last executing test programs:

6m22.34008762s ago: executing program 2 (id=226):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)

6m21.957235789s ago: executing program 2 (id=227):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "28935adb6108598948224aba2e6bdc7c7a6fa9bdb22d0000b420a1a53c527d3d458dd4992861ac00000000000000000000000800001000008000", "f4bd00000080194000", [0x8, 0xffffffff9673e35d]}})

6m21.662092656s ago: executing program 2 (id=228):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid\x87De', 0xfffffffffffffffe)

6m21.200242178s ago: executing program 2 (id=230):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x300, 0x140)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m21.129831009s ago: executing program 2 (id=231):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x2000850, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES64], 0x47, 0xc15, &(0x7f0000001940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
fsync(r0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$packet(0x11, 0x3, 0x300)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22)
fsync(r1)

6m20.776601188s ago: executing program 2 (id=233):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd776b1c012bd14efbb049fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m20.587605473s ago: executing program 32 (id=233):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd776b1c012bd14efbb049fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m20.076542826s ago: executing program 3 (id=238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {{'sha256\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

6m18.712414179s ago: executing program 3 (id=242):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000003180)=0x325b, 0x4)

6m17.43066491s ago: executing program 3 (id=252):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f00000004c0)=[@cpuid={0x64, 0x18, {0xfffffff7, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x57, 0x6, 0x5, 0x3}}, @nested_load_syzos={0x136, 0x50, {0x1, 0xf9, [@cpuid={0x64, 0x18, {0x7, 0x9}}, @nested_amd_vmsave={0x183, 0x18, 0x2}]}}], 0xa0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000280)=0x5, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

6m13.685555383s ago: executing program 3 (id=261):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

6m13.541997606s ago: executing program 3 (id=263):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x247db795, 0x3, 0x0, 0x0, 0x16, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
r2 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000d40)={0x0})
open(0x0, 0x66842, 0x4)

6m12.880109482s ago: executing program 3 (id=266):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0)
write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4, '\x00', {0x1, 0x6, "f9c246", 0x1000, 0x0, 0xff, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x66)

6m12.512864751s ago: executing program 33 (id=266):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0)
write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4, '\x00', {0x1, 0x6, "f9c246", 0x1000, 0x0, 0xff, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x66)

5m3.42366181s ago: executing program 4 (id=481):
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x5, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0x9, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x3, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xb, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0x10, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x8000003c, 0x0, 0x8080000, 0x8, 0x4, 0x8001, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xcc480, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0x2, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a, 0x0, 0x100], 0xdddd0000, 0x156201})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m3.025837419s ago: executing program 4 (id=485):
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)='0', 0x1, 0xfffffffffffffffe)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8c4, &(0x7f0000000380)={0x11, 0x8100, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mount(0x0, 0x0, 0x0, 0x1042, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
unshare(0x28000600)
pipe(&(0x7f0000000080))

5m1.650721153s ago: executing program 4 (id=489):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

5m1.37522478s ago: executing program 1 (id=491):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
r4 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)

5m0.436482163s ago: executing program 1 (id=492):
socket$vsock_stream(0x28, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x2)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

4m59.609487813s ago: executing program 4 (id=493):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0xfffffe14)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
dup3(r1, r4, 0x6700000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)

4m59.013412838s ago: executing program 4 (id=495):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)

4m57.155021414s ago: executing program 4 (id=497):
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)='z', 0x14}], 0x1}, 0x4011)

4m55.647044431s ago: executing program 1 (id=498):
close(0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setns(0xc9, 0x0)
setns(0xc9, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local}, @info_request={0xf, 0x0, 0x0, 0x8}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
socket(0x27, 0x5, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x7, 0x9, 0x3, 0x8}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x7, 0x3, 0x10, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0x1, 0x5, 0x5, 0xc3, 0x6, 0x3, 0x6, 0x3, 0x3}, {0x7000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x9, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0xdddd1000, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x4, 0x4, 0xff, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xadd8}, {0xfffff000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0x1ff8, [0x5, 0x3, 0x4000000000000009, 0x7]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0xb}, 0x28)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="23000000010006", 0x7)

4m52.281287044s ago: executing program 1 (id=503):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001240)='./file0\x00', 0x2, &(0x7f0000000000)=ANY=[], 0x1, 0x120c, &(0x7f0000003680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)
close(r2)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x2000003})

4m51.496772353s ago: executing program 1 (id=506):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x80001009, 0xb, 0x0, 'queue1\x00', 0xfffffffc})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x261f]}}], 0xffc8)

4m49.97766507s ago: executing program 1 (id=507):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4m42.089863964s ago: executing program 34 (id=497):
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)='z', 0x14}], 0x1}, 0x4011)

4m33.892419305s ago: executing program 35 (id=507):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m51.423117905s ago: executing program 6 (id=720):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091)
sendmsg$alg(r2, 0x0, 0x24044010)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10)
listen(r3, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r4)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10009010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810)

1m40.23269911s ago: executing program 6 (id=729):
syz_emit_ethernet(0x66, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='hfsplus\x00', &(0x7f00000003c0)='hfsplus\x00', 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62)
listen(r2, 0x0)
r3 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x30000000})
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, 0x0)
pwrite64(r0, 0x0, 0x0, 0xe7c)
timer_create(0x0, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x202)

1m36.108131541s ago: executing program 6 (id=733):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
sendfile(r2, r0, 0x0, 0x7f)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe2$watch_queue(&(0x7f0000001180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xc3)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r8, 0xe2)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route_sched(r7, 0x0, 0x80)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20)

1m31.081437894s ago: executing program 6 (id=739):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2)
socket$netlink(0x10, 0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket(0x10, 0x803, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES8=r1], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})

1m27.373514115s ago: executing program 6 (id=746):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$dri(0x0, 0x9, 0x400)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40240)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17})
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x101, 0x840)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, {0x68, 0xffffffff, 0x6, 0x95bf6fef}})
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, 0x0)
pipe(&(0x7f0000000180))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1m25.888450232s ago: executing program 6 (id=748):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x13, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r9 = accept4$alg(r8, 0x0, 0x0, 0x80000)
io_setup(0x42, &(0x7f0000000100)=<r10=>0x0)
sendmmsg$alg(r9, &(0x7f0000000280), 0x16, 0x4013)
io_submit(r10, 0x0, &(0x7f0000000580))

1m9.983309642s ago: executing program 36 (id=748):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x13, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r9 = accept4$alg(r8, 0x0, 0x0, 0x80000)
io_setup(0x42, &(0x7f0000000100)=<r10=>0x0)
sendmmsg$alg(r9, &(0x7f0000000280), 0x16, 0x4013)
io_submit(r10, 0x0, &(0x7f0000000580))

16.313806539s ago: executing program 0 (id=844):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x82)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[], 0x118)
fanotify_init(0x200, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b)
write(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x7)
getpid()
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)

15.138662628s ago: executing program 5 (id=846):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0})
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
setns(0xc9, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x0, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x78)

12.979337981s ago: executing program 0 (id=848):
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

12.756082767s ago: executing program 8 (id=849):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0})
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
setns(0xc9, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x0, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x78)

12.024887614s ago: executing program 0 (id=851):
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0)
mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000940)={[{@resgid}, {@barrier}, {@errors_remount}, {@noblock_validity}]}, 0x0, 0x526, &(0x7f0000001300)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf5, 0xfe, 0x7fff7ffc}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

10.914067182s ago: executing program 5 (id=852):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0})
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
setns(0xc9, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x0, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x78)

10.529541291s ago: executing program 0 (id=853):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

10.041008223s ago: executing program 7 (id=854):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0})
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
setns(0xc9, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, 0x0, &(0x7f0000000580))

9.969769045s ago: executing program 8 (id=855):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0})
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
setns(0xc9, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x0, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, 0x0}, 0x0)

9.945030686s ago: executing program 5 (id=856):
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

6.855714801s ago: executing program 7 (id=857):
setns(0xc9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$rds(0x15, 0x5, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000000/0xb000)=nil, 0xb000, 0x7ffffffe})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x50621})

5.821798797s ago: executing program 7 (id=858):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)

5.728288859s ago: executing program 8 (id=859):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10)

4.785804362s ago: executing program 7 (id=860):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0})
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
setns(0xc9, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, 0x0, &(0x7f0000000580))

4.707452964s ago: executing program 8 (id=861):
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0)
mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000940)={[{@resgid}, {@barrier}, {@errors_remount}, {@noblock_validity}]}, 0x0, 0x526, &(0x7f0000001300)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf5, 0xfe, 0x7fff7ffc}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

4.654714365s ago: executing program 5 (id=862):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0})
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
setns(0xc9, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x0, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x78)

1.566907301s ago: executing program 0 (id=863):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10)

868.800228ms ago: executing program 8 (id=864):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)

846.212119ms ago: executing program 7 (id=865):
setns(0xc9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$rds(0x15, 0x5, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r4, 0x0, &(0x7f0000000000/0xb000)=nil, 0xb000, 0x7ffffffe})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x50621})

416.07147ms ago: executing program 0 (id=866):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

406.65189ms ago: executing program 7 (id=867):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

386.62167ms ago: executing program 5 (id=868):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)

324.858462ms ago: executing program 8 (id=869):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x82)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[], 0x118)
fanotify_init(0x200, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b)
write(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040042"], 0x7)
getpid()
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=870):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
write(r0, &(0x7f0000000280)='1', 0x1)

kernel console output (not intermixed with test programs):

952] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[   89.840506][ T5821] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[   89.847153][ T5979] ldusb: No device or device unplugged -19
[   90.368333][ T6004] warning: `syz.2.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   90.449746][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.513493][ T6011] FAULT_INJECTION: forcing a failure.
[   90.513493][ T6011] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   90.532714][ T6011] CPU: 1 PID: 6011 Comm: syz.2.55 Not tainted syzkaller #0
[   90.539983][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   90.550078][ T6011] Call Trace:
[   90.553390][ T6011]  <TASK>
[   90.556353][ T6011]  dump_stack_lvl+0x18c/0x250
[   90.561166][ T6011]  ? show_regs_print_info+0x20/0x20
[   90.566406][ T6011]  ? load_image+0x420/0x420
[   90.570952][ T6011]  ? __might_fault+0xaa/0x120
[   90.575669][ T6011]  ? __lock_acquire+0x7eb0/0x7eb0
[   90.580730][ T6011]  ? __virt_addr_valid+0x10c/0x380
[   90.585885][ T6011]  should_fail_ex+0x394/0x4c0
[   90.590615][ T6011]  _copy_to_user+0x2f/0xa0
[   90.595066][ T6011]  bpf_verifier_vlog+0x5ac/0x840
[   90.600219][ T6011]  btf_verifier_log+0x11e/0x1a0
[   90.605126][ T6011]  ? btf_parse_graph_root+0xb00/0xb00
[   90.610563][ T6011]  btf_check_all_metas+0x9a7/0xaf0
[   90.615727][ T6011]  btf_parse_type_sec+0xfc/0x1960
[   90.620786][ T6011]  ? btf_check_sec_info+0x350/0x350
[   90.626022][ T6011]  ? __virt_addr_valid+0x10c/0x380
[   90.631173][ T6011]  ? btf_verifier_log+0x1a0/0x1a0
[   90.636235][ T6011]  ? btf_parse_hdr+0x545/0x700
[   90.641039][ T6011]  ? btf_parse_str_sec+0x20d/0x2a0
[   90.646184][ T6011]  btf_new_fd+0x440/0x9e0
[   90.650555][ T6011]  ? bpf_btf_show_fdinfo+0x80/0x80
[   90.655723][ T6011]  ? capable+0x88/0xe0
[   90.659827][ T6011]  __sys_bpf+0x670/0x890
[   90.664098][ T6011]  ? bpf_link_show_fdinfo+0x560/0x560
[   90.669514][ T6011]  ? lock_chain_count+0x20/0x20
[   90.674402][ T6011]  __x64_sys_bpf+0x7c/0x90
[   90.678853][ T6011]  do_syscall_64+0x55/0xb0
[   90.683309][ T6011]  ? clear_bhb_loop+0x40/0x90
[   90.688007][ T6011]  ? clear_bhb_loop+0x40/0x90
[   90.692713][ T6011]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   90.698646][ T6011] RIP: 0033:0x7f485339e199
[   90.703088][ T6011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.722764][ T6011] RSP: 002b:00007f485423c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   90.731262][ T6011] RAX: ffffffffffffffda RBX: 00007f4853625fa0 RCX: 00007f485339e199
[   90.739276][ T6011] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[   90.747294][ T6011] RBP: 00007f48534350b8 R08: 0000000000000000 R09: 0000000000000000
[   90.755288][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.763284][ T6011] R13: 00007f4853626038 R14: 00007f4853625fa0 R15: 00007fffe6c25e38
[   90.771399][ T6011]  </TASK>
[   90.889089][ T5828] usb 2-1: Using ep0 maxpacket: 8
[   90.902700][ T5828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.922999][ T5828] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   90.946220][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   90.970670][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   90.982206][ T5828] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   91.011809][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.049302][ T5828] hub 2-1:1.0: bad descriptor, ignoring hub
[   91.055279][ T5828] hub: probe of 2-1:1.0 failed with error -5
[   91.067896][ T6019] syzkaller1: entered promiscuous mode
[   91.073297][ T5828] cdc_wdm 2-1:1.0: skipping garbage
[   91.084204][ T6019] syzkaller1: entered allmulticast mode
[   91.087575][ T5828] cdc_wdm 2-1:1.0: skipping garbage
[   91.118945][ T5828] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   91.124922][ T5828] cdc_wdm 2-1:1.0: Unknown control protocol
[   91.204412][ T6013] loop0: detected capacity change from 0 to 40427
[   91.251725][ T5789] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   92.247310][ T6061] loop0: detected capacity change from 0 to 256
[   92.278344][ T6061] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.611579][ T6066] loop2: detected capacity change from 0 to 1024
[   92.622276][ T6066] EXT4-fs: Ignoring removed orlov option
[   92.628131][ T6066] EXT4-fs: Invalid want_extra_isize 5
[   92.807662][ T6072] loop3: detected capacity change from 0 to 512
[   92.820265][ T6072] EXT4-fs: Ignoring removed nobh option
[   92.894869][ T6072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.917180][ T6072] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.981736][ T6072] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.73: corrupted inode contents
[   92.996661][ T6072] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.73: mark_inode_dirty error
[   93.020319][ T6072] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.73: corrupted inode contents
[   93.056571][ T6072] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.73: mark_inode_dirty error
[   93.080859][ T6085] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.73: corrupted inode contents
[   93.130599][ T6085] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.73: mark_inode_dirty error
[   93.151097][ T6085] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.73: corrupted inode contents
[   93.217211][ T6072] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.73: corrupted inode contents
[   93.230276][ T5828] usb 2-1: USB disconnect, device number 2
[   93.293804][ T6072] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.73: mark_inode_dirty error
[   93.314812][ T6072] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem
[   93.397260][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.462825][ T6092] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[   93.604819][ T6099] loop0: detected capacity change from 0 to 512
[   93.658841][ T6099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   93.707522][ T6099] EXT4-fs (loop0): 1 truncate cleaned up
[   93.726656][ T6099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.808710][ T5821] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.952736][ T6107] loop2: detected capacity change from 0 to 512
[   93.970782][ T6107] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.989495][ T6107] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.009152][ T5821] usb 4-1: Using ep0 maxpacket: 8
[   94.014686][ T6107] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   94.031978][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short
[   94.043567][ T5821] usb 4-1: config 4 interface 0 has no altsetting 0
[   94.060602][ T5821] usb 4-1: string descriptor 0 read error: -22
[   94.067203][ T5821] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   94.078810][ T5821] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[   94.087414][ T6107] EXT4-fs (loop2): 1 truncate cleaned up
[   94.105450][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.111581][ T5821] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   94.153642][ T5821] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   94.166791][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.167388][ T5821] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   94.186357][ T5821] usb 4-1: media controller created
[   94.214510][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   94.332757][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.360128][ T5821] zl10353_read_register: readreg error (reg=127, ret==0)
[   94.463938][ T5821] usb 4-1: USB disconnect, device number 3
[   95.096908][ T6135] loop3: detected capacity change from 0 to 128
[   95.181862][ T6135] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   95.244054][ T6135] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.296156][ T6133] loop0: detected capacity change from 0 to 2048
[   95.414136][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   95.644683][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   95.705613][ T6140] loop2: detected capacity change from 0 to 32768
[   95.794795][ T6140] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.001775][ T6140] XFS (loop2): Ending clean mount
[   96.032475][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.229137][   T28] audit: type=1800 audit(1791223824.569:2): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.95" name="bus" dev="loop2" ino=9289 res=0 errno=0
[   96.403718][ T6160] loop1: detected capacity change from 0 to 64
[   96.504996][ T6161] FAULT_INJECTION: forcing a failure.
[   96.504996][ T6161] name failslab, interval 1, probability 0, space 0, times 0
[   96.557648][ T6161] CPU: 0 PID: 6161 Comm: syz.0.98 Not tainted syzkaller #0
[   96.565000][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   96.575094][ T6161] Call Trace:
[   96.578401][ T6161]  <TASK>
[   96.581357][ T6161]  dump_stack_lvl+0x18c/0x250
[   96.586088][ T6161]  ? show_regs_print_info+0x20/0x20
[   96.591339][ T6161]  ? load_image+0x420/0x420
[   96.595891][ T6161]  ? __might_sleep+0xe0/0xe0
[   96.600531][ T6161]  ? __lock_acquire+0x7eb0/0x7eb0
[   96.605604][ T6161]  should_fail_ex+0x394/0x4c0
[   96.610337][ T6161]  should_failslab+0x9/0x20
[   96.614880][ T6161]  slab_pre_alloc_hook+0x59/0x300
[   96.619965][ T6161]  ? mpi_alloc+0x77/0x130
[   96.624341][ T6161]  ? mpi_alloc+0x77/0x130
[   96.628713][ T6161]  __kmem_cache_alloc_node+0x53/0x250
[   96.634144][ T6161]  ? mpi_alloc+0x77/0x130
[   96.638496][ T6161]  __kmalloc+0xa7/0x240
[   96.642707][ T6161]  mpi_alloc+0x77/0x130
[   96.646889][ T6161]  mpi_read_raw_from_sgl+0x2cd/0x640
[   96.652194][ T6161]  ? mpi_write_to_sgl+0x7a0/0x7a0
[   96.657240][ T6161]  ? __asan_memset+0x22/0x40
[   96.661941][ T6161]  rsa_enc+0x151/0x3d0
[   96.666114][ T6161]  ? crypto_dh_decode_key+0x170/0x170
[   96.671517][ T6161]  ? __virt_addr_valid+0x10c/0x380
[   96.676672][ T6161]  ? __virt_addr_valid+0x10c/0x380
[   96.681863][ T6161]  pkcs1pad_verify+0x406/0x5e0
[   96.686650][ T6161]  crypto_sig_verify+0x1bc/0x250
[   96.691691][ T6161]  ? crypto_sig_sign+0x240/0x240
[   96.696753][ T6161]  ? rsa_max_size+0x19/0x70
[   96.701291][ T6161]  ? pkcs1pad_set_pub_key+0x15d/0x1c0
[   96.706678][ T6161]  public_key_verify_signature+0x607/0x870
[   96.712537][ T6161]  ? public_key_free+0x80/0x80
[   96.717330][ T6161]  ? asymmetric_key_generate_id+0x60/0x150
[   96.723235][ T6161]  ? asymmetric_key_id_same+0x67/0xe0
[   96.728630][ T6161]  x509_check_for_self_signed+0x31b/0x430
[   96.734543][ T6161]  x509_cert_parse+0x5a0/0x7b0
[   96.739506][ T6161]  x509_key_preparse+0x64/0x6c0
[   96.744366][ T6161]  ? down_read+0x1ac/0x2e0
[   96.748792][ T6161]  asymmetric_key_preparse+0xa9/0x140
[   96.754183][ T6161]  __key_create_or_update+0x3a6/0xa60
