001190787f0000010000000000004e200089907881080000238bd1b245f8fae5997f0f07e88ecd709e4db62614e54693723b263a6f68fe0108000000278f8553b62206e0eaef7dd88f5bd1552d488f2cd02b6c52760bbf45fb4b7509e676869e0865669bbf6cdce8f3fc4ae9e763e713c47babb0428f4c5dbcd15f031624eb5f7c15e51860aac14e67fb709a7c99e6db4c0b1a610223b4c0f35c4ab5164468ba25b53ecada71a8e961e4b5d5c9fd84da5f8760e17954d5393594fafed7"], 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x3, 0x0, {0xa, 0x4e21, 0xfffffff0, @local, 0x7f}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="ea0bf5dbbb2d81b8500be2e4dc027574f355406bb634d7c7677c384f85541291d920d1e8117e3134d4d5ca29a6a621c41082a4b98c3ed54aa9d2cf54602b344e429d455a0cdb9ad05299a2b75522c54fce9df74d453fd71bbe698b1f65d8e05f5e0b520f82d1147c159b55d2c47bec295edcc96b6b8994f5d618ac0040", 0x7d}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x100}, 0x80)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2)
getsockname$packet(r2, &(0x7f0000000ac0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x44)
sendmsg$nl_route(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2b}]}}}]}, 0x50}}, 0x0)
connect$llc(r2, &(0x7f0000000c40)={0x1a, 0x110, 0xda, 0x1, 0x43, 0x1, @remote}, 0x10)
r4 = inotify_init()
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740), 0x1c0002, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x1022002, 0x0)
r7 = dup(r6)
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0)
sendfile(r6, r8, 0x0, 0x8000fffffffe)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
write$vga_arbiter(r5, &(0x7f0000000780)=@other={'decodes', ' ', 'none'}, 0xd)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c)
close_range(r4, 0xffffffffffffffff, 0x0)

17.791954033s ago: executing program 6 (id=477):
r0 = dup(0xffffffffffffffff)
sendmsg$inet_sctp(r0, &(0x7f0000004a80)={&(0x7f0000004700)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000004740)="111f6b420b210c66013ac908813f3ef76007736bca00a4437bb3989392d4eebf8cc47a6999e4e889f0c6535dd2a90cbfc0f6b00742f5bb8c3cb715c087b59cc9348c49ae", 0x44}, {&(0x7f00000047c0)="ac2055c641b3998702c3b751ccdf2d99041f743d1a38e4e8bef85ba6cc0219bfbd028a61f5b8295710f7e5f3b64538a6e702d62a2e65998c7505acd01840f5bb133b0e7c503f6e8394b0ee87bf9625b627da92405c42253120ad673c8028499648c5c81e6645ca289d3aacd0ae4655025066fa251e152d3f87d1dc84fbe71d9d086a18ede7ab3ad884e2df6de16a68388e2371c9732f617bfb53eea72d31bcb3b30858f925f11856ed53e8c895abf2107afc598ffd5f9da87690cdaf48eb9f081f306eec248574b92ad0dc699694df7795ecf515bbf30d01c7e2cf6c732d4a021b5c", 0xe2}, {&(0x7f00000048c0)="a53908e65f393250f752e7570b3b2e0a557b427a97d850dfef5a3f34da89970cc3cb6ece5b1997f97a02ff3c00f888a2fdc655e17e46f07c84afbe47340c1826677ff2fa574b74178a85d057d210c7d0ad4c34bb299481a78b3a5f199dae9f453a4db2d6cbcea0bda8ad5156243ba95498a1a9f7f905eb092d4dc4d2ade3b0ac0553ad9deda7c70e8b24cf3b54ae899fc3fff0099551c8add7ba2925ac7d9f4bbd52029336c8a4128d50a65d0e46a8e02e6a", 0xb2}, {&(0x7f0000004980)="509b8f9414572eb697cc00cfbc0abe4b060c8a7f5d3ceee489aeb8b365b178c672cf9ccd9e619ba9b5131cc05e6f99d945a3f0c64c43358cd06ceb0a588f926055cb7fb4abac0973e0e6687bd197723235488b6d237f0bac662d80c7ef9ce4da713aa71fef0e976d46c4c5f267a642747933e87b72330bac4a3a56e57e0f7fedc65ca31b87690176c90009e23bbeb6e8f1b2bb7c28f33a", 0x97}], 0x4, 0x0, 0x0, 0x4800}, 0x11)

17.406647627s ago: executing program 6 (id=478):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a760", 0x2}], 0x1, 0x0, 0x0, 0x17)

15.504521004s ago: executing program 6 (id=482):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000e00)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000e40)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000e80)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000f00)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000f80)='\x00', 0x1}], 0x1}}], 0x1, 0x81)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12e02c3989", @ANYRES32=r0], 0x1000f)

13.605118905s ago: executing program 6 (id=485):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000019500)=0x80000000000003)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000808)
sendto(0xffffffffffffffff, &(0x7f0000019600)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000019640)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x104}}, 0x0)

11.668077323s ago: executing program 6 (id=487):
prlimit64(0x0, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000840)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x8, &(0x7f0000000b00)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}, {@xino_on}, {@verity_require}]})
openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x183042, 0x20)
mount(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000700)='squashfs\x00', 0x1108b0, &(0x7f0000000940)='s\xe2:\x95\xf5!\xc7\xf5.127.0.0.1/shareerR=b-;=root,pass\xb5\xc2\x16\xba\xd3\x8d\xa1z\x7fl\'ers=3.0\x00\x00\x00\x00:\xf1F\xf8\x8fR\x92\xc3\x86X\xb0\x9f\xa5K\xb8\xbb\xa4\xe0\xae\xac\xae\xef\xd8\x106a@T\xda\x11\x15\rm\xf1\xaa\x94\xfd\xec\x8c#}\xfcK\bfTz\xa8\xe0\x89\xba\xeb\x8a\xc0\x9csb\xe3^\x1eWRr\x99KQ\x03\x99\x1ftb\xad\xa5\xd6G\xe7\x9b\xdf\x102\x03\x861\f|\xc9\xc9\x1f\xe6b\xee\xa9\xcd\xa5\x1c\x1cP\xc0\xd3\xe88\x95\xa1G\x15\v\x8e8\xd1\xf7\x1e\xcf\xfd\xa7\xaf\f,F\xbd\x134b\xf6H\xa8\xbe\xda\b\xa2\xd9\xed\xe9\xa9\xc3\x81\xed\nSRMh.-\xea\x1a\xf4W\x89\x9b\x91\xbf\x90#6\xbf\xff!-@\xbe\xf62\xffk^p\xf6@R\x19r\xb1x4\x7f\xc6Gy\xa6\xb6\x032\xfe\xf9vrm\xfdf\x13#x\xd2\x8e\xb4\xa1\x03\x00\x00\x00\x00\x00\x00\x00]\xd8N=\xa0\xd77\x9e\xaa\xebR\x1e2\xca\x9a,\x85\f\xdc\x00\x00\x00\x00\x00\x00\x00kM\x98\xddz.\x1e\f\xady\xe8I\xb3z\xc4\xdd\xd1x\xa24K\xfd\xf2\xd5/\xfc\xfe\x19\xc0\xbec\xf2\xe9\x05p\v\'\x88\xdd4\x8a\xca{\xa2V:\x01c\'\xb7)Eq\xeav ;\x16\xe3\xea\x14\x16\x87\x1d\v*\xd0\xb5\xa0&Qt\x8e11m/\x11\xd9\x04V\xfb\xa2;\xf2\xd3\xf2\xb9\xc9\xe6\xa0\xe0\xa7\x91w\xa2V\x89\xe3:\xa2\xc0\xc0\xe9j&1\x84\xb7n\x9a\x91`Y\r\xa8a\x00'/425)
r0 = socket$netlink(0x10, 0x3, 0x15)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2284, &(0x7f0000000080))
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1)
r2 = getpgrp(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000040000000000000c2ff91860085000000ad00000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x30}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
dup2(r3, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = gettid()
rt_tgsigqueueinfo(r5, r5, 0x40, &(0x7f0000000640)={0x1f, 0x6, 0xfffffffc})
write(r4, &(0x7f0000000440)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r6, 0x10e, 0xb, &(0x7f0000000740)=""/59, &(0x7f0000000780)=0x3b)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x5)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f00000004c0))
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0xe)

10.240730159s ago: executing program 4 (id=488):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0xfffe, 0x6, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7d, 0x5, 0xa}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "07579985"}]}}, 0x0}, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39aa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x5, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x86a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x8, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0xc000)

9.229285352s ago: executing program 2 (id=489):
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000001c0)={0xe9, [[0xffffffff, 0x0, 0x7ff, 0xffffffff, 0x6, 0xffffffff, 0x7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x4, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0)
read$msr(r2, &(0x7f00000008c0)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f00000198c0)=0x7)
r3 = getpid()
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000019900)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000019980)=[r3], 0x1}, 0x58)

9.172097948s ago: executing program 0 (id=490):
syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x404c091)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa4400, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES64=r0, @ANYRESOCT, @ANYRES32])
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x202)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800800000000000000000009500000000000000a2b8f700979c2eaa17eebf00e414733031428133ed708a07c78462ffb4491a0dcf252d567cc34b4b46a327614688b464daae0cb064e9ef6fbf5c50eaf904e88f40732846cbdd3502dcadce3299af151e877b07d2d41475d39d3c3e89842df301ac2557e7e8493b24bff640e782dc16497c5d6d4275a212c24ad217d5d29da3453ba9b06f84de681fd57b54bd891d9d5a284da2c5207820fd51153a98f12339c53b2a118921eb290843953d851ec092acd100"/209], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r3)

8.357312906s ago: executing program 0 (id=491):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='\b', 0x17ff}], 0x5)

7.693358428s ago: executing program 4 (id=492):
syz_mount_image$jffs2(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1020, &(0x7f0000000300), 0x1, 0x26b, &(0x7f0000000340)="$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")

7.626367954s ago: executing program 2 (id=493):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000a40)='./file0\x00', 0x2808080, &(0x7f0000000280)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d302c756d61736b3d30303030303030303030303030303030303030303031322c636f6465706167653d3836302c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c696f636861727365743d63703836322c747a3d5554432c6e6f6e756d7461696c3d302c00931f55de70e0f6dc2e653311378c09d89f0521c233aa2defe996656123990c21d050a7eae8c8de3046e040da8da78cf2e539f9051232b3f63ec6e91a0baaac1f198076b98f95d64a442063b847c79eb8cc56d31be08f73c4722600789560c8f62f1b72e9e9933e81b7d222617da922e25b809c3793e841751691a3476ab5519999c430"], 0x81, 0x2ae, &(0x7f0000001980)="$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")
r0 = socket(0x1d, 0x80802, 0x6)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x45ffffa, 0x281)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000003c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbecc0f00001af2d258a5000000000d0ec0c1f614b1c4369d03740250e7aac594b1b34741dd17c1c50d38ef2a565ef1e83323791c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "2407010900045158d90000000000000000000000000000008000000000000001", [0xfffffffffeff7ffc, 0xffffffffffffffff]}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r6)
sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x38, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\v'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0x4c07, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./myconfig\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0)
write(r8, &(0x7f0000000900)='s', 0x1)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)

7.429703089s ago: executing program 0 (id=494):
mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='cifs\x00', 0x0, &(0x7f0000000280)='vers=3.0,witness,unc=\\\\127.0.0.1\\share\x00') (fail_nth: 11)

7.185143007s ago: executing program 4 (id=495):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c6500000000006cc4744ef8059cccaa215a315743b0d80000000000000000000000000080"], &(0x7f00000000c0)=0x28)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r3, &(0x7f0000000c40)=""/102392, 0x18ff8)
syz_open_dev$vcsa(&(0x7f0000019c40), 0xff, 0x501000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019c80)={'bridge_slave_0\x00'})
sched_setaffinity(r2, 0x47, &(0x7f0000019cc0)=0x7)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000019d00)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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")

6.972625494s ago: executing program 0 (id=496):
r0 = syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109024800011a008000090400001002060000062412"], 0x0)
syz_emit_ethernet(0x76, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0xf, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x28, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0x10, "960605390006fff5800000b61af9"}]}]}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000500)='GPL\x00', 0xc11, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c)
syz_emit_ethernet(0x42, &(0x7f0000000580)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x9, 0x6, "b71e86", 0x8, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, {[], {0x4e21, 0x4e22, 0x8}}}}}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
syz_open_dev$loop(0x0, 0x2, 0x2001)
prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000940)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000009c0)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000a40), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000000a80), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6)
listns(&(0x7f0000000b00)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, &(0x7f0000000b40)=[0x0], 0x1, 0x0)
r7 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r7, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x61)
sendmmsg$inet(r7, &(0x7f0000000380), 0x4000095, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000003c0)=0x8586, 0x4)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

3.157998333s ago: executing program 4 (id=497):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019500)=0x80000000000003)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000808)
sendto(0xffffffffffffffff, &(0x7f0000019600)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000019640)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x104}}, 0x0)

3.073873366s ago: executing program 6 (id=498):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0)
syz_emit_ethernet(0xab, &(0x7f0000000940)=ANY=[@ANYBLOB="0180c20000010180c200000008004500009d00000000001190787f0000010000000000004e200089907881080000238bd1b245f8fae5997f0f07e88ecd709e4db62614e54693723b263a6f68fe0108000000278f8553b62206e0eaef7dd88f5bd1552d488f2cd02b6c52760bbf45fb4b7509e676869e0865669bbf6cdce8f3fc4ae9e763e713c47babb0428f4c5dbcd15f031624eb5f7c15e51860aac14e67fb709a7c99e6db4c0b1a610223b4c0f35c4ab5164468ba25b53ecada71a8e961e4b5d5c9fd84da5f8760e17954d5393594fafed7"], 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000900)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x3, 0x0, {0xa, 0x4e21, 0xfffffff0, @local, 0x7f}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="ea0bf5dbbb2d81b8500be2e4dc027574f355406bb634d7c7677c384f85541291d920d1e8117e3134d4d5ca29a6a621c41082a4b98c3ed54aa9d2cf54602b344e429d455a0cdb9ad05299a2b75522c54fce9df74d453fd71bbe698b1f65d8e05f5e0b520f82d1147c159b55d2c47bec295edcc96b6b8994f5d618ac0040", 0x7d}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x100}, 0x80)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2)
getsockname$packet(r2, &(0x7f0000000ac0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x44)
sendmsg$nl_route(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2b}]}}}]}, 0x50}}, 0x0)
connect$llc(r2, &(0x7f0000000c40)={0x1a, 0x110, 0xda, 0x1, 0x43, 0x1, @remote}, 0x10)
r4 = inotify_init()
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740), 0x1c0002, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x1022002, 0x0)
r7 = dup(r6)
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0)
sendfile(r6, r8, 0x0, 0x8000fffffffe)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
write$vga_arbiter(r5, &(0x7f0000000780)=@other={'decodes', ' ', 'none'}, 0xd)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c)
close_range(r4, 0xffffffffffffffff, 0x0)