[   96.759915][ T6161]  ? __lock_acquire+0x7eb0/0x7eb0
[   96.764952][ T6161]  ? key_create_or_update+0x60/0x60
[   96.770184][ T6161]  ? bpf_lsm_key_permission+0x9/0x10
[   96.775506][ T6161]  ? lookup_user_key+0xb66/0x1140
[   96.780564][ T6161]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[   96.786686][ T6161]  ? keyring_search_rcu+0x280/0x280
[   96.792000][ T6161]  key_create_or_update+0x42/0x60
[   96.797045][ T6161]  __se_sys_add_key+0x34f/0x410
[   96.801918][ T6161]  ? __x64_sys_add_key+0xc0/0xc0
[   96.806919][ T6161]  ? lockdep_hardirqs_on+0x98/0x150
[   96.812134][ T6161]  ? __x64_sys_add_key+0x20/0xc0
[   96.817182][ T6161]  do_syscall_64+0x55/0xb0
[   96.821637][ T6161]  ? clear_bhb_loop+0x40/0x90
[   96.826357][ T6161]  ? clear_bhb_loop+0x40/0x90
[   96.831085][ T6161]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.837006][ T6161] RIP: 0033:0x7f02e3f9e199
[   96.841435][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.861072][ T6161] RSP: 002b:00007f02e4e63028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   96.869593][ T6161] RAX: ffffffffffffffda RBX: 00007f02e4225fa0 RCX: 00007f02e3f9e199
[   96.877573][ T6161] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[   96.885547][ T6161] RBP: 00007f02e40350b8 R08: 000000000e7b7e3c R09: 0000000000000000
[   96.893525][ T6161] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[   96.901499][ T6161] R13: 00007f02e4226038 R14: 00007f02e4225fa0 R15: 00007ffeba00fa08
[   96.909490][ T6161]  </TASK>
[   97.036951][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   97.262801][ T6152] loop3: detected capacity change from 0 to 40427
[   97.300517][ T6152] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   97.328079][ T6152] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   97.376276][ T6152] F2FS-fs (loop3): Found nat_bits in checkpoint
[   97.502632][ T6152] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   97.526955][ T6152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   97.702966][ T6176] overlayfs: failed to clone upperpath
[   97.806925][ T6175] loop0: detected capacity change from 0 to 4096
[   97.834093][ T6175] EXT4-fs: Ignoring removed mblk_io_submit option
[   97.873788][ T6182] overlayfs: failed to clone upperpath
[   97.885688][ T6175] EXT4-fs (loop0): Test dummy encryption mode enabled
[   98.046138][ T6175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.182978][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.289032][ T5781] Bluetooth: hci0: command 0x0406 tx timeout
[  100.399022][ T6243] fuse: Bad value for 'fd'
[  101.880930][ T6261] syz.2.138 (6261): drop_caches: 1
[  103.059720][ T6237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.416717][ T6301] loop3: detected capacity change from 0 to 40427
[  103.434569][ T6301] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  103.442543][ T6301] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  103.458502][ T6301] F2FS-fs (loop3): Found nat_bits in checkpoint
[  103.470715][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.522028][ T6301] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  103.529382][ T6301] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  103.603232][ T6301] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  103.612940][ T6301] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  103.620968][ T6301] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  103.631316][ T6301] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  103.639341][ T6301] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  103.647133][ T6301] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  103.658260][ T6301] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  103.678720][ T5820] usb 3-1: Using ep0 maxpacket: 32
[  103.692324][ T5820] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  103.715880][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.724488][ T5820] usb 3-1: Product: syz
[  103.729794][ T5820] usb 3-1: Manufacturer: syz
[  103.734529][ T5820] usb 3-1: SerialNumber: syz
[  103.747748][ T5820] usb 3-1: config 0 descriptor??
[  103.762733][ T5820] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  103.888322][ T6315] netlink: 64 bytes leftover after parsing attributes in process `syz.1.156'.
[  104.281124][   T28] audit: type=1804 audit(1791223832.639:3): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.158" name=2020736C20206C6F63616C5F616464726573732072656D5F6164647265737320202073742074785F71756575652072785F717565756520747220746D2D3E7768656E20726574726E736D74202020756964202074696D656F757420696E6F646520202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020200A dev="ramfs" ino=9016 res=1 errno=0
[  104.529316][ T6332] FAULT_INJECTION: forcing a failure.
[  104.529316][ T6332] name fail_futex, interval 1, probability 0, space 0, times 1
[  104.564635][ T6332] CPU: 0 PID: 6332 Comm: syz.0.160 Not tainted syzkaller #0
[  104.571996][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  104.582085][ T6332] Call Trace:
[  104.585389][ T6332]  <TASK>
[  104.588333][ T6332]  dump_stack_lvl+0x18c/0x250
[  104.593054][ T6332]  ? show_regs_print_info+0x20/0x20
[  104.598330][ T6332]  ? load_image+0x420/0x420
[  104.602876][ T6332]  ? sched_core_dequeue+0x1c0/0x1c0
[  104.608115][ T6332]  should_fail_ex+0x394/0x4c0
[  104.612834][ T6332]  get_futex_key+0x136/0x1030
[  104.617552][ T6332]  ? futex_setup_timer+0xc0/0xc0
[  104.622514][ T6332]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  104.628529][ T6332]  ? __lock_acquire+0x7eb0/0x7eb0
[  104.633598][ T6332]  ? preempt_schedule+0xc0/0xd0
[  104.638587][ T6332]  futex_wait_setup+0xbc/0x270
[  104.643400][ T6332]  ? futex_wait_multiple+0x920/0x920
[  104.648812][ T6332]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  104.654742][ T6332]  ? _raw_spin_unlock+0x40/0x40
[  104.659650][ T6332]  futex_wait+0x1bc/0x5c0
[  104.664019][ T6332]  ? futex_wait_setup+0x270/0x270
[  104.669105][ T6332]  ? lockdep_hardirqs_on+0x98/0x150
[  104.674605][ T6332]  do_futex+0x2ff/0x3e0
[  104.678793][ T6332]  ? __ia32_sys_get_robust_list+0x110/0x110
[  104.684716][ T6332]  __se_sys_futex+0x3a9/0x440
[  104.689451][ T6332]  ? __x64_sys_futex+0xf0/0xf0
[  104.694327][ T6332]  ? __x64_sys_futex+0x21/0xf0
[  104.699100][ T6332]  do_syscall_64+0x55/0xb0
[  104.703825][ T6332]  ? clear_bhb_loop+0x40/0x90
[  104.708526][ T6332]  ? clear_bhb_loop+0x40/0x90
[  104.713215][ T6332]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  104.719137][ T6332] RIP: 0033:0x7f02e3f9e199
[  104.723562][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.743236][ T6332] RSP: 002b:00007f02e4e630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  104.751673][ T6332] RAX: ffffffffffffffda RBX: 00007f02e4225fa8 RCX: 00007f02e3f9e199
[  104.759667][ T6332] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f02e4225fa8
[  104.767644][ T6332] RBP: 00007f02e4225fa0 R08: 0000000000000000 R09: 0000000000000000
[  104.775619][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.783609][ T6332] R13: 00007f02e4226038 R14: 00007ffeba00f920 R15: 00007ffeba00fa08
[  104.791623][ T6332]  </TASK>
[  104.881186][ T6337] macvlan2: entered promiscuous mode
[  104.886631][ T6337] macvlan2: entered allmulticast mode
[  104.898580][ T6337] dummy0: entered promiscuous mode
[  104.906508][ T6337] dummy0: entered allmulticast mode
[  104.926491][ T6337] team0: Port device macvlan2 added
[  105.261671][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'.
[  105.421893][ T5820] gspca_topro: Sensor cx0342
[  105.531166][ T6341] loop3: detected capacity change from 0 to 32768
[  105.579828][ T6356] syzkaller0: entered promiscuous mode
[  105.586497][ T6356] syzkaller0: entered allmulticast mode
[  105.611785][ T6341] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.697250][ T5820] usb 3-1: USB disconnect, device number 2
[  105.785603][ T6368] overlayfs: failed to clone upperpath
[  105.879814][ T6341] XFS (loop3): Ending clean mount
[  106.235276][   T28] audit: type=1804 audit(1791223834.549:4): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.162" name="/newroot/29/file0/file1" dev="loop3" ino=9286 res=1 errno=0
[  106.464621][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.073629][ T6394] loop2: detected capacity change from 0 to 8
[  108.133710][ T6394] SQUASHFS error: zstd decompression failed, data probably corrupt
[  108.150378][ T6394] SQUASHFS error: Failed to read block 0x4ec: -5
[  108.156733][ T6396] process 'syz.1.179' launched '/dev/fd/3' with NULL argv: empty string added
[  108.156972][ T6394] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  108.199672][ T6394] SQUASHFS error: Unable to read inode 0x2011f
[  108.317138][ T6394] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.180' sets config #0
[  108.674082][ T6409] kvm: apic: phys broadcast and lowest prio
[  108.931503][ T6394] loop2: detected capacity change from 0 to 32768
[  109.245885][ T6424] FAULT_INJECTION: forcing a failure.
[  109.245885][ T6424] name fail_futex, interval 1, probability 0, space 0, times 0
[  109.273530][ T6422] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (12)
[  109.278729][ T6424] CPU: 1 PID: 6424 Comm: syz.2.190 Not tainted syzkaller #0
[  109.290963][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  109.301054][ T6424] Call Trace:
[  109.304356][ T6424]  <TASK>
[  109.307312][ T6424]  dump_stack_lvl+0x18c/0x250
[  109.312034][ T6424]  ? show_regs_print_info+0x20/0x20
[  109.317283][ T6424]  ? load_image+0x420/0x420
[  109.321831][ T6424]  ? get_user_pages_fast_only+0xa0/0xa0
[  109.327424][ T6424]  ? asan.module_dtor+0x20/0x20
[  109.332315][ T6424]  should_fail_ex+0x394/0x4c0
[  109.337021][ T6424]  get_futex_key+0x16f/0x1030
[  109.341715][ T6424]  ? futex_setup_timer+0xc0/0xc0
[  109.346660][ T6424]  ? futex_wait_queue+0x138/0x1b0
[  109.351697][ T6424]  futex_wake_op+0x1e8/0xd40
[  109.356731][ T6424]  ? futex_wake+0x4f0/0x4f0
[  109.361248][ T6424]  ? file_end_write+0x159/0x250
[  109.366107][ T6424]  ? vfs_write+0x5de/0x9a0
[  109.370561][ T6424]  do_futex+0x385/0x3e0
[  109.374728][ T6424]  ? __ia32_sys_get_robust_list+0x110/0x110
[  109.380716][ T6424]  __se_sys_futex+0x3a9/0x440
[  109.385397][ T6424]  ? __x64_sys_futex+0xf0/0xf0
[  109.390169][ T6424]  ? __x64_sys_futex+0x21/0xf0
[  109.395053][ T6424]  do_syscall_64+0x55/0xb0
[  109.399539][ T6424]  ? clear_bhb_loop+0x40/0x90
[  109.404231][ T6424]  ? clear_bhb_loop+0x40/0x90
[  109.408917][ T6424]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  109.414836][ T6424] RIP: 0033:0x7f485339e199
[  109.419252][ T6424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.438875][ T6424] RSP: 002b:00007f485423c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  109.447319][ T6424] RAX: ffffffffffffffda RBX: 00007f4853625fa0 RCX: 00007f485339e199