2.75135498s ago: executing program 2 (id=499):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000040)={0x20, r1, 0x5, 0x0, &(0x7f0000000d40)=[{}, {}, {}, {}, {}]})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000140)={0x18, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x4, 0x5}]})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x4, r1, 0x0, &(0x7f0000000180)="4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c044c4c4c4c4c4c4c4c4c", 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, <r3=>0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000100)={0x18, r1, 0x5, 0x9})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r5=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0xc55})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, <r6=>0x0, 0x0, 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x1, 0x1c, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x5})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x9, r1})
close(r5)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1})
close(r0)

2.197882382s ago: executing program 0 (id=500):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
open_tree(r0, &(0x7f0000000340)='\x00', 0x81801)
syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f0000001380)="$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")
r1 = open(&(0x7f0000006940)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
sendfile(r1, r1, &(0x7f0000006a40), 0x7f03)

1.70410904s ago: executing program 2 (id=501):
syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x404c091)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa4400, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES64=r0, @ANYRESOCT, @ANYRES32])
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x202)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800800000000000000000009500000000000000a2b8f700979c2eaa17eebf00e414733031428133ed708a07c78462ffb4491a0dcf252d567cc34b4b46a327614688b464daae0cb064e9ef6fbf5c50eaf904e88f40732846cbdd3502dcadce3299af151e877b07d2d41475d39d3c3e89842df301ac2557e7e8493b24bff640e782dc16497c5d6d4275a212c24ad217d5d29da3453ba9b06f84de681fd57b54bd891d9d5a284da2c5207820fd51153a98f12339c53b2a118921eb290843953d851ec092acd100"/209], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r3)

1.320184837s ago: executing program 2 (id=502):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r0, 0x400c0930, 0x0)

1.279243631s ago: executing program 0 (id=503):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'\x00', 0x1})
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x100000, &(0x7f0000000240)}]})
write(r1, &(0x7f0000000280)="000002000000000080", 0x9)
write(r1, &(0x7f00000002c0)="01", 0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000480)={0x1, r1})
write$tun(r1, &(0x7f00000004c0)=ANY=[], 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x40140921, &(0x7f0000000420))
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)
signalfd4(r3, &(0x7f0000000040)={[0x4]}, 0x8, 0x80000)

0s ago: executing program 2 (id=504):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20082, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='\b', 0x17ff}], 0x5)

kernel console output (not intermixed with test programs):