[  109.455320][ T6424] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000020000000cffc
[  109.463313][ T6424] RBP: 00007f48534350b8 R08: 0000000000000000 R09: 0000000000000000
[  109.471295][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.479269][ T6424] R13: 00007f4853626038 R14: 00007f4853625fa0 R15: 00007fffe6c25e38
[  109.487254][ T6424]  </TASK>
[  109.648987][ T5821] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  109.859660][ T5821] usb 1-1: Using ep0 maxpacket: 8
[  109.869010][ T5821] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  109.878104][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.898601][ T5821] usb 1-1: Product: syz
[  109.902838][ T5821] usb 1-1: Manufacturer: syz
[  109.907461][ T5821] usb 1-1: SerialNumber: syz
[  109.931603][ T5821] usb 1-1: config 0 descriptor??
[  110.008676][ T5820] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  110.166262][ T5821] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  110.209746][ T5820] usb 3-1: Using ep0 maxpacket: 8
[  110.232356][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.257430][ T5820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  110.277823][ T5820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  110.299865][ T5820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  110.313259][ T5820] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  110.325775][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.352914][ T5820] hub 3-1:1.0: bad descriptor, ignoring hub
[  110.367333][ T5820] hub: probe of 3-1:1.0 failed with error -5
[  110.380269][ T5820] cdc_wdm 3-1:1.0: skipping garbage
[  110.386533][ T5820] cdc_wdm 3-1:1.0: skipping garbage
[  110.408030][ T5820] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  110.416734][ T5820] cdc_wdm 3-1:1.0: Unknown control protocol
[  110.798379][ T5821] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  110.829362][ T5821] usb 1-1: USB disconnect, device number 3
[  112.715077][ T6479] netlink: 352 bytes leftover after parsing attributes in process `syz.1.210'.
[  112.751668][  T788] usb 3-1: USB disconnect, device number 3
[  112.970217][ T6489] loop2: detected capacity change from 0 to 764
[  113.180358][ T6489] fuse: Unknown parameter 'fd0xffffffffffffffff000000000000000000006'
[  113.515910][ T6483] loop0: detected capacity change from 0 to 32768
[  113.569253][ T6483] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.736085][ T6483] XFS (loop0): Ending clean mount
[  113.766350][ T6483] XFS (loop0): Quotacheck needed: Please wait.
[  113.904058][ T6483] XFS (loop0): Quotacheck: Done.
[  114.221873][ T6523] jffs2: notice: (6523) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  114.712407][ T6527] loop4: detected capacity change from 0 to 7
[  114.753232][ T6527]  loop4:
[  114.756909][ T6527] loop4: partition table partially beyond EOD, truncated
[  114.939929][ T6529] FAULT_INJECTION: forcing a failure.
[  114.939929][ T6529] name failslab, interval 1, probability 0, space 0, times 0
[  114.960907][ T6529] CPU: 0 PID: 6529 Comm: syz.2.228 Not tainted syzkaller #0
[  114.968442][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  114.978538][ T6529] Call Trace:
[  114.981854][ T6529]  <TASK>
[  114.984810][ T6529]  dump_stack_lvl+0x18c/0x250
[  114.989540][ T6529]  ? show_regs_print_info+0x20/0x20
[  114.994964][ T6529]  ? load_image+0x420/0x420
[  114.999532][ T6529]  ? __might_sleep+0xe0/0xe0
[  115.004176][ T6529]  ? __lock_acquire+0x7eb0/0x7eb0
[  115.009242][ T6529]  should_fail_ex+0x394/0x4c0
[  115.014074][ T6529]  should_failslab+0x9/0x20
[  115.018689][ T6529]  slab_pre_alloc_hook+0x59/0x300
[  115.024181][ T6529]  ? __rwlock_init+0x150/0x150
[  115.029000][ T6529]  kmem_cache_alloc+0x5a/0x2c0
[  115.033894][ T6529]  ? key_alloc+0x306/0x1030
[  115.038510][ T6529]  key_alloc+0x306/0x1030
[  115.042891][ T6529]  keyring_alloc+0x45/0xb0
[  115.047345][ T6529]  call_sbin_request_key+0x336/0xbf0
[  115.052665][ T6529]  ? request_key_auth_free_preparse+0x9/0x10
[  115.058689][ T6529]  ? request_key_rcu+0x2f0/0x2f0
[  115.063680][ T6529]  ? request_key_auth_rcu_disposal+0x20/0x20
[  115.069676][ T6529]  ? up_write+0x1be/0x410
[  115.074164][ T6529]  request_key_and_link+0xe2a/0x1450
[  115.079546][ T6529]  ? request_key_and_link+0x2b2/0x1450
[  115.085048][ T6529]  ? complete_request_key+0xa0/0xa0
[  115.090283][ T6529]  ? __might_sleep+0xe0/0xe0
[  115.095086][ T6529]  ? restrict_link_reject+0x10/0x10
[  115.100312][ T6529]  ? keyring_search_rcu+0x280/0x280
[  115.105531][ T6529]  ? down_read+0x1ac/0x2e0
[  115.109959][ T6529]  __se_sys_request_key+0x297/0x350
[  115.115353][ T6529]  ? __x64_sys_request_key+0xb0/0xb0
[  115.120658][ T6529]  ? lockdep_hardirqs_on+0x98/0x150
[  115.125862][ T6529]  do_syscall_64+0x55/0xb0
[  115.130309][ T6529]  ? clear_bhb_loop+0x40/0x90
[  115.135036][ T6529]  ? clear_bhb_loop+0x40/0x90
[  115.139824][ T6529]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.145771][ T6529] RIP: 0033:0x7f485339e199
[  115.150221][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.170332][ T6529] RSP: 002b:00007f485423c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  115.178795][ T6529] RAX: ffffffffffffffda RBX: 00007f4853625fa0 RCX: 00007f485339e199
[  115.186819][ T6529] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[  115.194820][ T6529] RBP: 00007f48534350b8 R08: 0000000000000000 R09: 0000000000000000
[  115.202819][ T6529] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[  115.210818][ T6529] R13: 00007f4853626038 R14: 00007f4853625fa0 R15: 00007fffe6c25e38
[  115.218848][ T6529]  </TASK>
[  115.264426][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.423160][ T6534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.237'.
[  115.803633][ T3527] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.937791][ T3527] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.040802][ T3527] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.162301][ T3527] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.550134][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  116.562629][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  116.579762][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  116.612269][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  116.636834][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  116.647904][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  117.755202][ T6551] chnl_net:caif_netlink_parms(): no params data found
[  118.386883][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.423311][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.438972][ T6551] bridge_slave_0: entered allmulticast mode
[  118.446830][ T6551] bridge_slave_0: entered promiscuous mode
[  118.505790][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.530081][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.547627][ T6551] bridge_slave_1: entered allmulticast mode
[  118.564568][ T6551] bridge_slave_1: entered promiscuous mode
[  118.626694][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.644270][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.768765][ T5087] Bluetooth: hci3: command tx timeout
[  118.939673][ T6551] team0: Port device team_slave_0 added
[  118.957862][ T6551] team0: Port device team_slave_1 added
[  119.314008][ T3527] hsr_slave_0: left promiscuous mode
[  119.338122][ T3527] hsr_slave_1: left promiscuous mode
[  119.354245][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.365916][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.381809][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.394803][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.416445][ T3527] bridge_slave_1: left allmulticast mode
[  119.423476][ T3527] bridge_slave_1: left promiscuous mode
[  119.436384][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.458948][ T3527] bridge_slave_0: left allmulticast mode
[  119.465431][ T3527] bridge_slave_0: left promiscuous mode
[  119.477039][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.528563][ T3527] veth1_macvtap: left promiscuous mode
[  119.540174][ T3527] veth0_macvtap: left promiscuous mode
[  119.548509][ T3527] veth1_vlan: left promiscuous mode
[  119.556176][ T3527] veth0_vlan: left promiscuous mode
[  119.568705][ T5761] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  119.781118][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.796938][ T5761] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  119.808061][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.872727][ T5761] usb 4-1: config 0 descriptor??
[  120.092151][ T5761] usbhid 4-1:0.0: can't add hid device: -71
[  120.100058][ T5761] usbhid: probe of 4-1:0.0 failed with error -71
[  120.114844][ T5761] usb 4-1: USB disconnect, device number 4
[  120.704503][ T3527] team0 (unregistering): Port device team_slave_1 removed
[  120.718617][ T5761] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  120.788644][ T3527] team0 (unregistering): Port device team_slave_0 removed
[  120.853395][ T5087] Bluetooth: hci3: command tx timeout
[  120.867525][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.924212][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.946142][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.962602][ T5761] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  120.973876][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.005253][ T5761] usb 4-1: config 0 descriptor??
[  121.435095][ T3527] bond0 (unregistering): Released all slaves
[  121.524336][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.538644][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.565101][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.587937][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.608644][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.668702][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.845906][ T6551] hsr_slave_0: entered promiscuous mode
[  121.857589][ T6551] hsr_slave_1: entered promiscuous mode
[  121.870307][ T5761] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[  121.892326][ T5761] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[  121.896832][ T6551] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.931329][ T6551] Cannot create hsr debugfs directory
[  122.276463][ T6369] usb 4-1: USB disconnect, device number 5
[  122.276597][    C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  122.548175][ T6551] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  122.567037][ T6551] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  122.577862][ T6551] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  122.590223][ T6551] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  122.708201][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.739364][ T6551] 8021q: adding VLAN 0 to HW filter on device team0
[  122.755342][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.762573][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.780799][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.788072][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.928758][ T5087] Bluetooth: hci3: command tx timeout
[  123.003165][ T6681] FAULT_INJECTION: forcing a failure.
[  123.003165][ T6681] name failslab, interval 1, probability 0, space 0, times 0
[  123.053382][ T6681] CPU: 0 PID: 6681 Comm: syz.0.262 Not tainted syzkaller #0
[  123.060765][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  123.070855][ T6681] Call Trace:
[  123.074181][ T6681]  <TASK>
[  123.077151][ T6681]  dump_stack_lvl+0x18c/0x250
[  123.081891][ T6681]  ? show_regs_print_info+0x20/0x20
[  123.087169][ T6681]  ? load_image+0x420/0x420
[  123.091722][ T6681]  ? __might_sleep+0xe0/0xe0
[  123.096361][ T6681]  ? __lock_acquire+0x7eb0/0x7eb0
[  123.101441][ T6681]  should_fail_ex+0x394/0x4c0
[  123.106180][ T6681]  should_failslab+0x9/0x20
[  123.110732][ T6681]  slab_pre_alloc_hook+0x59/0x300
[  123.115812][ T6681]  kmem_cache_alloc+0x5a/0x2c0
[  123.120638][ T6681]  ? posix_lock_inode+0x246/0x3270
[  123.125811][ T6681]  posix_lock_inode+0x246/0x3270
[  123.130888][ T6681]  ? aa_path_link+0xf80/0xf80
[  123.135612][ T6681]  ? lockdep_softirqs_off+0x440/0x440
[  123.141044][ T6681]  ? slab_post_alloc_hook+0x86/0x4d0
[  123.146371][ T6681]  ? end_current_label_crit_section+0x149/0x170
[  123.152691][ T6681]  ? posix_lock_file+0x50/0x50
[  123.157509][ T6681]  ? bpf_lsm_file_lock+0x9/0x10
[  123.162629][ T6681]  fcntl_setlk+0x9c0/0x1070
[  123.167191][ T6681]  ? vfs_lock_file+0x110/0x110
[  123.172008][ T6681]  ? __might_fault+0xaa/0x120
[  123.176732][ T6681]  ? __might_fault+0xc6/0x120
[  123.181449][ T6681]  ? __might_fault+0xaa/0x120
[  123.186172][ T6681]  do_fcntl+0x88e/0x14a0
[  123.190470][ T6681]  ? kill_fasync+0x4b0/0x4b0
[  123.195127][ T6681]  ? __fget_files+0x28/0x460
[  123.199764][ T6681]  ? __fget_files+0x3fc/0x460
[  123.204497][ T6681]  ? tomoyo_file_fcntl+0x7b/0x220
[  123.209558][ T6681]  ? bpf_lsm_file_fcntl+0x9/0x10
[  123.214664][ T6681]  ? security_file_fcntl+0x80/0xa0
[  123.219823][ T6681]  __se_sys_fcntl+0xc9/0x1a0
[  123.224456][ T6681]  do_syscall_64+0x55/0xb0
[  123.228927][ T6681]  ? clear_bhb_loop+0x40/0x90
[  123.233640][ T6681]  ? clear_bhb_loop+0x40/0x90
[  123.238353][ T6681]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  123.244301][ T6681] RIP: 0033:0x7f02e3f9e199
[  123.248845][ T6681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.268580][ T6681] RSP: 002b:00007f02e4e63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  123.277137][ T6681] RAX: ffffffffffffffda RBX: 00007f02e4225fa0 RCX: 00007f02e3f9e199
[  123.285174][ T6681] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003
[  123.293182][ T6681] RBP: 00007f02e40350b8 R08: 0000000000000000 R09: 0000000000000000
[  123.301189][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.309189][ T6681] R13: 00007f02e4226038 R14: 00007f02e4225fa0 R15: 00007ffeba00fa08
[  123.317215][ T6681]  </TASK>
[  123.746815][ T3527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.871165][ T3527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.951593][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.061197][ T3527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.197572][ T3527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.361625][ T6714] binder: 6713:6714 ioctl c0306201 200000000080 returned -14
[  124.401790][ T6714] binder: 6713:6714 ioctl c0306201 2000000003c0 returned -14
[  124.728122][ T5761] smpboot: CPU 1 is now offline
[  124.926525][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.938842][ T5781] Bluetooth: hci3: command tx timeout
[  124.945490][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.953805][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.962072][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.969832][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  124.977192][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  125.198261][ T6551] veth0_vlan: entered promiscuous mode
[  125.382305][ T6551] veth1_vlan: entered promiscuous mode
[  125.610904][ T6742] kvm: pic: single mode not supported
[  125.626025][ T6551] veth0_macvtap: entered promiscuous mode
[  125.737349][ T6551] veth1_macvtap: entered promiscuous mode
[  125.890551][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.940233][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.960268][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.979461][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.999246][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.019707][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.043355][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.114138][ T6729] chnl_net:caif_netlink_parms(): no params data found
[  126.161078][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.203572][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.231372][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.271636][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.299867][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.330773][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.370300][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.575877][ T3527] hsr_slave_0: left promiscuous mode
[  126.622020][ T3527] hsr_slave_1: left promiscuous mode
[  126.644170][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.668655][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.686593][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.713210][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.739164][ T3527] bridge_slave_1: left allmulticast mode
[  126.763321][ T3527] bridge_slave_1: left promiscuous mode
[  126.778815][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.802291][ T3527] bridge_slave_0: left allmulticast mode
[  126.828689][ T3527] bridge_slave_0: left promiscuous mode
[  126.843281][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.913691][ T3527] veth1_macvtap: left promiscuous mode
[  126.934851][ T3527] veth0_macvtap: left promiscuous mode
[  126.954065][ T3527] veth1_vlan: left promiscuous mode
[  126.961423][ T6776] loop0: detected capacity change from 0 to 128
[  126.976455][ T3527] veth0_vlan: left promiscuous mode
[  127.010442][ T5781] Bluetooth: hci0: command tx timeout
[  127.048074][ T6776] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  127.094461][ T6776] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.297560][ T5789] udevd[5789]: incorrect ext4 checksum on /dev/loop0
[  127.413646][ T6776] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz.0.279: No space for directory leaf checksum. Please run e2fsck -D.
[  127.582510][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.196851][ T3527] team0 (unregistering): Port device team_slave_1 removed
[  128.271999][ T3527] team0 (unregistering): Port device team_slave_0 removed
[  128.351623][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.440842][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.878856][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88805db3f000: rx timeout, send abort
[  128.897191][ T3527] bond0 (unregistering): Released all slaves
[  128.978024][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'.
[  129.076550][ T6797] overlayfs: failed to clone upperpath
[  129.087370][ T6797] overlayfs: failed to clone upperpath
[  129.094226][ T5781] Bluetooth: hci0: command tx timeout
[  129.123948][ T6551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.142331][ T6551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.162624][ T6551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.181867][ T6551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.462080][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.518242][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.547429][ T6729] bridge_slave_0: entered allmulticast mode
[  129.602288][ T6729] bridge_slave_0: entered promiscuous mode
[  129.625495][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.659709][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.695859][ T6729] bridge_slave_1: entered allmulticast mode
[  129.725793][ T6729] bridge_slave_1: entered promiscuous mode
[  129.817086][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.878919][ T3242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.886783][ T3242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.900174][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.062205][ T6729] team0: Port device team_slave_0 added
[  130.082686][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.104004][ T6729] team0: Port device team_slave_1 added
[  130.114866][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.206002][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.219188][ T5822] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  130.245493][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.305805][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.341984][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.382360][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.453062][ T5822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  130.485085][ T6831] loop4: detected capacity change from 0 to 164
[  130.498813][ T5822] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  130.512007][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.550371][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.566335][ T5789] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  130.592858][ T6831] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.793109][ T6729] hsr_slave_0: entered promiscuous mode
[  130.875667][ T6729] hsr_slave_1: entered promiscuous mode
[  130.900535][ T5822] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[  130.937118][ T6729] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.976807][ T6729] Cannot create hsr debugfs directory
[  130.986736][ T5822] wwan wwan0: port wwan0qmi0 attached
[  131.168870][ T5781] Bluetooth: hci0: command tx timeout
[  131.277447][ T5822] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, c2:87:6f:e3:59:f4
[  131.394676][ T5822] usb 1-1: USB disconnect, device number 4
[  131.422831][ T5822] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[  131.590466][ T5822] wwan wwan0: port wwan0qmi0 disconnected