f/0x640
[  176.129415][ T6536]  ? tomoyo_realpath_from_path+0xef/0x640
[  176.129452][ T6536]  tomoyo_realpath_from_path+0xef/0x640
[  176.129479][ T6536]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.129527][ T6536]  tomoyo_mount_permission+0x3e9/0x9e0
[  176.129569][ T6536]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  176.129619][ T6536]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  176.129659][ T6536]  ? kasan_save_track+0x4f/0x80
[  176.129763][ T6536]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.129801][ T6536]  security_sb_mount+0xe4/0x320
[  176.129850][ T6536]  path_mount+0xbc/0x1050
[  176.129896][ T6536]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.129927][ T6536]  ? user_path_at+0xd4/0x160
[  176.129959][ T6536]  __se_sys_mount+0x31d/0x420
[  176.130009][ T6536]  ? __pfx___se_sys_mount+0x10/0x10
[  176.130060][ T6536]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.130091][ T6536]  ? __x64_sys_mount+0x20/0xc0
[  176.130138][ T6536]  do_syscall_64+0x166/0x520
[  176.130169][ T6536]  ? trace_irq_disable+0x3b/0x140
[  176.130201][ T6536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.130236][ T6536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.130264][ T6536] RIP: 0033:0x7f8ca1f9e2d9
[  176.130288][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.130308][ T6536] RSP: 002b:00007f8ca2f11028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  176.130337][ T6536] RAX: ffffffffffffffda RBX: 00007f8ca2225fa0 RCX: 00007f8ca1f9e2d9
[  176.130357][ T6536] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000
[  176.130376][ T6536] RBP: 00007f8ca2f11090 R08: 00002000000003c0 R09: 0000000000000000
[  176.130394][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.130410][ T6536] R13: 00007f8ca2226038 R14: 00007f8ca2225fa0 R15: 00007fff9084c1e8
[  176.130452][ T6536]  </TASK>
[  177.936242][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short
[  177.936305][ T5905] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  177.937444][ T5905] usb 3-1: unable to read config index 0 descriptor/start: -71
[  177.937483][ T5905] usb 3-1: can't read configurations, error -71
[  177.994404][ T1212] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  178.174573][ T1212] usb 5-1: Using ep0 maxpacket: 16
[  178.175795][ T1212] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  178.179722][ T1212] usb 5-1: config 3 has an invalid interface number: 20 but max is 0
[  178.179749][ T1212] usb 5-1: config 3 has no interface number 0
[  178.179781][ T1212] usb 5-1: config 3 interface 20 has no altsetting 0
[  178.190165][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.190194][ T1212] usb 5-1: Product: syz
[  178.190212][ T1212] usb 5-1: Manufacturer: syz
[  178.190229][ T1212] usb 5-1: SerialNumber: syz
[  178.237160][ T6536] ERROR: Out of memory at tomoyo_realpath_from_path.
[  178.540251][ T6531] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  182.420008][ T1212] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input6
[  182.985298][ T4961] bcm5974 5-1:3.20: could not read from device
[  183.055294][ T4961] bcm5974 5-1:3.20: could not read from device
[  183.101753][ T4961] bcm5974 5-1:3.20: could not read from device
[  183.177995][ T1212] usb 5-1: USB disconnect, device number 8
[  183.292889][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'.
[  183.585646][ T5905] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  185.365392][ T5905] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  185.366488][ T5905] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  185.366517][ T5905] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  185.370413][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.370443][ T5905] usb 4-1: Product: syz
[  185.370486][ T5905] usb 4-1: Manufacturer: syz
[  185.370505][ T5905] usb 4-1: SerialNumber: syz
[  185.588564][ T6589] loop2: detected capacity change from 0 to 1024
[  186.069920][ T5905] usb 4-1: Cannot retrieve CPort count: -71
[  186.069975][ T5905] usb 4-1: Cannot retrieve CPort count: -71
[  186.070004][ T5905] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71
[  186.117632][ T5905] usb 4-1: USB disconnect, device number 7
[  186.547663][ T6600] program syz.2.180 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.518582][ T6601] loop0: detected capacity change from 0 to 1024
[  187.610986][ T6601] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  188.300270][ T6597] loop6: detected capacity change from 0 to 4096
[  188.307546][ T6597] ntfs3: Unknown parameter 'szg\·parse'
[  193.778940][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  193.779005][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  196.573556][ T6649] loop6: detected capacity change from 0 to 256
[  196.574815][ T6649] exfat: Deprecated parameter 'utf8'
[  196.574922][ T6649] exfat: Deprecated parameter 'utf8'
[  196.589332][ T6649] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  196.702472][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.703542][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.704745][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.716284][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.721554][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.774103][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.196'.
[  196.813740][   T31] audit: type=1800 audit(1791903922.027:3): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.195" name="file1" dev="loop6" ino=1048705 res=0 errno=0
[  199.079235][ T5757] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  199.079245][ T5630] Bluetooth: hci0: command tx timeout
[  199.242167][ T5757] usb 7-1: unable to get BOS descriptor or descriptor too short
[  199.245241][ T5757] usb 7-1: not running at top speed; connect to a high speed hub
[  199.245285][ T5757] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  199.252283][ T5757] usb 7-1: config 0 has an invalid interface number: 88 but max is 0
[  199.252311][ T5757] usb 7-1: config 0 has no interface number 0
[  199.252355][ T5757] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  199.252387][ T5757] usb 7-1: config 0 interface 88 has no altsetting 0
[  199.267556][ T5757] usb 7-1: string descriptor 0 read error: -22
[  199.267711][ T5757] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  199.309616][ T5757] usb 7-1: config 0 descriptor??
[  199.311875][ T6658] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  199.376514][ T5757] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input7
[  199.630663][ T5905] usb 7-1: USB disconnect, device number 2
[  199.821911][ T5639] udevd[5639]: Error opening device "/dev/input/event4": No such file or directory
[  199.822039][ T5639] udevd[5639]: Unable to EVIOCGABS device "/dev/input/event4"
[  199.822177][ T5639] udevd[5639]: Unable to EVIOCGABS device "/dev/input/event4"
[  200.144709][ T1212] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  200.178884][ T6697] ip_tables: iptables: counters copy to user failed while replacing table
[  200.301145][ T1212] usb 5-1: Using ep0 maxpacket: 16
[  200.313130][ T1212] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  200.324409][ T1212] usb 5-1: config 166 has an invalid interface number: 177 but max is 1
[  200.324438][ T1212] usb 5-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config
[  200.324461][ T1212] usb 5-1: config 166 has 1 interface, different from the descriptor's value: 2
[  200.324485][ T1212] usb 5-1: config 166 has no interface number 0
[  200.324527][ T1212] usb 5-1: config 166 interface 177 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  200.324559][ T1212] usb 5-1: config 166 interface 177 has no altsetting 0
[  200.342978][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.343011][ T1212] usb 5-1: Product: syz
[  200.343030][ T1212] usb 5-1: Manufacturer: syz
[  200.343048][ T1212] usb 5-1: SerialNumber: syz
[  200.630182][ T6697] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  200.658991][ T5630] Bluetooth: hci5: unexpected cc 0x1407 length: 11 > 9
[  200.678208][ T1205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.680567][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  200.681928][ T1212] ums-realtek 5-1:166.177: USB Mass Storage device detected
[  200.763756][ T6708] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.437986][ T5630] Bluetooth: hci0: command tx timeout
[  202.550487][ T1212] usb 5-1: USB disconnect, device number 9
[  202.803306][ T1205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.976718][ T6722] loop3: detected capacity change from 0 to 1024
[  203.045612][ T6722] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  204.499254][ T6726] FAULT_INJECTION: forcing a failure.
[  204.499254][ T6726] name failslab, interval 1, probability 0, space 0, times 0
[  204.499294][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(full) 
[  204.499322][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  204.499337][ T6726] Call Trace:
[  204.499348][ T6726]  <TASK>
[  204.499359][ T6726]  dump_stack_lvl+0xe8/0x150
[  204.499404][ T6726]  should_fail_ex+0x410/0x560
[  204.499452][ T6726]  should_failslab+0xa8/0x100
[  204.499493][ T6726]  __kvmalloc_node_noprof+0x176/0x820
[  204.499533][ T6726]  ? __rhashtable_init_noprof+0x545/0xaf0
[  204.499571][ T6726]  ? __rhashtable_init_noprof+0x545/0xaf0
[  204.499619][ T6726]  __rhashtable_init_noprof+0x545/0xaf0
[  204.499663][ T6726]  __rhltable_init_noprof+0x26/0x70
[  204.499703][ T6726]  nf_tables_newtable+0x6a7/0x1990
[  204.499759][ T6726]  nfnetlink_rcv+0x1288/0x28c0
[  204.499833][ T6726]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  204.499882][ T6726]  ? srso_alias_return_thunk+0x5/0xfbef5
[  204.499913][ T6726]  ? ref_tracker_free+0x689/0x830
[  204.499985][ T6726]  ? skb_clone+0x246/0x3a0
[  204.500020][ T6726]  ? srso_alias_return_thunk+0x5/0xfbef5
[  204.500051][ T6726]  ? __netlink_deliver_tap+0x811/0x860
[  204.500099][ T6726]  ? srso_alias_return_thunk+0x5/0xfbef5
[  204.500134][ T6726]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.500167][ T6726]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.500209][ T6726]  netlink_unicast+0x7bd/0x940
[  204.500254][ T6726]  netlink_sendmsg+0x813/0xb40
[  204.500301][ T6726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.500346][ T6726]  ? srso_alias_return_thunk+0x5/0xfbef5
[  204.500377][ T6726]  ? apparmor_socket_sendmsg+0x98/0x360
[  204.500423][ T6726]  ? srso_alias_return_thunk+0x5/0xfbef5
[  204.500458][ T6726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.500491][ T6726]  sock_sendmsg_nosec+0x13a/0x180
[  204.500531][ T6726]  ____sys_sendmsg+0x54e/0x850
[  204.500568][ T6726]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.500608][ T6726]  ? srso_alias_return_thunk+0x5/0xfbef5
[  204.500639][ T6726]  ? import_iovec+0x73/0xa0
[  204.500685][ T6726]  ___sys_sendmsg+0x2a5/0x360
[  204.500712][ T6726]  ? srso_alias_return_thunk+0x5/0xfbef5
[  204.500743][ T6726]  ? __lock_acquire+0x747/0x2de0
[  204.500779][ T6726]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.500856][ T6726]  ? __fget_files+0x2a/0x420
[  204.500880][ T6726]  ? srso_alias_return_thunk+0x5/0xfbef5
[  204.500910][ T6726]  ? __fget_files+0x3a2/0x420
[  204.500949][ T6726]  __x64_sys_sendmsg+0x1b1/0x290
[  204.500984][ T6726]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.501042][ T6726]  do_syscall_64+0x166/0x520
[  204.501072][ T6726]  ? trace_irq_disable+0x3b/0x140
[  204.501112][ T6726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.501146][ T6726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.501173][ T6726] RIP: 0033:0x7fec4319e2d9
[  204.501197][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.501219][ T6726] RSP: 002b:00007fec43fa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.501246][ T6726] RAX: ffffffffffffffda RBX: 00007fec43425fa0 RCX: 00007fec4319e2d9
[  204.501266][ T6726] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  204.501282][ T6726] RBP: 00007fec43fa0090 R08: 0000000000000000 R09: 0000000000000000
[  204.501299][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.501315][ T6726] R13: 00007fec43426038 R14: 00007fec43425fa0 R15: 00007fff4a1987a8
[  204.501357][ T6726]  </TASK>
[  204.505954][ T5620] Bluetooth: hci0: command tx timeout
[  205.114873][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'.
[  205.282922][ T1205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.466541][ T6738] loop2: detected capacity change from 0 to 512
[  205.540052][ T6738] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  205.550399][ T6738] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.215: corrupted in-inode xattr: e_value size too large
[  205.550620][ T6738] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  205.554297][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  205.554319][    C1] EXT4-fs (loop2): initial error at time 1791903930: ext4_iget_extra_inode:5210: inode 15
[  205.554354][    C1] EXT4-fs (loop2): last error at time 1791903930: ext4_iget_extra_inode:5210: inode 15
[  205.613874][ T6738] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.215: couldn't read orphan inode 15 (err -117)
[  205.613913][ T6738] loop2: lost filesystem error report for type 5 error -117
[  205.631785][ T6738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.829555][ T6739] loop4: detected capacity change from 0 to 32768
[  205.841740][ T6739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.214 (6739)
[  205.871846][ T6739] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.871882][ T6739] BTRFS info (device loop4): using sha256 checksum algorithm
[  206.022481][ T6739] BTRFS info (device loop4): enabling ssd optimizations
[  206.022515][ T6739] BTRFS info (device loop4): turning on sync discard
[  206.022535][ T6739] BTRFS info (device loop4): enabling free space tree
[  206.022558][ T6739] BTRFS info (device loop4): use zlib compression, level 3
[  206.102987][   T31] audit: type=1800 audit(1791903931.317:4): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.214" name="file1" dev="loop4" ino=260 res=0 errno=0
[  206.133701][ T1205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.174712][ T1212] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  206.336219][ T6764] ublk_ctrl_add_dev: dev id not match 4294967295 65536
[  206.359941][ T6735] random: crng reseeded on system resumption
[  206.439662][ T5621] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.552418][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.584466][ T5620] Bluetooth: hci0: command tx timeout
[  206.990787][ T6778] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  207.079730][ T1212] usb 4-1: unable to get BOS descriptor or descriptor too short
[  207.079787][ T1212] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  207.105704][ T1212] usb 4-1: unable to read config index 0 descriptor/start: -71
[  207.105747][ T1212] usb 4-1: can't read configurations, error -71
[  209.252475][ T1205] bridge_slave_1: left allmulticast mode
[  209.252506][ T1205] bridge_slave_1: left promiscuous mode
[  209.252741][ T1205] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.307320][ T1205] bridge_slave_0: left allmulticast mode
[  209.325451][ T1205] bridge_slave_0: left promiscuous mode
[  209.325721][ T1205] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.743828][ T6793] loop3: detected capacity change from 0 to 8
[  210.443341][ T6800] loop3: detected capacity change from 0 to 8
[  210.522778][ T6800] SQUASHFS error: Failed to read block 0x2d7: -5
[  210.522818][ T6800] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  211.151103][ T6800] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  211.253374][ T5622] Bluetooth: hci3: command 0x0406 tx timeout
[  211.253479][ T5622] Bluetooth: hci4: command 0x0406 tx timeout
[  211.253537][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  211.253636][ T5622] Bluetooth: hci5: command 0x0406 tx timeout
[  214.155972][ T6811] loop2: detected capacity change from 0 to 32768
[  214.158824][ T6811] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.229 (6811)
[  214.189210][ T6811] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.189355][ T6811] BTRFS info (device loop2): using sha256 checksum algorithm
[  214.448141][ T6819] loop0: detected capacity change from 0 to 1024
[  214.592153][ T6811] BTRFS info (device loop2): enabling ssd optimizations
[  214.592227][ T6811] BTRFS info (device loop2): turning on sync discard
[  214.592287][ T6811] BTRFS info (device loop2): enabling free space tree
[  214.592365][ T6811] BTRFS info (device loop2): use zlib compression, level 3
[  214.905564][ T6836] FAULT_INJECTION: forcing a failure.
[  214.905564][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.905599][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.3.230 Not tainted syzkaller #0 PREEMPT(full) 
[  214.905622][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  214.905635][ T6836] Call Trace:
[  214.905643][ T6836]  <TASK>
[  214.905653][ T6836]  dump_stack_lvl+0xe8/0x150
[  214.905691][ T6836]  should_fail_ex+0x410/0x560
[  214.905728][ T6836]  _copy_from_iter+0x1d3/0x1660
[  214.905760][ T6836]  ? __alloc_skb+0x27a/0x7a0
[  214.905794][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.905823][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.905862][ T6836]  ? __alloc_skb+0x27a/0x7a0
[  214.905894][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.905922][ T6836]  ? __pfx__copy_from_iter+0x10/0x10
[  214.905952][ T6836]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  214.905977][ T6836]  ? __alloc_skb+0x27a/0x7a0
[  214.906009][ T6836]  ? __alloc_skb+0x27a/0x7a0
[  214.906050][ T6836]  ? netlink_sendmsg+0x650/0xb40
[  214.906078][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.906104][ T6836]  ? skb_put+0x112/0x210
[  214.906128][ T6836]  netlink_sendmsg+0x6c0/0xb40
[  214.906172][ T6836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.906211][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.906237][ T6836]  ? apparmor_socket_sendmsg+0x18b/0x360
[  214.906269][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.906299][ T6836]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.906329][ T6836]  sock_sendmsg_nosec+0x13a/0x180
[  214.906366][ T6836]  ____sys_sendmsg+0x54e/0x850
[  214.906398][ T6836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.906426][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.906458][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.906485][ T6836]  ? import_iovec+0x73/0xa0
[  214.906522][ T6836]  ___sys_sendmsg+0x2a5/0x360
[  214.906544][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.906570][ T6836]  ? __lock_acquire+0x747/0x2de0
[  214.906601][ T6836]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.906663][ T6836]  ? __fget_files+0x2a/0x420
[  214.906683][ T6836]  ? srso_alias_return_thunk+0x5/0xfbef5
[  214.906712][ T6836]  ? __fget_files+0x3a2/0x420
[  214.906749][ T6836]  __x64_sys_sendmsg+0x1b1/0x290
[  214.906781][ T6836]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.906832][ T6836]  do_syscall_64+0x166/0x520
[  214.906864][ T6836]  ? trace_irq_disable+0x3b/0x140
[  214.906887][ T6836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.906912][ T6836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.906931][ T6836] RIP: 0033:0x7f178079e2d9
[  214.906949][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.906965][ T6836] RSP: 002b:00007f17816b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.906985][ T6836] RAX: ffffffffffffffda RBX: 00007f1780a26090 RCX: 00007f178079e2d9
[  214.907000][ T6836] RDX: 0000000020000004 RSI: 0000200000000400 RDI: 0000000000000005
[  214.907013][ T6836] RBP: 00007f17816b3090 R08: 0000000000000000 R09: 0000000000000000
[  214.907025][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.907037][ T6836] R13: 00007f1780a26128 R14: 00007f1780a26090 R15: 00007ffccf05dba8
[  214.907067][ T6836]  </TASK>
[  214.910952][   T31] audit: type=1800 audit(1791903940.127:5): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.229" name="file1" dev="loop2" ino=260 res=0 errno=0
[  215.721924][ T6844] loop3: detected capacity change from 0 to 64
[  215.773231][ T5615] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  216.013880][ T1205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.041876][ T1205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.056629][ T1205] bond0 (unregistering): Released all slaves
[  216.090474][ T6850] input: syz0 as /devices/virtual/input/input8
[  216.446009][ T5736] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  216.639476][ T6847] random: crng reseeded on system resumption
[  216.847717][ T6863] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  216.875100][ T6863] FAULT_INJECTION: forcing a failure.
[  216.875100][ T6863] name failslab, interval 1, probability 0, space 0, times 0
[  216.875143][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.3.236 Not tainted syzkaller #0 PREEMPT(full) 
[  216.875171][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  216.875188][ T6863] Call Trace:
[  216.875199][ T6863]  <TASK>
[  216.875211][ T6863]  dump_stack_lvl+0xe8/0x150
[  216.875258][ T6863]  should_fail_ex+0x410/0x560
[  216.875364][ T6863]  should_failslab+0xa8/0x100
[  216.875408][ T6863]  __kmalloc_noprof+0xfe/0x720
[  216.875441][ T6863]  ? tomoyo_encode+0x2ad/0x570
[  216.875460][ T6863]  ? tomoyo_encode+0x2ad/0x570
[  216.875485][ T6863]  tomoyo_encode+0x2ad/0x570
[  216.875521][ T6863]  tomoyo_realpath_from_path+0x5fa/0x640
[  216.875561][ T6863]  ? tomoyo_path_number_perm+0x219/0x5f0
[  216.875600][ T6863]  tomoyo_path_number_perm+0x246/0x5f0
[  216.875631][ T6863]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  216.875670][ T6863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.875703][ T6863]  ? __lock_acquire+0x747/0x2de0
[  216.875756][ T6863]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.875782][ T6863]  ? hook_file_ioctl+0x1f2/0x600
[  216.875842][ T6863]  ? __fget_files+0x2a/0x420
[  216.875873][ T6863]  ? __fget_files+0x2a/0x420
[  216.875896][ T6863]  ? __fget_files+0x3a2/0x420
[  216.875920][ T6863]  ? __fget_files+0x2a/0x420
[  216.875945][ T6863]  security_file_ioctl+0xc3/0x2a0
[  216.875974][ T6863]  __se_sys_ioctl+0x47/0x170
[  216.876012][ T6863]  do_syscall_64+0x166/0x520
[  216.876043][ T6863]  ? trace_irq_disable+0x3b/0x140
[  216.876073][ T6863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.876109][ T6863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.876129][ T6863] RIP: 0033:0x7f178079e2d9
[  216.876192][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.876213][ T6863] RSP: 002b:00007f17816d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  216.876239][ T6863] RAX: ffffffffffffffda RBX: 00007f1780a25fa0 RCX: 00007f178079e2d9
[  216.876259][ T6863] RDX: 0000200000000800 RSI: 0000000000003ba0 RDI: 0000000000000003
[  216.876273][ T6863] RBP: 00007f17816d4090 R08: 0000000000000000 R09: 0000000000000000
[  216.876285][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.876296][ T6863] R13: 00007f1780a26038 R14: 00007f1780a25fa0 R15: 00007ffccf05dba8
[  216.876337][ T6863]  </TASK>
[  216.901250][ T6863] ERROR: Out of memory at tomoyo_realpath_from_path.
[  217.264068][ T5736] usb 1-1: unable to get BOS descriptor or descriptor too short
[  217.264125][ T5736] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  217.266978][ T5736] usb 1-1: unable to read config index 0 descriptor/start: -71
[  217.267019][ T5736] usb 1-1: can't read configurations, error -71
[  217.526507][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'.
[  217.526570][ T6872] netlink: 1 bytes leftover after parsing attributes in process `syz.4.238'.
[  217.709759][ T6875] loop6: detected capacity change from 0 to 1024
[  217.785683][ T6875] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  219.735373][ T6894] ublk_ctrl_add_dev: dev id not match 4294967295 65536
[  220.272923][ T6868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.299120][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.304371][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.309410][ T6651] bridge_slave_0: entered allmulticast mode
[  220.343989][ T6651] bridge_slave_0: entered promiscuous mode
[  220.454201][ T6882] bridge0: port 3(batadv1) entered blocking state
[  220.454449][ T6882] bridge0: port 3(batadv1) entered disabled state
[  220.454602][ T6882] batadv1: entered allmulticast mode
[  220.457266][ T6882] batadv1: entered promiscuous mode
[  220.619654][ T1205] hsr_slave_0: left promiscuous mode
[  220.635219][ T1205] hsr_slave_1: left promiscuous mode
[  220.636008][ T1205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.636028][ T1205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.659803][ T1205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.659832][ T1205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.722373][ T1205] veth1_macvtap: left promiscuous mode
[  220.722439][ T1205] veth0_macvtap: left promiscuous mode
[  220.722552][ T1205] veth1_vlan: left promiscuous mode
[  220.722627][ T1205] veth0_vlan: left promiscuous mode
[  220.924547][ T6308] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  220.924572][ T6308] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  220.975746][ T6898] loop6: detected capacity change from 0 to 32768
[  220.977595][ T6898] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.243 (6898)
[  221.009593][ T6898] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.009631][ T6898] BTRFS info (device loop6): using sha256 checksum algorithm
[  221.119418][ T6898] BTRFS info (device loop6): enabling ssd optimizations
[  221.119443][ T6898] BTRFS info (device loop6): turning on sync discard
[  221.119458][ T6898] BTRFS info (device loop6): enabling free space tree
[  221.119474][ T6898] BTRFS info (device loop6): use zlib compression, level 3
[  221.142298][   T31] audit: type=1800 audit(1791903946.347:6): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.243" name="file1" dev="loop6" ino=260 res=0 errno=0
[  221.338598][ T6155] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.721881][ T6937] loop6: detected capacity change from 0 to 2048
[  223.762209][ T6937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.841692][ T1205] team0 (unregistering): Port device team_slave_1 removed
[  223.877947][ T1205] team0 (unregistering): Port device team_slave_0 removed
[  223.899709][ T6920] loop4: detected capacity change from 0 to 32768
[  223.909021][ T6920] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.245 (6920)
[  223.923218][ T1212] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  223.934077][ T6920] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  223.934112][ T6920] BTRFS info (device loop4): using crc32c checksum algorithm
[  224.058905][ T6920] BTRFS info (device loop4): enabling ssd optimizations
[  224.058935][ T6920] BTRFS info (device loop4): turning on async discard
[  224.058956][ T6920] BTRFS info (device loop4): enabling free space tree
[  224.090286][ T1212] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  224.091340][ T1212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.091400][ T1212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  224.091427][ T1212] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  224.091456][ T1212] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  224.091502][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.253587][ T5621] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  224.394370][ T5757] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  224.510823][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.510966][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.511186][ T6651] bridge_slave_1: entered allmulticast mode
[  224.550588][ T6651] bridge_slave_1: entered promiscuous mode
[  224.587815][ T6940] random: crng reseeded on system resumption
[  224.773486][ T6925] warning: `syz.3.248' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  224.877979][ T6973] loop6: detected capacity change from 0 to 1024
[  224.946277][ T6973] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  225.029521][ T6959] overlayfs: upper fs does not support file handles, falling back to index=off.
[  225.029542][ T6959] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  225.029559][ T6959] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[  225.241367][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short
[  225.241423][ T5757] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  225.245061][ T5757] usb 3-1: unable to read config index 0 descriptor/start: -71
[  225.245101][ T5757] usb 3-1: can't read configurations, error -71
[  225.389305][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.428129][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.923382][ T6651] team0: Port device team_slave_0 added
[  228.930869][ T6651] team0: Port device team_slave_1 added
[  229.237154][ T6998] loop4: detected capacity change from 0 to 32768
[  229.238879][ T6998] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.258 (6998)
[  229.265997][ T6998] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  229.266033][ T6998] BTRFS info (device loop4): using sha256 checksum algorithm
[  229.427272][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.427294][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.427329][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.431028][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.431044][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.431077][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.495692][ T6998] BTRFS info (device loop4): enabling ssd optimizations
[  229.495721][ T6998] BTRFS info (device loop4): turning on sync discard
[  229.495741][ T6998] BTRFS info (device loop4): enabling free space tree
[  229.495763][ T6998] BTRFS info (device loop4): use zlib compression, level 3
[  229.581453][ T1212] usb 1-1: USB disconnect, device number 12
[  229.691422][ T5621] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.125616][ T6651] hsr_slave_0: entered promiscuous mode
[  231.129271][ T6651] hsr_slave_1: entered promiscuous mode
[  231.131590][ T6651] debugfs: 'hsr0' already exists in 'hsr'
[  231.131612][ T6651] Cannot create hsr debugfs directory
[  233.219264][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5
[  233.595428][ T7040] loop4: detected capacity change from 0 to 1024
[  233.637699][ T7040] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  234.328991][ T7047] FAULT_INJECTION: forcing a failure.
[  234.328991][ T7047] name failslab, interval 1, probability 0, space 0, times 0
[  234.329029][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(full) 
[  234.329058][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  234.329074][ T7047] Call Trace:
[  234.329084][ T7047]  <TASK>
[  234.329095][ T7047]  dump_stack_lvl+0xe8/0x150
[  234.329140][ T7047]  should_fail_ex+0x410/0x560
[  234.329186][ T7047]  should_failslab+0xa8/0x100
[  234.329228][ T7047]  __kmalloc_noprof+0xfe/0x720
[  234.329263][ T7047]  ? tomoyo_encode+0x2ad/0x570
[  234.329288][ T7047]  ? tomoyo_encode+0x2ad/0x570
[  234.329324][ T7047]  tomoyo_encode+0x2ad/0x570
[  234.329369][ T7047]  tomoyo_realpath_from_path+0x5fa/0x640
[  234.329411][ T7047]  ? tomoyo_path2_perm+0x299/0x760
[  234.329452][ T7047]  tomoyo_path2_perm+0x2c5/0x760
[  234.329499][ T7047]  ? __pfx_tomoyo_path2_perm+0x10/0x10
[  234.329538][ T7047]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.329571][ T7047]  ? __asan_memset+0x22/0x50
[  234.329602][ T7047]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.329634][ T7047]  ? current_check_refer_path+0x411/0x1390
[  234.329685][ T7047]  ? __lock_acquire+0x747/0x2de0
[  234.329758][ T7047]  tomoyo_path_rename+0x14e/0x1b0
[  234.329794][ T7047]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.329832][ T7047]  ? __pfx_tomoyo_path_rename+0x10/0x10
[  234.329872][ T7047]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.329904][ T7047]  ? _raw_spin_unlock+0x28/0x50
[  234.329929][ T7047]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.329968][ T7047]  security_path_rename+0x248/0x460
[  234.330004][ T7047]  filename_renameat2+0x4ba/0x9a0
[  234.330044][ T7047]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.330092][ T7047]  ? __pfx_filename_renameat2+0x10/0x10
[  234.330132][ T7047]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.330186][ T7047]  ? srso_alias_return_thunk+0x5/0xfbef5
[  234.330217][ T7047]  ? do_getname+0x151/0x250
[  234.330262][ T7047]  __se_sys_renameat2+0x5a/0x2c0
[  234.330308][ T7047]  do_syscall_64+0x166/0x520
[  234.330340][ T7047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.330386][ T7047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.330414][ T7047] RIP: 0033:0x7f548219e2d9
[  234.330438][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.330460][ T7047] RSP: 002b:00007f5482ff1028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  234.330489][ T7047] RAX: ffffffffffffffda RBX: 00007f5482425fa0 RCX: 00007f548219e2d9
[  234.330510][ T7047] RDX: ffffffffffffff9c RSI: 0000200000000340 RDI: ffffffffffffff9c
[  234.330531][ T7047] RBP: 00007f5482ff1090 R08: 0000000000000002 R09: 0000000000000000
[  234.330550][ T7047] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002
[  234.330568][ T7047] R13: 00007f5482426038 R14: 00007f5482425fa0 R15: 00007ffd4a8fdf68
[  234.330611][ T7047]  </TASK>
[  234.333932][ T7047] ERROR: Out of memory at tomoyo_realpath_from_path.
[  234.547296][ T7044] loop6: detected capacity change from 0 to 4096
[  234.549012][ T7044] nilfs2: Unknown parameter '/dev/snd/controlC#'
[  234.702118][ T7044] overlayfs: overlapping lowerdir path
[  234.877071][ T7052] loop2: detected capacity change from 0 to 4096
[  234.936661][ T7058] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.989504][ T7052] netlink: 'syz.2.270': attribute type 1 has an invalid length.
[  235.063218][ T7059] loop3: detected capacity change from 0 to 1024
[  235.139169][ T7059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.240958][ T7064] 9p: Bad value for 'rfdno'
[  235.564644][ T5905] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  235.728390][ T7056] random: crng reseeded on system resumption
[  235.876983][ T7068] loop2: detected capacity change from 0 to 8
[  236.053879][ T7032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  236.259632][ T6651] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  236.662965][ T7069] loop2: detected capacity change from 0 to 4096
[  236.733874][ T7069] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  236.960781][ T6651] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  237.119211][ T6651] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  237.341668][ T7069] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  237.798924][ T6651] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  237.855665][ T6651] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  237.888525][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.978783][ T6651] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  238.002594][ T6651] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  238.053811][ T5905] usb 7-1: unable to get BOS descriptor or descriptor too short
[  238.053868][ T5905] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  238.072517][ T5905] usb 7-1: unable to read config index 0 descriptor/start: -71
[  238.072559][ T5905] usb 7-1: can't read configurations, error -71
[  238.091330][ T6651] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  238.425841][ T7081] loop0: detected capacity change from 0 to 32768
[  238.461296][ T7081] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.275 (7081)
[  238.478123][ T7081] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  238.478160][ T7081] BTRFS info (device loop0): using sha256 checksum algorithm
[  238.668442][ T7081] BTRFS info (device loop0): enabling ssd optimizations
[  238.668468][ T7081] BTRFS info (device loop0): turning on sync discard
[  238.668483][ T7081] BTRFS info (device loop0): enabling free space tree
[  238.668499][ T7081] BTRFS info (device loop0): use zlib compression, level 3
[  238.798715][ T5613] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  238.856845][ T7104] loop6: detected capacity change from 0 to 8
[  238.879715][ T7097] loop3: detected capacity change from 0 to 1024
[  238.888699][ T7104] squashfs: Unknown parameter ''
[  239.235844][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.479222][ T6651] 8021q: adding VLAN 0 to HW filter on device team0
[  240.530082][ T7105] loop2: detected capacity change from 0 to 4096
[  240.545526][ T7097] hfsplus: bad catalog file entry
[  240.620505][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.620615][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.712407][ T6308] hfsplus: bad catalog file entry
[  240.731157][ T7114] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.812323][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.812414][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.695861][ T7121] loop3: detected capacity change from 0 to 4096
[  241.975062][ T7129] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.069883][ T7118] loop6: detected capacity change from 0 to 1024
[  242.413201][ T7130] loop2: detected capacity change from 0 to 32768
[  242.480066][ T7130] (syz.2.283,7130,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  242.483357][ T7130] (syz.2.283,7130,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  242.545130][ T7130] JBD2: Ignoring recovery information on journal
[  242.607415][ T7130] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  242.627884][ T7118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.747509][ T7124] 9p: Bad value for 'rfdno'
[  243.268057][ T6155] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.758766][ T7147] befs: (nullb0): invalid magic header
[  243.986857][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6
[  244.238252][ T5615] ocfs2: Unmounting device (7,2) on (node local)
[  244.312184][ T7149] nvme_fabrics: missing parameter 'transport=%s'
[  244.312207][ T7149] nvme_fabrics: missing parameter 'nqn=%s'
[  247.048177][ T7173] loop2: detected capacity change from 0 to 32768
[  247.066946][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.073758][ T7173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.290 (7173)
[  247.088340][ T5757] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  247.131983][ T7173] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.132025][ T7173] BTRFS info (device loop2): using sha256 checksum algorithm
[  247.256844][ T5757] usb 7-1: unable to get BOS descriptor or descriptor too short
[  247.256899][ T5757] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  247.318984][ T5757] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.319017][ T5757] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  247.349705][ T5757] usb 7-1: string descriptor 0 read error: -22
[  247.349853][ T5757] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.425133][ T7173] BTRFS info (device loop2): enabling ssd optimizations
[  247.425166][ T7173] BTRFS info (device loop2): turning on sync discard
[  247.425187][ T7173] BTRFS info (device loop2): enabling free space tree
[  247.425210][ T7173] BTRFS info (device loop2): use zlib compression, level 3
[  247.487034][ T5757] usb 7-1: selecting invalid altsetting 1
[  247.489260][ T5757] usb 7-1: unit 6 not found!
[  247.496417][   T30] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  247.618320][ T7198] loop3: detected capacity change from 0 to 8
[  247.727010][ T5757] usb 7-1: 2:0: cannot get min/max values for control 1 (id 2)
[  247.841496][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.862892][ T7164] random: crng reseeded on system resumption
[  247.895487][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.238945][   T30] usb 1-1: unable to get BOS descriptor or descriptor too short
[  249.238990][   T30] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  249.242042][   T30] usb 1-1: unable to read config index 0 descriptor/start: -71
[  249.242072][   T30] usb 1-1: can't read configurations, error -71
[  249.398323][ T5615] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  250.016792][ T7209] netlink: 'syz.4.282': attribute type 10 has an invalid length.
[  250.271676][ T5757] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  250.298276][ T5757] usb 7-1: USB disconnect, device number 5
[  250.393378][ T7209] team0: Port device dummy0 added
[  250.686035][ T7226] ublk_ctrl_add_dev: dev id not match 4294967295 65536
[  251.931112][ T7224] loop3: detected capacity change from 0 to 1024