[  131.802700][ T6729] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  131.824797][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  131.841602][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  131.890009][ T6729] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  131.941976][ T6729] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  132.003978][ T6729] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  132.287900][ T6729] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.375528][ T6729] 8021q: adding VLAN 0 to HW filter on device team0
[  132.407489][ T3242] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.414668][ T3242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.484766][ T3242] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.492617][ T3242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.841851][ T6875] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  133.203265][ T6729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.250938][ T5781] Bluetooth: hci0: command tx timeout
[  133.933640][ T6729] veth0_vlan: entered promiscuous mode
[  133.976949][ T6729] veth1_vlan: entered promiscuous mode
[  134.069763][ T6729] veth0_macvtap: entered promiscuous mode
[  134.124459][ T6729] veth1_macvtap: entered promiscuous mode
[  134.201993][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.250322][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.290785][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.322499][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.353643][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.395321][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.433948][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.494662][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.531000][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.569071][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.605613][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.642233][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.674822][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.714022][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.759785][ T6729] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.814617][ T6729] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.841075][ T6729] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.881187][ T6729] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.985172][ T6938] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  135.214728][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.233026][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.293176][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.325747][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.869882][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  136.046576][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.317'.
[  136.086428][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  136.139759][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  136.179142][ T6972] syzkaller0: entered promiscuous mode
[  136.184670][ T6972] syzkaller0: entered allmulticast mode
[  136.210981][    T8] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  136.244936][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  136.263783][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.319'.
[  136.285105][    T8] usb 5-1: Product: syz
[  136.335037][    T8] usb 5-1: Manufacturer: syz
[  136.357018][    T8] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  136.547794][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[  137.134057][ T7002] loop5: detected capacity change from 0 to 512
[  137.153466][ T7004] loop0: detected capacity change from 0 to 8
[  137.165635][ T7002] EXT4-fs: Ignoring removed nobh option
[  137.248992][ T7002] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  137.434920][ T7002] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #3: comm syz.5.327: corrupted inode contents
[  137.513831][ T7002] EXT4-fs (loop5): Remounting filesystem read-only
[  137.565320][ T7002] Quota error (device loop5): write_blk: dquota write failed
[  137.605854][ T7002] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota
[  137.651600][ T7002] EXT4-fs (loop5): 1 truncate cleaned up
[  137.678436][ T7002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.744290][ T7002] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.132927][ T6729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.584802][    T8] usb 5-1: Moschip 7840/7820 USB Serial Driver converter now attached to ttyUSB0
[  138.666853][    T8] usb 5-1: USB disconnect, device number 2
[  138.738401][    T8] mos7840 ttyUSB0: Moschip 7840/7820 USB Serial Driver converter now disconnected from ttyUSB0
[  138.918033][    T8] mos7840 5-1:1.0: device disconnected
[  139.331578][ T7046] binder: 7044:7046 ioctl c0306201 2000000002c0 returned -14
[  140.338663][ T5761] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  140.550551][ T5761] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30
[  140.618687][ T5761] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  140.721344][ T5761] usb 1-1: config 1 interface 0 has no altsetting 0
[  140.784839][ T5761] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40
[  140.841405][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.905664][ T5761] usb 1-1: Product: syz
[  140.933933][ T5761] usb 1-1: Manufacturer: syz
[  140.972404][ T5761] usb 1-1: SerialNumber: syz
[  141.463659][ T5761] usbhid 1-1:1.0: can't add hid device: -71
[  141.492536][ T5761] usbhid: probe of 1-1:1.0 failed with error -71
[  141.553979][ T5761] usb 1-1: USB disconnect, device number 5
[  142.260782][ T7116] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[  144.311989][ T7145] binder: BINDER_SET_CONTEXT_MGR already set
[  144.362075][ T7145] binder: 7144:7145 ioctl 4018620d 200000004a80 returned -16
[  144.444375][ T7155] binder: BINDER_SET_CONTEXT_MGR already set
[  144.479246][ T7155] binder: 7154:7155 ioctl 4018620d 200000004a80 returned -16
[  144.536728][ T7157] xt_hashlimit: max too large, truncated to 1048576
[  144.663263][ T7157] xt_hashlimit: size too large, truncated to 1048576
[  144.751829][ T7157] xt_NFQUEUE: number of queues (65529) out of range (got 65536)
[  147.497497][ T7200] loop4: detected capacity change from 0 to 1024
[  147.943215][ T7200] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  148.060684][ T7200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.408104][ T6551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.864186][ T7224] loop0: detected capacity change from 0 to 1024
[  152.047067][ T7259] binder: 7256:7259 ioctl c0306201 200000000680 returned -14
[  152.112358][ T7262] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  152.223579][ T7267] iommufd_mock iommufd_mock2: Adding to iommu group 1
[  155.378718][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  155.520501][ T7326] syzkaller0: entered promiscuous mode
[  155.537964][ T7326] syzkaller0: entered allmulticast mode
[  155.578975][ T5822] usb 6-1: Using ep0 maxpacket: 32
[  155.616091][ T5822] usb 6-1: config 0 has no interfaces?
[  155.631432][ T5822] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  155.652330][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.679944][ T5822] usb 6-1: Product: syz
[  155.691341][ T5822] usb 6-1: Manufacturer: syz
[  155.707956][ T5822] usb 6-1: SerialNumber: syz
[  155.726908][ T5822] usb 6-1: config 0 descriptor??
[  155.944074][ T7336] kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[  156.032825][ T7336] kvm: requested 79619 ns i8254 timer period limited to 200000 ns
[  156.075501][ T7336] kvm: requested 55314 ns i8254 timer period limited to 200000 ns
[  156.114835][ T7336] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  157.070681][ T7362] loop0: detected capacity change from 0 to 512
[  157.144311][ T7362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.204436][ T7362] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.372856][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.553662][ T7375] loop0: detected capacity change from 0 to 128
[  157.696362][ T7375] syz.0.398: attempt to access beyond end of device
[  157.696362][ T7375] loop0: rw=2049, sector=145, nr_sectors = 79 limit=128
[  157.772724][ T7381] syz.0.398: attempt to access beyond end of device
[  157.772724][ T7381] loop0: rw=2049, sector=145, nr_sectors = 79 limit=128
[  158.193351][ T5761] usb 6-1: USB disconnect, device number 2
[  158.708948][ T5761] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  158.828901][ T5822] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  158.923714][ T5761] usb 6-1: unable to get BOS descriptor or descriptor too short
[  158.952048][ T5761] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 28960, setting to 8
[  159.002736][ T5761] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt
[  159.045616][ T5761] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  159.065529][ T5822] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  159.101506][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.122310][ T5761] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 40705, setting to 8
[  159.198949][ T5761] usb 6-1: string descriptor 0 read error: -22
[  159.222684][ T5761] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40
[  159.276900][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.369226][ T7398] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  159.376944][ T7398] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  159.438401][ T5822] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 6a:5b:f0:8a:c3:a3
[  159.473085][ T7398] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  159.526543][ T5761] cdc_ether: probe of 6-1:1.0 failed with error -22
[  159.844034][ T7398] loop5: detected capacity change from 0 to 256
[  160.069895][ T5761] usb 6-1: USB disconnect, device number 3
[  160.577143][ T7410] net1080 1-1:1.0 usb0: port B, peer disconnected
[  160.846596][ T7449] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.861576][ T5822] usb 1-1: USB disconnect, device number 6
[  160.890938][ T5822] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT
[  161.013502][ T7473] loop5: detected capacity change from 0 to 512
[  161.101552][ T7473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.190139][ T7473] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.747986][ T6729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.770643][ T7489] FAULT_INJECTION: forcing a failure.
[  161.770643][ T7489] name failslab, interval 1, probability 0, space 0, times 0
[  161.874423][ T7489] CPU: 0 PID: 7489 Comm: syz.0.415 Not tainted syzkaller #0
[  161.882723][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  161.892783][ T7489] Call Trace:
[  161.896070][ T7489]  <TASK>
[  161.898991][ T7489]  dump_stack_lvl+0x18c/0x250
[  161.903670][ T7489]  ? show_regs_print_info+0x20/0x20
[  161.908878][ T7489]  ? load_image+0x420/0x420
[  161.913479][ T7489]  ? __might_sleep+0xe0/0xe0
[  161.918121][ T7489]  ? __lock_acquire+0x7eb0/0x7eb0
[  161.923173][ T7489]  should_fail_ex+0x394/0x4c0
[  161.927954][ T7489]  should_failslab+0x9/0x20
[  161.932459][ T7489]  slab_pre_alloc_hook+0x59/0x300
[  161.937510][ T7489]  ? x509_cert_parse+0xfe/0x7b0
[  161.942573][ T7489]  __kmem_cache_alloc_node+0x53/0x250
[  161.947981][ T7489]  ? x509_cert_parse+0xfe/0x7b0
[  161.952859][ T7489]  kmalloc_trace+0x2a/0xe0
[  161.957302][ T7489]  x509_cert_parse+0xfe/0x7b0
[  161.961997][ T7489]  x509_key_preparse+0x64/0x6c0
[  161.966840][ T7489]  ? down_read+0x1ac/0x2e0
[  161.971245][ T7489]  asymmetric_key_preparse+0xa9/0x140
[  161.976637][ T7489]  __key_create_or_update+0x3a6/0xa60
[  161.982037][ T7489]  ? key_create_or_update+0x60/0x60
[  161.987241][ T7489]  ? bpf_lsm_key_permission+0x9/0x10
[  161.992547][ T7489]  ? lookup_user_key+0xb66/0x1140
[  161.997570][ T7489]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  162.003545][ T7489]  key_create_or_update+0x42/0x60
[  162.008580][ T7489]  __se_sys_add_key+0x34f/0x410
[  162.013469][ T7489]  ? __x64_sys_add_key+0xc0/0xc0
[  162.018443][ T7489]  ? lockdep_hardirqs_on+0x98/0x150
[  162.023648][ T7489]  ? __x64_sys_add_key+0x20/0xc0
[  162.028622][ T7489]  do_syscall_64+0x55/0xb0
[  162.033038][ T7489]  ? clear_bhb_loop+0x40/0x90
[  162.037720][ T7489]  ? clear_bhb_loop+0x40/0x90
[  162.042727][ T7489]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.048652][ T7489] RIP: 0033:0x7f02e3f9e199
[  162.053063][ T7489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.072855][ T7489] RSP: 002b:00007f02e4e63028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  162.081541][ T7489] RAX: ffffffffffffffda RBX: 00007f02e4225fa0 RCX: 00007f02e3f9e199
[  162.089505][ T7489] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  162.097489][ T7489] RBP: 00007f02e40350b8 R08: ffffffffffffffff R09: 0000000000000000
[  162.105450][ T7489] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000
[  162.113426][ T7489] R13: 00007f02e4226038 R14: 00007f02e4225fa0 R15: 00007ffeba00fa08
[  162.121428][ T7489]  </TASK>
[  162.219202][ T7496] Console: switching to colour VGA+ 80x25
[  162.519462][ T7501] kvm: kvm [7500]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[  165.142165][ T7537] syzkaller0: entered promiscuous mode
[  165.147706][ T7537] syzkaller0: entered allmulticast mode
[  165.232842][ T7537] tipc: Started in network mode
[  165.237932][ T7537] tipc: Node identity 663bb866d3fc, cluster identity 4711
[  165.308707][ T7537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.517827][ T7536] tipc: Resetting bearer <eth:syzkaller0>
[  167.337931][ T7548] sched: RT throttling activated
[  169.378407][ T7536] tipc: Disabling bearer <eth:syzkaller0>
[  169.611288][ T5820] tipc: Node number set to 3049764966
[  170.705550][ T7582] loop5: detected capacity change from 0 to 1024
[  170.874960][ T7585] syzkaller0: entered promiscuous mode
[  170.906959][ T7585] syzkaller0: entered allmulticast mode
[  172.043170][ T7624] loop5: detected capacity change from 0 to 128
[  172.138022][ T7627] fuse: Unknown parameter ''
[  172.446343][ T7633] syzkaller0: entered promiscuous mode
[  172.475810][ T7633] syzkaller0: entered allmulticast mode
[  172.541135][ T7633] loop0: detected capacity change from 0 to 256
[  176.822222][ T7704] input: syz0 as /devices/virtual/input/input6
[  182.945125][ T7747] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.954529][ T7747] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.963297][ T7747] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.972164][ T7747] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.142915][ T7747] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  188.475128][ T7780] syzkaller0: entered promiscuous mode
[  188.506753][ T7780] syzkaller0: entered allmulticast mode
[  188.572446][ T7784] Bluetooth: MGMT ver 1.22
[  188.592319][ T7784] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[  191.019258][ T7812] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  193.619942][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'.
[  194.671521][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.486'.
[  194.732381][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  194.738837][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  194.874122][ T5821] IPVS: starting estimator thread 0...
[  195.020189][ T7870] IPVS: using max 34 ests per chain, 81600 per kthread
[  198.973093][ T7903] tipc: Started in network mode
[  198.978038][ T7903] tipc: Node identity 92100eee790f, cluster identity 4711
[  199.048997][ T7903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.087577][ T7908] syzkaller0: entered promiscuous mode
[  199.130173][ T7908] syzkaller0: entered allmulticast mode
[  199.267097][ T7911] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) !
[  199.322692][ T7908] tipc: Resetting bearer <eth:syzkaller0>
[  200.614402][ T7900] tipc: Resetting bearer <eth:syzkaller0>
[  200.944538][ T7900] tipc: Disabling bearer <eth:syzkaller0>
[  201.016029][ T5820] tipc: Node number set to 3944681198
[  201.230656][ T7925] syzkaller0: entered promiscuous mode
[  201.409346][ T7925] syzkaller0: entered allmulticast mode
[  202.454470][ T5780] Bluetooth: hci2: command 0x0406 tx timeout
[  202.460602][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  207.588134][ T7978] kvm: requested 73752 ns i8254 timer period limited to 200000 ns
[  207.842500][ T7978] kvm: requested 79619 ns i8254 timer period limited to 200000 ns
[  207.871549][ T7978] kvm: requested 185219 ns i8254 timer period limited to 200000 ns
[  207.899534][ T7978] kvm: requested 181028 ns i8254 timer period limited to 200000 ns
[  207.926949][ T7978] kvm: requested 20952 ns i8254 timer period limited to 200000 ns
[  207.968348][ T7978] kvm: requested 129904 ns i8254 timer period limited to 200000 ns
[  207.997936][ T7978] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[  208.026324][ T7978] kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[  208.050813][ T7978] kvm: requested 195276 ns i8254 timer period limited to 200000 ns
[  214.662288][ T8001] loop5: detected capacity change from 0 to 32768
[  214.926470][ T8001] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.515 (8001)
[  215.095487][ T8001] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  215.153061][ T8001] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  215.183200][ T8001] BTRFS info (device loop5): setting nodatacow, compression disabled
[  215.218100][ T8001] BTRFS info (device loop5): turning on flush-on-commit
[  215.260867][ T8001] BTRFS info (device loop5): force clearing of disk cache
[  215.295197][ T8001] BTRFS info (device loop5): turning on sync discard
[  215.399623][ T8001] BTRFS info (device loop5): turning off barriers
[  215.406124][ T8001] BTRFS info (device loop5): use no compression
[  215.466829][ T8001] BTRFS info (device loop5): disabling free space tree
[  215.501864][ T8001] BTRFS info (device loop5): enabling ssd optimizations
[  215.509804][ T8021] loop0: detected capacity change from 0 to 512
[  215.542235][ T8021] ext4: Unknown parameter 'smackfshat'
[  215.555842][ T8001] BTRFS info (device loop5): using spread ssd allocation scheme
[  215.636847][ T8018] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  215.658872][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  215.676476][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  215.683689][ T8001] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  215.686225][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  215.705981][ T8001] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  215.706562][ T8001] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  215.724713][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  215.748929][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  215.758926][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  215.849498][ T8001] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  215.849943][ T8001] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  215.906749][ T8001] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  215.976174][ T8001] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  216.042233][ T8001] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  216.068609][ T5821] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  216.119792][ T8001] BTRFS error (device loop5): open_ctree failed: -12
[  216.370596][ T5821] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  216.425536][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.503083][ T8043] hub 8-0:1.0: USB hub found
[  216.510089][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.550637][ T8043] hub 8-0:1.0: 1 port detected
[  216.567728][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  216.666492][ T5821] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  216.712131][ T5821] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  216.757100][ T5821] usb 1-1: Manufacturer: syz
[  216.795323][ T5821] usb 1-1: config 0 descriptor??
[  217.262362][ T5821] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  217.310195][ T5821] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[  217.406239][ T5821] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  217.808810][ T5781] Bluetooth: hci4: command tx timeout
[  219.888730][ T5781] Bluetooth: hci4: command tx timeout
[  220.185875][ T5820] usb 1-1: USB disconnect, device number 7
[  221.968585][ T5781] Bluetooth: hci4: command tx timeout
[  224.048596][ T5781] Bluetooth: hci4: command tx timeout
[  224.180405][ T7981] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  224.449326][ T5087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  224.469703][ T5087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  224.488791][ T5087] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  224.496436][ T5087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  224.511844][ T5087] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  224.528715][ T5087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  226.608575][ T5781] Bluetooth: hci5: command tx timeout
[  226.827731][ T8022] chnl_net:caif_netlink_parms(): no params data found
[  227.002992][ T8094] loop0: detected capacity change from 0 to 512
[  227.022306][ T8069] chnl_net:caif_netlink_parms(): no params data found
[  227.185217][ T8094] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  227.530442][ T8098] loop5: detected capacity change from 0 to 128