[  252.111289][ T7218] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  252.910247][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7
[  252.941449][ T7209] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  253.353501][ T6651] veth0_vlan: entered promiscuous mode
[  253.495416][ T6651] veth1_vlan: entered promiscuous mode
[  253.580757][ T7238] netlink: 84 bytes leftover after parsing attributes in process `syz.6.296'.
[  253.684364][ T5757] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  253.776184][ T7238] Bluetooth: MGMT ver 1.23
[  253.845873][ T5757] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  253.853436][ T5757] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  253.853478][ T5757] usb 1-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  253.859817][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  253.859846][ T5757] usb 1-1: SerialNumber: syz
[  253.955182][ T6651] veth0_macvtap: entered promiscuous mode
[  253.997818][ T5757] usb 1-1: No union descriptors
[  254.042438][ T6651] veth1_macvtap: entered promiscuous mode
[  254.383838][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.068314][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  255.068382][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  255.164334][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  255.164571][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  255.199477][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.305574][ T5895] usb 5-1: device descriptor read/64, error -32
[  255.564707][ T5909] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.571921][ T1205] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.571986][ T1205] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.315255][ T5895] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  256.424522][   T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.474308][ T5895] usb 5-1: Using ep0 maxpacket: 16
[  256.475189][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  256.476846][ T5895] usb 5-1: config 3 has an invalid interface number: 20 but max is 0
[  256.476874][ T5895] usb 5-1: config 3 has no interface number 0
[  256.476908][ T5895] usb 5-1: config 3 interface 20 has no altsetting 0
[  256.479390][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.479418][ T5895] usb 5-1: Product: syz
[  256.479435][ T5895] usb 5-1: Manufacturer: syz
[  256.479455][ T5895] usb 5-1: SerialNumber: syz
[  256.777766][ T7258] netlink: 56 bytes leftover after parsing attributes in process `syz.2.301'.
[  257.114079][ T7258] netlink: 56 bytes leftover after parsing attributes in process `syz.2.301'.
[  257.489273][ T6557] usb 1-1: USB disconnect, device number 15
[  257.587214][ T5895] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input9
[  257.626407][ T4961] bcm5974 5-1:3.20: could not read from device
[  257.750411][ T4961] bcm5974 5-1:3.20: could not read from device
[  257.975505][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.983458][ T5895] usb 5-1: USB disconnect, device number 11
[  258.002806][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.013880][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.027353][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.052986][ T4961] bcm5974 5-1:3.20: could not read from device
[  258.055209][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.434062][ T7285] ublk_ctrl_add_dev: dev id not match 4294967295 65536
[  260.224504][ T5620] Bluetooth: hci2: command tx timeout
[  260.230222][ T7269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.748458][ T7290] loop0: detected capacity change from 0 to 4096
[  260.749323][ T7290] ntfs3: Unknown parameter 'szg\·parse'
[  260.995989][   T31] audit: type=1326 audit(1791903986.197:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.2.310" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f548219e2d9 code=0x0
[  261.004548][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  262.307650][ T5630] Bluetooth: hci6: command 0x0406 tx timeout
[  262.310346][ T5630] Bluetooth: hci2: command tx timeout
[  263.365068][ T7315] netlink: 84 bytes leftover after parsing attributes in process `syz.3.313'.
[  263.577655][ T7318] loop0: detected capacity change from 0 to 1024
[  263.814359][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  264.274317][    T9] usb 5-1: Using ep0 maxpacket: 16
[  264.277484][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  264.306567][ T7317] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.307768][    T9] usb 5-1: config 3 has an invalid interface number: 20 but max is 0
[  264.307797][    T9] usb 5-1: config 3 has no interface number 0
[  264.307827][    T9] usb 5-1: config 3 interface 20 has no altsetting 0
[  264.351031][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.351065][    T9] usb 5-1: Product: syz
[  264.351083][    T9] usb 5-1: Manufacturer: syz
[  264.351100][    T9] usb 5-1: SerialNumber: syz
[  264.540938][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8
[  264.716176][ T7311] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.744318][ T5626] Bluetooth: hci2: command tx timeout
[  264.834691][   T60] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.463077][ T7327] loop2: detected capacity change from 0 to 8
[  266.638531][ T7327] SQUASHFS error: zlib decompression failed, data probably corrupt
[  266.638560][ T7327] SQUASHFS error: Failed to read block 0x9b: -5
[  266.638578][ T7327] SQUASHFS error: Unable to read metadata cache entry [99]
[  266.638593][ T7327] SQUASHFS error: Unable to read inode 0x127
[  266.835680][ T5626] Bluetooth: hci2: command tx timeout
[  267.293508][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input10
[  267.340294][ T4961] bcm5974 5-1:3.20: could not read from device
[  267.417191][    T9] usb 5-1: USB disconnect, device number 13
[  267.537717][   T60] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.099124][ T5639] udevd[5639]: Error opening device "/dev/input/event4": No such file or directory
[  270.099168][ T5639] udevd[5639]: Unable to EVIOCGABS device "/dev/input/event4"
[  270.099200][ T5639] udevd[5639]: Unable to EVIOCGABS device "/dev/input/event4"
[  270.099233][ T5639] udevd[5639]: Unable to EVIOCGABS device "/dev/input/event4"
[  270.099265][ T5639] udevd[5639]: Unable to EVIOCGABS device "/dev/input/event4"
[  270.099300][ T5639] udevd[5639]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[  270.164687][ T7340] loop0: detected capacity change from 0 to 8
[  270.528005][ T4976] udevd[4976]: worker [5639] terminated by signal 6 (Aborted)
[  270.528432][ T4976] udevd[4976]: worker [5639] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input10/event4'
[  270.742096][ T7345] loop0: detected capacity change from 0 to 4096
[  270.767390][ T7345] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  271.592123][   T60] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.742724][ T7345] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  271.955149][ T5895] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  272.070576][ T7341] loop3: detected capacity change from 0 to 4096
[  272.141004][ T7346] random: crng reseeded on system resumption
[  272.141062][ T7341] nilfs2: Unknown parameter '/dev/snd/controlC#'
[  272.483037][   T60] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.583391][ T7354] loop0: detected capacity change from 0 to 4096
[  273.609267][ T7354] ntfs3: Unknown parameter 'szg\·parse'
[  273.642630][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short
[  273.642687][ T5895] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  273.643754][ T5895] usb 5-1: unable to read config index 0 descriptor/start: -71
[  273.643805][ T5895] usb 5-1: can't read configurations, error -71
[  273.750543][ T7361] ublk_ctrl_add_dev: dev id not match 4294967295 65536
[  274.556857][ T7364] loop4: detected capacity change from 0 to 1024
[  274.717728][ T7364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.757703][   T60] bridge_slave_1: left allmulticast mode
[  274.757728][   T60] bridge_slave_1: left promiscuous mode
[  274.757925][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.814982][   T60] bridge_slave_0: left allmulticast mode
[  274.815179][   T60] bridge_slave_0: left promiscuous mode
[  274.821719][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.927124][ T7367] 9p: Bad value for 'rfdno'
[  275.396678][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.700359][ T7381] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  276.056817][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  276.063781][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  276.072856][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  276.097876][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  276.098658][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  276.421693][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.717670][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.763756][   T60] bond0 (unregistering): Released all slaves
[  277.915187][ T7410] loop0: detected capacity change from 0 to 8
[  278.184394][ T5630] Bluetooth: hci0: command tx timeout
[  278.393460][ T7403] loop6: detected capacity change from 0 to 1024
[  280.264471][ T5630] Bluetooth: hci0: command tx timeout
[  280.923393][ T7403] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  281.013381][ T7403] EXT4-fs: failed to create workqueue
[  281.013403][ T7403] EXT4-fs (loop6): mount failed
[  281.013656][ T7411] loop0: detected capacity change from 0 to 4096
[  281.638331][ T5736] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  281.822134][   T60] hsr_slave_0: left promiscuous mode
[  281.871057][   T60] hsr_slave_1: left promiscuous mode
[  281.872046][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.872071][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.885066][ T5736] usb 3-1: Using ep0 maxpacket: 32
[  281.888522][ T5736] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  281.891346][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.891381][ T5736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.891425][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.912991][ T5736] usb 3-1: config 0 descriptor??
[  281.950911][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.950932][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.009955][ T5736] hub 3-1:0.0: USB hub found
[  282.180288][   T60] veth1_macvtap: left promiscuous mode
[  282.180335][   T60] veth0_macvtap: left promiscuous mode
[  282.180482][   T60] veth1_vlan: left promiscuous mode
[  282.180636][   T60] veth0_vlan: left promiscuous mode
[  282.236174][ T5735] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  282.344327][ T5630] Bluetooth: hci0: command tx timeout
[  282.567441][ T5735] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  282.570571][ T5735] usb 5-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  282.570622][ T5735] usb 5-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  282.573581][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  282.573609][ T5735] usb 5-1: SerialNumber: syz
[  282.574340][ T7420] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  282.595387][ T5735] usb 5-1: No union descriptors
[  283.493821][ T5736] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  283.537867][ T5736] usbhid 3-1:0.0: can't add hid device: -71
[  283.537991][ T5736] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  283.559330][ T5736] usb 3-1: USB disconnect, device number 11
[  283.584330][ T5735] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  284.424757][ T5630] Bluetooth: hci0: command tx timeout
[  284.427797][ T7426] random: crng reseeded on system resumption
[  284.553139][ T7435] netlink: 'syz.6.341': attribute type 10 has an invalid length.
[  284.922912][ T7439] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  284.923050][ T7439] block device autoloading is deprecated and will be removed.
[  285.012596][ T7438] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  285.571766][ T5736] usb 5-1: USB disconnect, device number 16
[  285.602423][ T5735] usb 1-1: unable to get BOS descriptor or descriptor too short
[  285.602483][ T5735] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  285.603329][ T5735] usb 1-1: unable to read config index 0 descriptor/start: -71
[  285.603367][ T5735] usb 1-1: can't read configurations, error -71
[  285.911205][ T7447] ublk_ctrl_add_dev: dev id not match 4294967295 65536
[  285.936069][   T60] team0 (unregistering): Port device team_slave_1 removed
[  286.030123][   T60] team0 (unregistering): Port device team_slave_0 removed
[  286.333413][ T7451] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  287.767963][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.768121][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.768258][ T7270] bridge_slave_0: entered allmulticast mode
[  287.774128][ T7270] bridge_slave_0: entered promiscuous mode
[  287.833404][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9
[  287.965793][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'.
[  287.965856][ T7463] netlink: 1 bytes leftover after parsing attributes in process `syz.4.347'.
[  288.000801][ T7435] team0: Port device dummy0 added
[  288.013762][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.013926][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.014090][ T7270] bridge_slave_1: entered allmulticast mode
[  288.033911][ T7270] bridge_slave_1: entered promiscuous mode
[  288.709920][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.692552][ T7463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.791050][ T7474] bridge0: port 4(batadv2) entered blocking state
[  290.791162][ T7474] bridge0: port 4(batadv2) entered disabled state
[  290.791302][ T7474] batadv2: entered allmulticast mode
[  290.822850][ T7474] batadv2: entered promiscuous mode
[  290.846241][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.946622][ T1133] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  290.946647][ T1133] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  291.030112][ T7270] team0: Port device team_slave_0 added
[  291.042851][ T7480] loop0: detected capacity change from 0 to 8
[  291.084040][ T7480] SQUASHFS error: zlib decompression failed, data probably corrupt
[  291.084077][ T7480] SQUASHFS error: Failed to read block 0x9b: -5
[  291.084094][ T7480] SQUASHFS error: Unable to read metadata cache entry [99]
[  291.084110][ T7480] SQUASHFS error: Unable to read inode 0x127
[  291.090486][ T7481] loop6: detected capacity change from 0 to 8
[  291.141979][ T7480] FAULT_INJECTION: forcing a failure.
[  291.141979][ T7480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.142009][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.0.352 Not tainted syzkaller #0 PREEMPT(full) 
[  291.142030][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  291.142043][ T7480] Call Trace:
[  291.142051][ T7480]  <TASK>
[  291.142059][ T7480]  dump_stack_lvl+0xe8/0x150
[  291.142094][ T7480]  should_fail_ex+0x410/0x560
[  291.142127][ T7480]  _copy_to_user+0x31/0xb0
[  291.142149][ T7480]  simple_read_from_buffer+0xe1/0x170
[  291.142186][ T7480]  proc_fail_nth_read+0x1bb/0x230
[  291.142209][ T7480]  ? common_file_perm+0x20e/0x2b0
[  291.142241][ T7480]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  291.142268][ T7480]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.142291][ T7480]  ? rw_verify_area+0x24a/0x4c0
[  291.142314][ T7480]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  291.142337][ T7480]  vfs_read+0x213/0xa80
[  291.142372][ T7480]  ? __pfx___mutex_lock+0x10/0x10
[  291.142416][ T7480]  ? __pfx_vfs_read+0x10/0x10
[  291.142441][ T7480]  ? __fget_files+0x2a/0x420
[  291.142463][ T7480]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.142486][ T7480]  ? __fget_files+0x3a2/0x420
[  291.142503][ T7480]  ? __fget_files+0x2a/0x420
[  291.142525][ T7480]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.142552][ T7480]  ksys_read+0x150/0x270
[  291.142576][ T7480]  ? __pfx_ksys_read+0x10/0x10
[  291.142607][ T7480]  do_syscall_64+0x166/0x520
[  291.142630][ T7480]  ? trace_irq_disable+0x3b/0x140
[  291.142653][ T7480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.142678][ T7480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.142698][ T7480] RIP: 0033:0x7fec4315eb0e
[  291.142716][ T7480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  291.142732][ T7480] RSP: 002b:00007fec43f9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  291.142753][ T7480] RAX: ffffffffffffffda RBX: 00007fec43fa06c0 RCX: 00007fec4315eb0e
[  291.142768][ T7480] RDX: 000000000000000f RSI: 00007fec43fa00a0 RDI: 0000000000000003
[  291.142780][ T7480] RBP: 00007fec43fa0090 R08: 0000000000000000 R09: 0000000000000000
[  291.142793][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.142806][ T7480] R13: 00007fec43426038 R14: 00007fec43425fa0 R15: 00007fff4a1987a8
[  291.142837][ T7480]  </TASK>
[  291.457949][ T7485] loop6: detected capacity change from 0 to 8
[  291.542972][ T7485] SQUASHFS error: Failed to read block 0x2d7: -5
[  291.543012][ T7485] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  292.762490][ T7485] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  292.931716][ T7270] team0: Port device team_slave_1 added
[  293.527210][ T7495] netlink: 'syz.2.353': attribute type 3 has an invalid length.
[  293.656480][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.656503][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.656536][ T7270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.722709][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.722729][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.722763][ T7270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.059699][ T7499] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  294.114352][ T5843] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  294.738002][ T7490] random: crng reseeded on system resumption
[  294.883745][ T7270] hsr_slave_0: entered promiscuous mode
[  294.890936][ T7270] hsr_slave_1: entered promiscuous mode
[  294.891924][ T7270] debugfs: 'hsr0' already exists in 'hsr'
[  294.891946][ T7270] Cannot create hsr debugfs directory
[  295.349466][ T7519] loop4: detected capacity change from 0 to 8
[  295.371736][ T7519] SQUASHFS error: zlib decompression failed, data probably corrupt
[  295.373950][ T7519] SQUASHFS error: Failed to read block 0x9b: -5
[  295.373971][ T7519] SQUASHFS error: Unable to read metadata cache entry [99]
[  295.373987][ T7519] SQUASHFS error: Unable to read inode 0x127
[  296.083559][ T7520] loop4: detected capacity change from 0 to 4096
[  296.107041][ T7520] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  296.427442][ T5843] usb 1-1: unable to get BOS descriptor or descriptor too short
[  296.427666][ T5843] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  296.431171][ T5843] usb 1-1: unable to read config index 0 descriptor/start: -71
[  296.431228][ T5843] usb 1-1: can't read configurations, error -71
[  296.764804][ T7520] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  297.286062][ T7526] loop2: detected capacity change from 0 to 256
[  297.287109][ T7526] exfat: Deprecated parameter 'utf8'
[  297.287212][ T7526] exfat: Deprecated parameter 'utf8'
[  297.287277][ T7526] exfat: Unknown parameter 'time_offse0000007'
[  297.520212][ T7524] loop6: detected capacity change from 0 to 32768
[  297.523635][ T7524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.360 (7524)
[  297.531239][ T7524] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  297.531272][ T7524] BTRFS info (device loop6): using sha256 checksum algorithm
[  297.612083][ T7526] netlink: 140 bytes leftover after parsing attributes in process `syz.2.361'.
[  297.637364][   T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.709610][ T7524] BTRFS info (device loop6): enabling ssd optimizations
[  297.709642][ T7524] BTRFS info (device loop6): turning on sync discard
[  297.709662][ T7524] BTRFS info (device loop6): enabling free space tree
[  297.709685][ T7524] BTRFS info (device loop6): use zlib compression, level 3
[  297.792108][   T31] audit: type=1800 audit(1791904022.997:8): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.360" name="file1" dev="loop6" ino=260 res=0 errno=0
[  298.212565][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.362'.
[  299.362688][ T6155] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.589751][ T7558] loop0: detected capacity change from 0 to 128
[  299.590846][ T7558] EXT4-fs: Ignoring removed oldalloc option
[  299.639731][ T7558] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  299.682331][ T7558] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  299.802305][   T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.843000][ T7558] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x1e)
[  301.254567][ T5613] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  301.441658][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10
[  301.923735][ T7576] ip_tables: iptables: counters copy to user failed while replacing table
[  302.770231][   T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.884837][ T7583] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  302.986173][ T7582] netlink: 72 bytes leftover after parsing attributes in process `syz.6.371'.
[  303.420537][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.420853][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.421084][ T7384] bridge_slave_0: entered allmulticast mode
[  303.468739][ T7384] bridge_slave_0: entered promiscuous mode
[  303.562782][ T7587] netlink: 'syz.6.374': attribute type 10 has an invalid length.
[  303.592914][ T7588] netlink: 84 bytes leftover after parsing attributes in process `syz.0.372'.
[  303.613613][ T7588] Bluetooth: MGMT ver 1.23
[  303.675904][ T7589] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  303.814049][   T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.911463][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.911637][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.911833][ T7384] bridge_slave_1: entered allmulticast mode
[  303.939258][ T7384] bridge_slave_1: entered promiscuous mode
[  304.000762][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.016094][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.297370][ T7384] team0: Port device team_slave_0 added
[  305.362163][ T7384] team0: Port device team_slave_1 added
[  305.494768][ T5735] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  305.524505][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.524526][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.524560][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.620743][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.620767][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.620802][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.709295][ T5735] usb 5-1: Using ep0 maxpacket: 32
[  305.726491][ T5735] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  305.729195][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.729230][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.729273][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.769266][ T5735] usb 5-1: config 0 descriptor??
[  305.807172][ T5735] hub 5-1:0.0: USB hub found
[  308.419580][ T5735] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  308.522064][ T5735] usbhid 5-1:0.0: can't add hid device: -71
[  308.522194][ T5735] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  308.587910][ T5735] usb 5-1: USB disconnect, device number 17
[  312.679580][ T7384] hsr_slave_0: entered promiscuous mode
[  312.680762][ T7384] hsr_slave_1: entered promiscuous mode
[  312.703580][ T7384] debugfs: 'hsr0' already exists in 'hsr'
[  312.703610][ T7384] Cannot create hsr debugfs directory
[  314.532954][   T60] bridge_slave_1: left allmulticast mode
[  314.532992][   T60] bridge_slave_1: left promiscuous mode
[  314.552987][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.595614][   T60] bridge_slave_0: left allmulticast mode
[  314.595643][   T60] bridge_slave_0: left promiscuous mode
[  314.595826][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.364592][ T5735] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  315.560077][ T7628] random: crng reseeded on system resumption
[  316.092546][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.367119][ T7632] loop0: detected capacity change from 0 to 32768
[  316.384095][ T7632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.379 (7632)
[  316.408360][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.412062][ T7632] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  316.412099][ T7632] BTRFS info (device loop0): using sha256 checksum algorithm
[  316.467096][   T60] bond0 (unregistering): Released all slaves
[  316.512969][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  316.513035][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  316.659049][ T5735] usb 3-1: unable to get BOS descriptor or descriptor too short
[  316.659112][ T5735] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  316.660007][ T5735] usb 3-1: unable to read config index 0 descriptor/start: -71
[  316.660049][ T5735] usb 3-1: can't read configurations, error -71
[  316.662385][ T7632] BTRFS info (device loop0): enabling ssd optimizations
[  316.662414][ T7632] BTRFS info (device loop0): turning on sync discard
[  316.662435][ T7632] BTRFS info (device loop0): enabling free space tree
[  316.662458][ T7632] BTRFS info (device loop0): use zlib compression, level 3
[  316.841272][   T31] audit: type=1800 audit(1791904042.057:9): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.379" name="file1" dev="loop0" ino=260 res=0 errno=0
[  316.961583][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11
[  317.199987][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'.
[  317.258364][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'.
[  318.027010][ T7660] loop6: detected capacity change from 0 to 32768
[  318.044592][ T7660] (syz.6.383,7660,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  318.047008][ T7660] (syz.6.383,7660,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  318.864606][ T5613] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  318.865640][ T7660] JBD2: Ignoring recovery information on journal
[  319.037550][ T7660] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  319.117282][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  319.120319][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  319.132817][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  319.138708][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  319.142547][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.985075][   T60] hsr_slave_0: left promiscuous mode
[  321.011980][   T60] hsr_slave_1: left promiscuous mode
[  321.013014][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.013039][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.080789][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.080821][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.171747][   T60] veth1_macvtap: left promiscuous mode
[  321.171794][   T60] veth0_macvtap: left promiscuous mode
[  321.171960][   T60] veth1_vlan: left promiscuous mode
[  321.173673][   T60] veth0_vlan: left promiscuous mode
[  321.224514][ T5626] Bluetooth: hci4: command tx timeout
[  322.897353][ T6155] ocfs2: Unmounting device (7,6) on (node local)
[  323.306857][ T5626] Bluetooth: hci4: command tx timeout
[  325.212751][ T5895] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  325.386081][ T5626] Bluetooth: hci4: command tx timeout
[  325.404093][ T5895] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  325.417918][ T5895] usb 7-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  325.417989][ T5895] usb 7-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  325.426172][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  325.426205][ T5895] usb 7-1: SerialNumber: syz
[  325.540055][ T5895] usb 7-1: No union descriptors
[  325.615319][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'.
[  325.615363][ T7706] netlink: 1 bytes leftover after parsing attributes in process `syz.2.397'.
[  326.187624][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.390'.
[  326.206409][ T7713] loop6: detected capacity change from 0 to 16
[  327.464542][ T5626] Bluetooth: hci4: command tx timeout
[  328.645972][ T7706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.780889][ T5895] usb 7-1: USB disconnect, device number 6
[  329.643090][ T7722] loop6: detected capacity change from 0 to 131072
[  330.116395][ T7722] loop6: detected capacity change from 0 to 2048
[  330.119110][ T7721] loop4: detected capacity change from 0 to 1024
[  330.154820][ T7721] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  330.166437][ T7722]  loop6: p2 p3 < > p4 < p5 >
[  330.166464][ T7722] loop6: partition table partially beyond EOD, truncated
[  330.166682][ T7722] loop6: p2 start 53543428 is beyond EOD, truncated
[  330.166705][ T7722] loop6: p3 start 4284289 is beyond EOD, truncated
[  330.211368][ T7722] loop6: p5 start 53543428 is beyond EOD, truncated
[  330.463006][ T7727] loop6: detected capacity change from 0 to 64
[  330.484295][ T5895] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  330.584436][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  331.505507][ T7732] GUP no longer grows the stack in syz.6.400 (7732): 200000004000-20000000a000 (200000002000)
[  331.505568][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.6.400 Not tainted syzkaller #0 PREEMPT(full) 
[  331.505598][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  331.505615][ T7732] Call Trace:
[  331.505625][ T7732]  <TASK>
[  331.505636][ T7732]  dump_stack_lvl+0xe8/0x150
[  331.505683][ T7732]  __get_user_pages+0x23b6/0x2750
[  331.505745][ T7732]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.505800][ T7732]  get_user_pages_remote+0x307/0xb10
[  331.505842][ T7732]  ? __pfx_mtree_load+0x10/0x10
[  331.505885][ T7732]  ? __pfx_get_user_pages_remote+0x10/0x10
[  331.505934][ T7732]  ? __access_remote_vm+0xa3/0x6f0
[  331.505957][ T7732]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.505991][ T7732]  ? __access_remote_vm+0x42c/0x6f0
[  331.506024][ T7732]  __access_remote_vm+0x222/0x6f0
[  331.506062][ T7732]  ? __pfx___access_remote_vm+0x10/0x10
[  331.506089][ T7732]  ? __kmalloc_cache_noprof+0x14d/0x600
[  331.506121][ T7732]  ? proc_pid_cmdline_read+0x41c/0x900
[  331.506150][ T7732]  ? proc_pid_cmdline_read+0x41c/0x900
[  331.506182][ T7732]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.506220][ T7732]  proc_pid_cmdline_read+0x46b/0x900
[  331.506258][ T7732]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.506289][ T7732]  ? __asan_memset+0x22/0x50
[  331.506330][ T7732]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  331.506364][ T7732]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.506395][ T7732]  ? rw_verify_area+0x24a/0x4c0
[  331.506430][ T7732]  vfs_readv+0x57c/0x850
[  331.506470][ T7732]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  331.506505][ T7732]  ? __pfx_vfs_readv+0x10/0x10
[  331.506557][ T7732]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.506593][ T7732]  ? __fget_files+0x2a/0x420
[  331.506624][ T7732]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.506656][ T7732]  ? __fget_files+0x3a2/0x420
[  331.506681][ T7732]  ? __fget_files+0x2a/0x420
[  331.506711][ T7732]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.506749][ T7732]  __x64_sys_preadv+0x19c/0x2b0
[  331.506785][ T7732]  ? __pfx___x64_sys_preadv+0x10/0x10
[  331.506818][ T7732]  ? __pfx_kcov_ioctl+0x10/0x10
[  331.506861][ T7732]  do_syscall_64+0x166/0x520
[  331.506892][ T7732]  ? trace_irq_disable+0x3b/0x140
[  331.506924][ T7732]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.506959][ T7732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.506986][ T7732] RIP: 0033:0x7f4c7e79e2d9
[  331.507010][ T7732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.507034][ T7732] RSP: 002b:00007f4c7f5e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  331.507062][ T7732] RAX: ffffffffffffffda RBX: 00007f4c7ea26180 RCX: 00007f4c7e79e2d9
[  331.507082][ T7732] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  331.507100][ T7732] RBP: 00007f4c7e835888 R08: 00000000fffffff9 R09: 0000000000000000
[  331.507118][ T7732] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  331.507135][ T7732] R13: 00007f4c7ea26218 R14: 00007f4c7ea26180 R15: 00007ffce7520cb8
[  331.507178][ T7732]  </TASK>
[  331.546343][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  331.551939][   T60] team0 (unregistering): Port device team_slave_1 removed
[  331.610398][ T5895] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  331.610454][ T5895] usb 1-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  331.639145][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  331.639180][ T5895] usb 1-1: SerialNumber: syz
[  331.902011][   T60] team0 (unregistering): Port device team_slave_0 removed
[  331.918270][ T5895] usb 1-1: No union descriptors
[  332.523226][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.395'.
[  333.222059][ T7738] loop4: detected capacity change from 0 to 512
[  333.271195][ T7712] bridge0: port 3(batadv1) entered blocking state
[  333.271389][ T7712] bridge0: port 3(batadv1) entered disabled state
[  333.271553][ T7712] batadv1: entered allmulticast mode
[  333.281872][ T7712] batadv1: entered promiscuous mode
[  333.297552][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12
[  333.870371][ T1205] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  333.870396][ T1205] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  335.264676][   T10] usb 1-1: USB disconnect, device number 20
[  335.615472][ T7384] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  335.677192][ T7384] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  335.680123][ T7384] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  335.745145][ T7384] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  337.066402][ T7760] pi3usb30532 0-0005: Error reading config register -5
[  337.066582][ T7760] pi3usb30532 0-0005: probe with driver pi3usb30532 failed with error -5
[  337.116009][ T7760] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05
[  337.123539][ T6309] bridge_slave_1: left allmulticast mode
[  337.123569][ T6309] bridge_slave_1: left promiscuous mode
[  337.123802][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.167486][ T6309] bridge_slave_0: left allmulticast mode
[  337.167517][ T6309] bridge_slave_0: left promiscuous mode
[  337.167779][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.349517][ T7773] nvme_fabrics: unknown parameter or missing value 'Ô' in ctrl creation request
[  337.665243][ T5736] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  337.825481][ T7778] XFS (nbd6): Invalid device [./loop0], error=-2
[  338.397725][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  338.401100][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  338.403099][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  338.404136][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  338.435671][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  338.480041][ T5736] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  338.495932][ T5736] usb 5-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  338.495986][ T5736] usb 5-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  338.501239][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  338.501269][ T5736] usb 5-1: SerialNumber: syz
[  338.592536][ T6309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  338.595988][ T5736] usb 5-1: No union descriptors
[  338.648256][ T6309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  338.683017][ T6309] bond0 (unregistering): Released all slaves
[  338.717673][ T7792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.796586][ T7792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.954360][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.413'.
[  339.139994][ T7795] dummy0 speed is unknown, defaulting to 1000
[  339.308597][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.407'.
[  339.430646][ T7805] loop4: detected capacity change from 0 to 16
[  339.891390][ T6309] hsr_slave_0: left promiscuous mode
[  339.896504][ T6309] hsr_slave_1: left promiscuous mode
[  339.899222][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.917744][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.588116][ T5630] Bluetooth: hci2: command tx timeout
[  341.106518][ T5843] usb 5-1: USB disconnect, device number 18
[  341.208619][ T6309] team0 (unregistering): Port device team_slave_1 removed
[  341.283532][ T6309] team0 (unregistering): Port device team_slave_0 removed
[  342.666402][ T5630] Bluetooth: hci2: command tx timeout
[  342.725836][   T30] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  342.794317][ T5905] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  342.795204][ T7795] dummy0 speed is unknown, defaulting to 1000
[  342.911215][   T30] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  342.912635][   T30] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  342.912687][   T30] usb 3-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  342.914011][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  342.914041][   T30] usb 3-1: SerialNumber: syz
[  342.945792][ T5905] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  342.947370][ T5905] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  342.947421][ T5905] usb 1-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  342.949215][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  342.949244][ T5905] usb 1-1: SerialNumber: syz
[  343.033256][   T30] usb 3-1: No union descriptors
[  343.049846][ T5905] usb 1-1: No union descriptors
[  343.174916][ T7795] dummy0 speed is unknown, defaulting to 1000
[  343.187533][ T7795] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  343.187592][ T7795] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  343.187642][ T7795] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  343.277219][ T7795] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  343.343843][ T7795] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  344.319034][ T7795] dummy0 speed is unknown, defaulting to 1000
[  344.321177][ T7795] dummy0 speed is unknown, defaulting to 1000
[  344.323209][ T7795] dummy0 speed is unknown, defaulting to 1000
[  344.342012][ T7795] dummy0 speed is unknown, defaulting to 1000
[  344.386191][ T7795] dummy0 speed is unknown, defaulting to 1000
[  344.390669][ T7795] dummy0 speed is unknown, defaulting to 1000
[  344.662982][ T5905] usb 3-1: USB disconnect, device number 14
[  344.744605][ T5630] Bluetooth: hci2: command tx timeout
[  344.871974][ T7836] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  345.117235][ T7780] dummy0 speed is unknown, defaulting to 1000
[  345.393393][   T30] usb 1-1: USB disconnect, device number 21
[  345.558571][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.558700][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.558884][ T7665] bridge_slave_0: entered allmulticast mode
[  345.566284][ T7665] bridge_slave_0: entered promiscuous mode
[  345.620090][ T7853] ip_tables: iptables: counters copy to user failed while replacing table
[  345.677642][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.677758][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.677910][ T7665] bridge_slave_1: entered allmulticast mode
[  345.686548][ T7665] bridge_slave_1: entered promiscuous mode
[  345.784336][ T5736] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  345.884449][ T7853] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  345.936683][ T5736] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  345.937905][ T5736] usb 7-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  345.937971][ T5736] usb 7-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  345.939193][ T5736] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  345.939222][ T5736] usb 7-1: SerialNumber: syz
[  346.025082][ T5736] usb 7-1: No union descriptors
[  346.059920][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.077413][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.864514][ T5630] Bluetooth: hci2: command tx timeout
[  347.216082][ T7665] team0: Port device team_slave_0 added
[  349.227086][ T5736] usb 7-1: USB disconnect, device number 7
[  349.431655][ T7665] team0: Port device team_slave_1 added
[  349.746913][ T7883] loop0: detected capacity change from 0 to 2048
[  349.774114][ T7883] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  351.176116][ T7893] loop6: detected capacity change from 0 to 32768
[  351.199330][ T7893] (syz.6.427,7893,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  351.203261][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.203279][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.203323][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.204115][ T7893] (syz.6.427,7893,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  351.260787][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.260809][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.260842][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.350000][ T7893] JBD2: Ignoring recovery information on journal
[  351.398677][ T7893] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  351.828186][ T7665] hsr_slave_0: entered promiscuous mode
[  351.830962][ T7665] hsr_slave_1: entered promiscuous mode
[  351.835151][ T7665] debugfs: 'hsr0' already exists in 'hsr'
[  351.835176][ T7665] Cannot create hsr debugfs directory
[  351.895081][ T7903] loop0: detected capacity change from 0 to 4096
[  351.914631][ T5736] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  351.990682][ T7904] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.065067][ T5736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  352.066367][ T5736] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  352.066423][ T5736] usb 3-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  352.068276][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  352.068303][ T5736] usb 3-1: SerialNumber: syz
[  352.137694][ T6155] ocfs2: Unmounting device (7,6) on (node local)
[  352.141930][ T5736] usb 3-1: No union descriptors
[  352.445693][ T7908] process 'syz.0.431' launched './file0' with NULL argv: empty string added
[  353.227114][ T7916] netlink: 58 bytes leftover after parsing attributes in process `syz.6.430'.
[  353.227494][ T7916] netlink: 128 bytes leftover after parsing attributes in process `syz.6.430'.
[  353.270856][ T6309] bridge_slave_1: left allmulticast mode
[  353.270892][ T6309] bridge_slave_1: left promiscuous mode
[  353.271105][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.318636][ T6309] bridge_slave_0: left allmulticast mode
[  353.318661][ T6309] bridge_slave_0: left promiscuous mode
[  353.318848][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.632436][ T7927] ip_tables: iptables: counters copy to user failed while replacing table
[  353.678619][ T6309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  353.696522][ T6309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.698618][ T6309] bond0 (unregistering): Released all slaves
[  353.895094][ T7927] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  353.966007][ T6309] hsr_slave_0: left promiscuous mode
[  353.967674][ T6309] hsr_slave_1: left promiscuous mode
[  353.975355][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.990380][ T5905] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  353.995776][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.151441][ T5905] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  354.152858][ T5905] usb 5-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  354.152913][ T5905] usb 5-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  354.154284][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  354.154325][ T5905] usb 5-1: SerialNumber: syz
[  354.227215][ T5905] usb 5-1: No union descriptors
[  355.555337][ T6309] team0 (unregistering): Port device team_slave_1 removed
[  355.933964][ T6309] team0 (unregistering): Port device team_slave_0 removed
[  355.958571][ T5895] usb 3-1: USB disconnect, device number 15
[  358.017433][ T5736] usb 5-1: USB disconnect, device number 19
[  358.246732][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  358.450623][    T9] usb 7-1: Using ep0 maxpacket: 32
[  358.466732][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  358.474362][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.508583][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.508618][    T9] usb 7-1: Product: п
[  358.508636][    T9] usb 7-1: Manufacturer: Е
[  358.508655][    T9] usb 7-1: SerialNumber: ä°Š
[  359.030587][    T9] cdc_ncm 7-1:1.0: bind() failure
[  359.043454][    T9] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  359.043503][    T9] cdc_ncm 7-1:1.1: bind() failure
[  359.061907][    T9] usb 7-1: USB disconnect, device number 8
[  359.202306][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.202471][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.202647][ T7780] bridge_slave_0: entered allmulticast mode
[  359.216310][ T7780] bridge_slave_0: entered promiscuous mode
[  359.224765][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.224897][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.231090][ T7780] bridge_slave_1: entered allmulticast mode
[  359.236859][ T7780] bridge_slave_1: entered promiscuous mode
[  359.632845][ T7780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.685359][ T7780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.728053][ T7780] team0: Port device team_slave_0 added
[  359.737478][ T7780] team0: Port device team_slave_1 added
[  359.821037][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.821060][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.821094][ T7780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.839395][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.839417][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.839449][ T7780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.978879][ T7984] input: syz1 as /devices/virtual/input/input11
[  359.978920][ T7984] input: failed to attach handler leds to device input11, error: -6
[  360.066206][ T7989] ip_tables: iptables: counters copy to user failed while replacing table
[  360.213027][ T7780] hsr_slave_0: entered promiscuous mode
[  360.214206][ T7780] hsr_slave_1: entered promiscuous mode
[  360.215013][ T7780] debugfs: 'hsr0' already exists in 'hsr'
[  360.215034][ T7780] Cannot create hsr debugfs directory
[  360.281666][ T7665] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  360.382921][ T7665] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  360.418952][ T7665] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  360.445942][ T7665] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  360.455602][ T7993] loop2: detected capacity change from 0 to 32768
[  360.469038][ T7993] (syz.2.443,7993,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  360.469281][ T7993] (syz.2.443,7993,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  360.475698][ T7989] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  360.494282][ T7993] JBD2: Ignoring recovery information on journal
[  360.545211][ T7993] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  360.669633][ T7665] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  360.680887][ T7665] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  360.793620][ T7665] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  360.944207][ T7665] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  361.822624][ T8009] FAULT_INJECTION: forcing a failure.
[  361.822624][ T8009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  361.822664][ T8009] CPU: 0 UID: 0 PID: 8009 Comm: syz.4.453 Not tainted syzkaller #0 PREEMPT(full) 
[  361.822694][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  361.822710][ T8009] Call Trace:
[  361.822721][ T8009]  <TASK>
[  361.822732][ T8009]  dump_stack_lvl+0xe8/0x150
[  361.822778][ T8009]  should_fail_ex+0x410/0x560
[  361.822830][ T8009]  _copy_to_user+0x31/0xb0
[  361.822860][ T8009]  simple_read_from_buffer+0xe1/0x170
[  361.822911][ T8009]  proc_fail_nth_read+0x1bb/0x230
[  361.822944][ T8009]  ? common_file_perm+0x20e/0x2b0
[  361.822989][ T8009]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  361.823026][ T8009]  ? srso_alias_return_thunk+0x5/0xfbef5
[  361.823059][ T8009]  ? rw_verify_area+0x24a/0x4c0
[  361.823090][ T8009]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  361.823123][ T8009]  vfs_read+0x213/0xa80
[  361.823158][ T8009]  ? __pfx___mutex_lock+0x10/0x10
[  361.823192][ T8009]  ? __pfx_vfs_read+0x10/0x10
[  361.823223][ T8009]  ? __fget_files+0x2a/0x420
[  361.823254][ T8009]  ? srso_alias_return_thunk+0x5/0xfbef5
[  361.823286][ T8009]  ? __fget_files+0x3a2/0x420
[  361.823320][ T8009]  ? __fget_files+0x2a/0x420
[  361.823350][ T8009]  ? srso_alias_return_thunk+0x5/0xfbef5
[  361.823388][ T8009]  ksys_read+0x150/0x270
[  361.823420][ T8009]  ? __pfx_ksys_read+0x10/0x10
[  361.823464][ T8009]  do_syscall_64+0x166/0x520
[  361.823495][ T8009]  ? trace_irq_disable+0x3b/0x140
[  361.823527][ T8009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.823562][ T8009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.823589][ T8009] RIP: 0033:0x7f07f675eb0e
[  361.823613][ T8009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  361.823636][ T8009] RSP: 002b:00007f07f49f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  361.823665][ T8009] RAX: ffffffffffffffda RBX: 00007f07f49f66c0 RCX: 00007f07f675eb0e
[  361.823686][ T8009] RDX: 000000000000000f RSI: 00007f07f49f60a0 RDI: 0000000000000005
[  361.823708][ T8009] RBP: 00007f07f49f6090 R08: 0000000000000000 R09: 0000000000000000
[  361.823725][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  361.823742][ T8009] R13: 00007f07f6a26038 R14: 00007f07f6a25fa0 R15: 00007ffc1e638e48
[  361.823800][ T8009]  </TASK>
[  361.915074][ T8006] loop0: detected capacity change from 0 to 32768
[  361.937186][ T8006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.452 (8006)
[  361.941618][ T5615] ocfs2: Unmounting device (7,2) on (node local)
[  361.968442][ T8006] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  361.968478][ T8006] BTRFS info (device loop0): using sha256 checksum algorithm
[  361.992608][ T5895] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  362.163498][ T5895] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  362.166182][ T8006] BTRFS info (device loop0): enabling ssd optimizations
[  362.166208][ T8006] BTRFS info (device loop0): turning on sync discard
[  362.166229][ T8006] BTRFS info (device loop0): enabling free space tree
[  362.166251][ T8006] BTRFS info (device loop0): use zlib compression, level 3
[  362.172735][ T5895] usb 7-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  362.172829][ T5895] usb 7-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  362.182927][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  362.182960][ T5895] usb 7-1: SerialNumber: syz
[  362.240142][ T5895] usb 7-1: No union descriptors
[  362.267177][   T31] audit: type=1800 audit(1791904086.887:10): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.452" name="file1" dev="loop0" ino=260 res=0 errno=0
[  362.409653][ T5613] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  364.136929][ T5843] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  364.308339][ T5843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  364.311237][ T5843] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  364.311288][ T5843] usb 1-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  364.312859][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  364.312887][ T5843] usb 1-1: SerialNumber: syz
[  364.402134][ T5843] usb 1-1: No union descriptors
[  365.549471][ T5735] usb 7-1: USB disconnect, device number 9
[  365.918553][ T8053] loop6: detected capacity change from 0 to 2048
[  366.901252][ T8053] loop6: detected capacity change from 0 to 131072
[  366.930816][ T8053] F2FS-fs (loop6): Invalid log sectorsize (67108873)
[  366.930852][ T8053] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  366.931771][ T8053] F2FS-fs (loop6): invalid crc value
[  366.942737][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.078483][    T9] usb 1-1: USB disconnect, device number 22
[  367.082994][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  367.199238][ T8053] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  367.207434][ T7665] 8021q: adding VLAN 0 to HW filter on device team0
[  367.244446][ T8053] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  367.244473][ T8053] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  367.252499][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.252613][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.284386][   T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  367.291404][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.291440][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.297818][   T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  367.297847][   T10] usb 5-1: Manufacturer: syz
[  367.329696][   T10] usb 5-1: config 0 descriptor??
[  367.581380][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.581513][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.543502][ T8078] ip_tables: iptables: counters copy to user failed while replacing table
[  368.644732][   T10] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71
[  368.644793][   T10] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71
[  368.644813][   T10] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71
[  368.644865][   T10] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[  368.645034][   T10] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71
[  368.687753][   T10] usb 5-1: USB disconnect, device number 20
[  368.900644][ T8078] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  369.463953][ T7780] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  369.496194][ T7780] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  369.502277][ T7780] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  369.525118][ T7780] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  369.529874][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13
[  369.531296][ T7780] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  369.564120][ T7780] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  369.565108][ T7780] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  369.593818][ T7780] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  371.123026][ T7780] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.184979][ T7780] 8021q: adding VLAN 0 to HW filter on device team0
[  371.226905][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.227044][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.410973][ T5736] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  371.457407][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.457490][ T5802] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.566499][ T5736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  371.567678][ T5736] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  371.567729][ T5736] usb 1-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  371.568730][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  371.568757][ T5736] usb 1-1: SerialNumber: syz
[  371.639485][ T5736] usb 1-1: No union descriptors
[  371.800972][ T5736] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  372.634068][ T5736] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  372.646690][ T5736] usb 7-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  372.646730][ T5736] usb 7-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  372.649357][ T5736] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  372.649387][ T5736] usb 7-1: SerialNumber: syz
[  373.443881][ T5736] usb 7-1: No union descriptors
[  373.756032][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.614948][ T5905] usb 1-1: USB disconnect, device number 23
[  374.657539][ T8131] loop4: detected capacity change from 0 to 512
[  374.821660][ T8131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.935574][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.851000][   T10] usb 7-1: USB disconnect, device number 10
[  377.100646][ T8156] loop6: detected capacity change from 0 to 8
[  377.367459][ T8158] loop6: detected capacity change from 0 to 8
[  377.985555][ T8156] SQUASHFS error: Failed to read block 0x2d7: -5
[  377.985575][ T8156] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  378.447753][ T8156] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  378.585337][ T7665] veth0_vlan: entered promiscuous mode
[  378.637714][ T7665] veth1_vlan: entered promiscuous mode
[  378.783437][ T7665] veth0_macvtap: entered promiscuous mode
[  378.821076][ T7665] veth1_macvtap: entered promiscuous mode
[  378.845434][ T8169] loop0: detected capacity change from 0 to 16
[  378.987212][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.056665][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.095688][ T7780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.220635][ T5909] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.221414][   T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.221728][   T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.232944][ T5971] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.662783][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  379.663051][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  380.089743][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.479'.
[  380.171396][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.178770][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.183092][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.200542][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.201542][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.327666][ T8190] loop2: detected capacity change from 0 to 16
[  380.348444][ T8190] erofs (device loop2): mounted with root inode @ nid 36.
[  380.361870][ T8190] erofs (device loop2): invalid h_shared_count 83 @ nid 46
[  380.362092][ T8190] erofs (device loop2): invalid h_shared_count 83 @ nid 46
[  380.810046][ T8183] loop0: detected capacity change from 0 to 8192
[  380.813677][ T5736] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  380.905746][ T8183]  loop0: p1[EZD] p3 p4
[  380.905778][ T8183] loop0: partition table partially beyond EOD, truncated
[  380.925340][ T8183] loop0: p3 start 150994944 is beyond EOD, truncated
[  380.996571][ T5736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  381.003424][ T5736] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  381.003487][ T5736] usb 3-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  381.008493][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  381.008526][ T5736] usb 3-1: SerialNumber: syz
[  381.055733][ T5736] usb 3-1: No union descriptors
[  382.359402][ T7780] veth0_vlan: entered promiscuous mode
[  382.377150][ T7780] veth1_vlan: entered promiscuous mode
[  382.395825][ T5630] Bluetooth: hci0: command tx timeout
[  382.528119][ T8210] loop0: detected capacity change from 0 to 512
[  382.625869][ T8210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.824764][ T7780] veth0_macvtap: entered promiscuous mode
[  382.874378][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.893163][ T7780] veth1_macvtap: entered promiscuous mode
[  382.956804][ T7877] udevd[7877]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  382.974005][ T7875] udevd[7875]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  384.619349][ T5630] Bluetooth: hci0: command tx timeout
[  384.760045][ T5905] usb 3-1: USB disconnect, device number 16
[  384.944317][  T999] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.333346][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.345889][ T5905] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  385.402426][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.529602][ T5905] usb 3-1: not running at top speed; connect to a high speed hub
[  385.529648][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  385.532292][ T5905] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  385.532325][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.532351][ T5905] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  385.532419][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.579868][ T5905] usb 3-1: config 0 descriptor??
[  385.630145][ T8231] ip_tables: iptables: counters copy to user failed while replacing table
[  385.642528][  T999] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.660879][ T5905] uvcvideo 3-1:0.0: Found UVC 9.00 device <unnamed> (046d:0825)
[  385.902021][   T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.902079][   T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.902124][   T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.921651][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.006194][ T8231] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  386.180027][  T999] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.265708][ T5905] uvcvideo 3-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  386.405202][ T5905] videodev: could not get a free minor
[  386.405224][ T5905] uvcvideo 3-1:0.1: Failed to register meta-cap device (-23).
[  386.412520][ T8185] dummy0 speed is unknown, defaulting to 1000
[  386.516996][ T5905] usb 3-1: USB disconnect, device number 17
[  386.533832][  T999] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.737459][ T5736] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  386.843587][ T5630] Bluetooth: hci0: command tx timeout
[  386.896990][ T5736] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  386.898156][ T5736] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  386.898187][ T5736] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  386.898211][ T5736] usb 5-1: config 0 interface 0 has no altsetting 0
[  386.898239][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.967658][ T5736] usb 5-1: config 0 descriptor??
[  386.968586][ T8239] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  387.683169][ T5736] microsoft 0003:045E:00F9.0003: item fetching failed at offset 0/2
[  387.702654][ T5736] microsoft 0003:045E:00F9.0003: parse failed
[  387.702771][ T5736] microsoft 0003:045E:00F9.0003: probe with driver microsoft failed with error -22
[  387.752089][ T8250] loop0: detected capacity change from 0 to 1024
[  387.757998][ T8250] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  387.881176][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.881198][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.696115][    T9] usb 5-1: USB disconnect, device number 21
[  388.715431][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.715463][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.911219][ T8261] loop4: detected capacity change from 0 to 21
[  388.932662][  T999] bridge_slave_1: left allmulticast mode
[  388.932685][  T999] bridge_slave_1: left promiscuous mode
[  388.932848][  T999] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.019017][  T999] bridge_slave_0: left allmulticast mode
[  389.019050][  T999] bridge_slave_0: left promiscuous mode
[  389.019304][  T999] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.066772][ T5630] Bluetooth: hci0: command tx timeout
[  389.170084][ T8263] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  389.195981][ T8265] FAULT_INJECTION: forcing a failure.
[  389.195981][ T8265] name failslab, interval 1, probability 0, space 0, times 0
[  389.196027][ T8265] CPU: 1 UID: 0 PID: 8265 Comm: syz.0.494 Not tainted syzkaller #0 PREEMPT(full) 
[  389.196059][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  389.196076][ T8265] Call Trace:
[  389.196087][ T8265]  <TASK>
[  389.196097][ T8265]  dump_stack_lvl+0xe8/0x150
[  389.196142][ T8265]  should_fail_ex+0x410/0x560
[  389.196188][ T8265]  should_failslab+0xa8/0x100
[  389.196229][ T8265]  __kmalloc_cache_noprof+0xa3/0x600
[  389.196264][ T8265]  ? alloc_fs_context+0x66/0xd00
[  389.196294][ T8265]  ? alloc_fs_context+0x66/0xd00
[  389.196329][ T8265]  ? __get_fs_type+0x21/0x280
[  389.196365][ T8265]  alloc_fs_context+0x66/0xd00
[  389.196395][ T8265]  ? __get_fs_type+0x267/0x280
[  389.196424][ T8265]  ? __get_fs_type+0x21/0x280
[  389.196457][ T8265]  ? srso_alias_return_thunk+0x5/0xfbef5
[  389.196495][ T8265]  do_new_mount+0x177/0xb00
[  389.196536][ T8265]  ? srso_alias_return_thunk+0x5/0xfbef5
[  389.196575][ T8265]  ? __pfx_do_new_mount+0x10/0x10
[  389.196623][ T8265]  ? srso_alias_return_thunk+0x5/0xfbef5
[  389.196655][ T8265]  ? ns_capable+0x89/0xe0
[  389.196694][ T8265]  ? srso_alias_return_thunk+0x5/0xfbef5
[  389.196725][ T8265]  ? path_mount+0x647/0x1050
[  389.196769][ T8265]  ? srso_alias_return_thunk+0x5/0xfbef5
[  389.196800][ T8265]  ? user_path_at+0xd4/0x160
[  389.196831][ T8265]  __se_sys_mount+0x31d/0x420
[  389.196881][ T8265]  ? __pfx___se_sys_mount+0x10/0x10
[  389.196922][ T8265]  ? srso_alias_return_thunk+0x5/0xfbef5
[  389.196962][ T8265]  ? srso_alias_return_thunk+0x5/0xfbef5
[  389.196994][ T8265]  ? __x64_sys_mount+0x20/0xc0
[  389.197049][ T8265]  do_syscall_64+0x166/0x520
[  389.197081][ T8265]  ? trace_irq_disable+0x3b/0x140
[  389.197111][ T8265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.197145][ T8265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.197172][ T8265] RIP: 0033:0x7fec4319e2d9
[  389.197196][ T8265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.197218][ T8265] RSP: 002b:00007fec43fa0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  389.197247][ T8265] RAX: ffffffffffffffda RBX: 00007fec43425fa0 RCX: 00007fec4319e2d9
[  389.197267][ T8265] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000
[  389.197286][ T8265] RBP: 00007fec43fa0090 R08: 0000200000000280 R09: 0000000000000000
[  389.197305][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  389.197321][ T8265] R13: 00007fec43426038 R14: 00007fec43425fa0 R15: 00007fff4a1987a8
[  389.197363][ T8265]  </TASK>
[  389.298464][ T8263] netlink: 72 bytes leftover after parsing attributes in process `syz.6.487'.
[  389.468068][ T8267] loop2: detected capacity change from 0 to 256
[  389.617608][ T8267] loop4: detected capacity change from 0 to 524287964
[  390.277719][ T8274] syz.4.495 uses obsolete (PF_INET,SOCK_PACKET)
[  391.579593][ T5736] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  391.753934][ T5736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  391.756652][ T5736] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  391.756706][ T5736] usb 1-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  391.778205][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  391.778236][ T5736] usb 1-1: SerialNumber: syz
[  391.886639][ T5736] usb 1-1: No union descriptors
[  391.961933][  T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.994935][  T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.049746][  T999] bond0 (unregistering): Released all slaves
[  392.156857][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10
[  393.698386][  T999] hsr_slave_0: left promiscuous mode
[  393.731288][ T8292] ip_tables: iptables: counters copy to user failed while replacing table
[  393.732384][  T999] hsr_slave_1: left promiscuous mode
[  393.734453][  T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  393.734473][  T999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  393.774274][  T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.774295][  T999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.893213][  T999] veth1_macvtap: left promiscuous mode
[  393.893256][  T999] veth0_macvtap: left promiscuous mode
[  393.893369][  T999] veth1_vlan: left promiscuous mode
[  393.893446][  T999] veth0_vlan: left promiscuous mode
[  394.100446][ T8297] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  394.263366][ T5905] usb 1-1: USB disconnect, device number 24
[  394.333457][ T8301] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  394.710285][ T8304] loop0: detected capacity change from 0 to 32768
[  394.746057][ T8304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.500 (8304)
[  394.794947][ T8304] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  394.794981][ T8304] BTRFS info (device loop0): using sha256 checksum algorithm
[  394.931637][ T8319] loop2: detected capacity change from 0 to 1024
[  394.933283][ T8304] BTRFS info (device loop0): enabling ssd optimizations
[  394.933305][ T8304] BTRFS info (device loop0): turning on sync discard
[  394.933321][ T8304] BTRFS info (device loop0): enabling free space tree
[  394.933338][ T8304] BTRFS info (device loop0): use zlib compression, level 3
[  394.996101][ T8319] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  395.063413][   T31] audit: type=1800 audit(1791904117.568:11): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.500" name="file1" dev="loop0" ino=260 res=0 errno=0
[  395.379391][ T5613] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  396.059451][ T8328] md/raid10:md0: not clean -- starting background reconstruction
[  396.059474][ T8328] md/raid10:md0: active with 1 out of 2 devices
[  396.060795][ T8328] md0: detected capacity change from 0 to 2048
[  396.185875][ T8336] md: resync of RAID array md0
[  396.392987][ T8336] md: md0: resync done.
[  396.411540][ T8333] 
[  396.413868][ T8333] ======================================================
[  396.420866][ T8333] WARNING: possible circular locking dependency detected
[  396.427864][ T8333] syzkaller #0 Not tainted
[  396.432297][ T8333] ------------------------------------------------------
[  396.439305][ T8333] syz.0.503/8333 is trying to acquire lock:
[  396.445181][ T8333] ffffffff90554720 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0
[  396.454700][ T8333] 
[  396.454700][ T8333] but task is already holding lock:
[  396.462059][ T8333] ffff888037bc2358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0
[  396.472330][ T8333] 
[  396.472330][ T8333] which lock already depends on the new lock.
[  396.472330][ T8333] 
[  396.482714][ T8333] 
[  396.482714][ T8333] the existing dependency chain (in reverse order) is:
[  396.491711][ T8333] 
[  396.491711][ T8333] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}:
[  396.499970][ T8333]        __mutex_lock+0x19d/0x1550
[  396.505088][ T8333]        md_start_sync+0x179/0x1010
[  396.510317][ T8333]        process_scheduled_works+0xc3d/0x1630
[  396.516386][ T8333]        worker_thread+0xa47/0xfb0
[  396.521497][ T8333]        kthread+0x38b/0x480
[  396.526081][ T8333]        ret_from_fork+0x514/0xb70
[  396.531182][ T8333]        ret_from_fork_asm+0x1a/0x30
[  396.536457][ T8333] 
[  396.536457][ T8333] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}:
[  396.546017][ T8333]        process_scheduled_works+0xc03/0x1630
[  396.552135][ T8333]        worker_thread+0xa47/0xfb0
[  396.557248][ T8333]        kthread+0x38b/0x480
[  396.561847][ T8333]        ret_from_fork+0x514/0xb70
[  396.567033][ T8333]        ret_from_fork_asm+0x1a/0x30
[  396.572389][ T8333] 
[  396.572389][ T8333] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}:
[  396.580641][ T8333]        touch_wq_lockdep_map+0xcb/0x180
[  396.586274][ T8333]        __flush_workqueue+0x148/0x1470
[  396.591857][ T8333]        md_alloc+0x32/0xf20
[  396.596471][ T8333]        md_alloc_and_put+0x1a/0x1f0
[  396.601751][ T8333]        blk_request_module+0x27d/0x2a0
[  396.607283][ T8333]        blkdev_get_no_open+0x3f/0xe0
[  396.612747][ T8333]        blkdev_open+0x1d7/0x600
[  396.617718][ T8333]        do_dentry_open+0x816/0x1380
[  396.623021][ T8333]        vfs_open+0x3b/0x340
[  396.627607][ T8333]        path_openat+0x1443/0x1d60
[  396.632708][ T8333]        do_file_open+0x23e/0x4a0
[  396.637724][ T8333]        do_sys_openat2+0x115/0x200
[  396.642918][ T8333]        __x64_sys_openat+0x138/0x170
[  396.648286][ T8333]        do_syscall_64+0x166/0x520
[  396.653388][ T8333]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.659788][ T8333] 
[  396.659788][ T8333] -> #0 (major_names_lock){+.+.}-{4:4}:
[  396.667601][ T8333]        __lock_acquire+0x164c/0x2de0
[  396.672963][ T8333]        lock_acquire+0x115/0x350
[  396.678346][ T8333]        __mutex_lock+0x19d/0x1550
[  396.683473][ T8333]        blk_request_module+0x35/0x2a0
[  396.688927][ T8333]        blkdev_get_no_open+0x3f/0xe0
[  396.694771][ T8333]        bdev_file_open_by_dev+0xa0/0x240
[  396.700489][ T8333]        md_import_device+0x2e9/0x650
[  396.705867][ T8333]        md_add_new_disk+0x669/0x1850
[  396.711234][ T8333]        md_ioctl+0x200a/0x2610
[  396.716082][ T8333]        blkdev_ioctl+0x5e3/0x740
[  396.721100][ T8333]        __se_sys_ioctl+0xfc/0x170
[  396.726198][ T8333]        do_syscall_64+0x166/0x520
[  396.731302][ T8333]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.737718][ T8333] 
[  396.737718][ T8333] other info that might help us debug this:
[  396.737718][ T8333] 
[  396.747925][ T8333] Chain exists of:
[  396.747925][ T8333]   major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex
[  396.747925][ T8333] 
[  396.763618][ T8333]  Possible unsafe locking scenario:
[  396.763618][ T8333] 
[  396.771091][ T8333]        CPU0                    CPU1
[  396.776697][ T8333]        ----                    ----
[  396.782216][ T8333]   lock(&mddev->reconfig_mutex);
[  396.787317][ T8333]                                lock((work_completion)(&mddev->sync_work));
[  396.796068][ T8333]                                lock(&mddev->reconfig_mutex);
[  396.803602][ T8333]   lock(major_names_lock);
[  396.808096][ T8333] 
[  396.808096][ T8333]  *** DEADLOCK ***
[  396.808096][ T8333] 
[  396.816288][ T8333] locks held by syz.0.503/8333: 1, last CPU#0:
[  396.822429][ T8333]  #0: ffff888037bc2358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0
[  396.833163][ T8333] 
[  396.833163][ T8333] stack backtrace:
[  396.839073][ T8333] CPU: 0 UID: 0 PID: 8333 Comm: syz.0.503 Not tainted syzkaller #0 PREEMPT(full) 
[  396.848259][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  396.858303][ T8333] Call Trace:
[  396.861581][ T8333]  <TASK>
[  396.864538][ T8333]  dump_stack_lvl+0xe8/0x150
[  396.869127][ T8333]  print_circular_bug+0x2e2/0x300
[  396.874161][ T8333]  check_noncircular+0x12f/0x150
[  396.879097][ T8333]  __lock_acquire+0x164c/0x2de0
[  396.883942][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.889567][ T8333]  ? post_alloc_hook+0x208/0x250
[  396.894502][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.900155][ T8333]  ? get_page_from_freelist+0x2209/0x2280
[  396.905879][ T8333]  lock_acquire+0x115/0x350
[  396.910372][ T8333]  ? blk_request_module+0x35/0x2a0
[  396.915480][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.921116][ T8333]  __mutex_lock+0x19d/0x1550
[  396.925699][ T8333]  ? blk_request_module+0x35/0x2a0
[  396.930800][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.936423][ T8333]  ? lock_acquire+0x115/0x350
[  396.941090][ T8333]  ? blk_request_module+0x35/0x2a0
[  396.946191][ T8333]  ? __pfx___mutex_lock+0x10/0x10
[  396.951252][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.956877][ T8333]  ? find_inode_fast+0x5dc/0x740
[  396.961804][ T8333]  ? find_inode_fast+0xd2/0x740
[  396.966639][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  396.972271][ T8333]  blk_request_module+0x35/0x2a0
[  396.977204][ T8333]  blkdev_get_no_open+0x3f/0xe0
[  396.982155][ T8333]  bdev_file_open_by_dev+0xa0/0x240
[  396.987349][ T8333]  md_import_device+0x2e9/0x650
[  396.992292][ T8333]  md_add_new_disk+0x669/0x1850
[  396.997140][ T8333]  md_ioctl+0x200a/0x2610
[  397.001492][ T8333]  ? tomoyo_path_number_perm+0x219/0x5f0
[  397.007130][ T8333]  ? __pfx_md_ioctl+0x10/0x10
[  397.011807][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  397.017427][ T8333]  ? do_vfs_ioctl+0x116f/0x1530
[  397.022267][ T8333]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  397.027314][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  397.032935][ T8333]  ? hook_file_ioctl+0x1f2/0x600
[  397.037903][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  397.043536][ T8333]  ? __pfx_md_ioctl+0x10/0x10
[  397.048208][ T8333]  blkdev_ioctl+0x5e3/0x740
[  397.052707][ T8333]  ? __pfx_blkdev_ioctl+0x10/0x10
[  397.057726][ T8333]  ? __fget_files+0x2a/0x420
[  397.062298][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  397.067922][ T8333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  397.073632][ T8333]  ? __pfx_blkdev_ioctl+0x10/0x10
[  397.078649][ T8333]  __se_sys_ioctl+0xfc/0x170
[  397.083270][ T8333]  do_syscall_64+0x166/0x520
[  397.087849][ T8333]  ? trace_irq_disable+0x3b/0x140
[  397.092927][ T8333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.098989][ T8333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.105044][ T8333] RIP: 0033:0x7fec4319e2d9
[  397.109447][ T8333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.129043][ T8333] RSP: 002b:00007fec43f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  397.137445][ T8333] RAX: ffffffffffffffda RBX: 00007fec43426090 RCX: 00007fec4319e2d9
[  397.146021][ T8333] RDX: 0000200000000420 RSI: 0000000040140921 RDI: 0000000000000005
[  397.153979][ T8333] RBP: 00007fec43235888 R08: 0000000000000000 R09: 0000000000000000
[  397.161937][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.170023][ T8333] R13: 00007fec43426128 R14: 00007fec43426090 R15: 00007fff4a1987a8
[  397.178084][ T8333]  </TASK>
[  397.415923][  T999] team0 (unregistering): Port device team_slave_1 removed
[  397.475105][  T999] team0 (unregistering): Port device team_slave_0 removed
[  397.532811][ T8333] md: could not open device unknown-block(0,0).
[  397.532868][ T8333] md: md_import_device returned -6
[  398.325601][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.327769][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.327884][ T8185] bridge_slave_0: entered allmulticast mode
[  398.330634][ T8185] bridge_slave_0: entered promiscuous mode
[  398.361938][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.364546][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.364667][ T8185] bridge_slave_1: entered allmulticast mode
[  398.366758][ T8185] bridge_slave_1: entered promiscuous mode
[  398.466860][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.473397][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.537651][ T8185] team0: Port device team_slave_0 added
[  398.546862][ T8185] team0: Port device team_slave_1 added
[  398.600648][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.600666][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.600699][ T8185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.653457][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.655782][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.655817][ T8185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.775488][ T8185] hsr_slave_0: entered promiscuous mode
[  398.776095][ T8185] hsr_slave_1: entered promiscuous mode
[  398.781199][ T8185] debugfs: 'hsr0' already exists in 'hsr'
[  398.781219][ T8185] Cannot create hsr debugfs directory
[  400.076674][ T8185] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  400.096149][ T8185] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  400.097757][ T8185] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  400.117863][ T8185] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  400.123008][ T8185] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  400.142892][ T8185] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  400.143503][ T8185] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  400.151270][ T8185] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  400.368716][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.403639][ T8185] 8021q: adding VLAN 0 to HW filter on device team0
[  400.421376][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.421453][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.438234][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.438309][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.260252][ T8185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.482920][ T8185] veth0_vlan: entered promiscuous mode
[  401.488133][ T8185] veth1_vlan: entered promiscuous mode
[  401.523154][ T8185] veth0_macvtap: entered promiscuous mode
[  401.530207][ T8185] veth1_macvtap: entered promiscuous mode
[  401.555858][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.562319][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.601893][ T8185] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
[  401.620163][  T999] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.620215][  T999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.620256][  T999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.658930][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.658955][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.676631][ T8185] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  401.699958][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.699983][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.705583][ T5971] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0