[  227.537568][ T8098] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  228.253618][ T8098] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  228.332973][ T8094] EXT4-fs (loop0): 1 truncate cleaned up
[  228.375821][ T8094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.501310][ T1146] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  228.723549][ T5781] Bluetooth: hci5: command tx timeout
[  228.746010][ T1000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.001251][ T1000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.194826][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.297351][ T1000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.355259][ T1000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.768626][ T5781] Bluetooth: hci5: command tx timeout
[  231.011675][ T1000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.698050][ T1000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.852941][ T5781] Bluetooth: hci5: command tx timeout
[  235.113925][ T1000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  235.188654][ T1000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.261113][ T8142] loop0: detected capacity change from 0 to 256
[  235.307608][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.346224][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.391879][ T8142] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  235.410466][ T8022] bridge_slave_0: entered allmulticast mode
[  235.449187][ T8022] bridge_slave_0: entered promiscuous mode
[  235.513842][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.576930][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.748899][ T8022] bridge_slave_1: entered allmulticast mode
[  235.769883][ T8022] bridge_slave_1: entered promiscuous mode
[  236.006720][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.028986][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.056066][ T8069] bridge_slave_0: entered allmulticast mode
[  236.085176][ T8069] bridge_slave_0: entered promiscuous mode
[  236.306917][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.338734][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.362452][ T8153] loop0: detected capacity change from 0 to 512
[  236.372185][ T8069] bridge_slave_1: entered allmulticast mode
[  236.400199][ T8069] bridge_slave_1: entered promiscuous mode
[  236.406971][ T8153] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  236.462156][ T8153] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  236.510957][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.525875][ T8153] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  236.547828][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.572358][ T8153] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  236.591799][ T8153] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e02c, mo2=0000]
[  236.623895][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.638855][ T8153] EXT4-fs (loop0): orphan cleanup on readonly fs
[  236.657090][ T8153] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.539: bg 0: block 34: padding at end of block bitmap is not set
[  236.680560][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.762476][ T8153] EXT4-fs (loop0): Remounting filesystem read-only
[  236.802618][ T8153] Quota error (device loop0): write_blk: dquota write failed
[  236.834293][ T8022] team0: Port device team_slave_0 added
[  236.841389][ T8153] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  237.019369][ T8069] team0: Port device team_slave_0 added
[  237.026876][ T8153] EXT4-fs (loop0): 1 truncate cleaned up
[  237.045164][ T8153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  237.274249][ T8069] team0: Port device team_slave_1 added
[  237.294582][ T8022] team0: Port device team_slave_1 added
[  237.444300][ T8153] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.624438][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.650947][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.908979][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.953589][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.981871][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.113622][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.277693][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.323530][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.501111][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.593569][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.635600][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.743003][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.031747][ T8022] hsr_slave_0: entered promiscuous mode
[  240.069156][ T8022] hsr_slave_1: entered promiscuous mode
[  240.085502][ T8022] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.131010][ T8022] Cannot create hsr debugfs directory
[  240.300258][ T8069] hsr_slave_0: entered promiscuous mode
[  240.340098][ T8069] hsr_slave_1: entered promiscuous mode
[  240.379824][ T8069] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.428151][ T8069] Cannot create hsr debugfs directory
[  242.905551][ T1000] hsr_slave_0: left promiscuous mode
[  242.943922][ T1000] hsr_slave_1: left promiscuous mode
[  242.979601][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.987053][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.031923][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.054473][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.076375][ T1000] bridge_slave_1: left allmulticast mode
[  243.092587][ T1000] bridge_slave_1: left promiscuous mode
[  244.328683][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.357087][ T1000] bridge_slave_0: left allmulticast mode
[  244.383729][ T1000] bridge_slave_0: left promiscuous mode
[  244.470056][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.610032][ T1000] veth1_macvtap: left promiscuous mode
[  244.615585][ T1000] veth0_macvtap: left promiscuous mode
[  244.668583][ T1000] veth1_vlan: left promiscuous mode
[  244.673920][ T1000] veth0_vlan: left promiscuous mode
[  245.583634][ T8228] input: syz1 as /devices/virtual/input/input7
[  246.137742][ T1000] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  247.344295][    T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  247.531282][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  247.562385][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.587539][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  247.613007][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.735609][    T9] usb 6-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  247.763480][    T9] usb 6-1: No streaming interface found for terminal 2.
[  247.811611][ T5781] Bluetooth: hci0: command 0x0406 tx timeout
[  248.754148][ T1000] team0 (unregistering): Port device team_slave_1 removed
[  248.779709][    T9] usb 6-1: USB disconnect, device number 4
[  248.912811][ T1000] team0 (unregistering): Port device team_slave_0 removed
[  249.011927][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.132277][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.725822][ T1000] bond0 (unregistering): Released all slaves
[  250.873795][ T8022] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  250.943795][ T8022] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  251.004805][ T8022] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  251.131269][ T8022] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  251.602149][ T1000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.806032][ T8069] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  252.124711][ T1000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.180887][ T8069] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  252.217983][ T8069] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  252.312884][ T1000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.363802][ T8069] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  252.534786][ T1000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.535046][ T8297] loop5: detected capacity change from 0 to 1024
[  253.643794][ T8297] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  253.681387][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.749638][ T8297] EXT4-fs (loop5): unsupported descriptor size 30438
[  253.873428][ T8022] 8021q: adding VLAN 0 to HW filter on device team0
[  254.974061][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.981247][ T7030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.022696][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.030012][ T7030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.106544][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.151895][ T8307] netlink: 'syz.5.561': attribute type 4 has an invalid length.
[  255.592302][ T8069] 8021q: adding VLAN 0 to HW filter on device team0
[  255.705362][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.712568][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.824912][ T8022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  255.864157][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.871695][ T7031] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.883733][ T8320] syzkaller0: entered promiscuous mode
[  255.903389][ T8320] syzkaller0: entered allmulticast mode
[  255.977510][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  255.984652][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  257.869657][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.298949][ T1000] hsr_slave_0: left promiscuous mode
[  258.322442][ T1000] hsr_slave_1: left promiscuous mode
[  259.258649][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.266125][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.319500][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.371138][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.399131][ T1000] bridge_slave_1: left allmulticast mode
[  259.404807][ T1000] bridge_slave_1: left promiscuous mode
[  259.454603][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.544114][ T1000] bridge_slave_0: left allmulticast mode
[  259.566318][ T1000] bridge_slave_0: left promiscuous mode
[  259.589227][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.722207][ T1000] dummy0: left allmulticast mode
[  259.727317][ T1000] dummy0: left promiscuous mode
[  259.777418][ T1000] veth1_macvtap: left promiscuous mode
[  259.811732][ T1000] veth0_macvtap: left promiscuous mode
[  259.817344][ T1000] veth1_vlan: left promiscuous mode
[  259.914116][ T1000] veth0_vlan: left promiscuous mode
[  261.229708][ T1000] team0 (unregistering): Port device macvlan2 removed
[  265.181197][ T8382] block nbd5: shutting down sockets
[  266.120042][ T1000] team0 (unregistering): Port device team_slave_1 removed
[  267.379991][ T1000] team0 (unregistering): Port device team_slave_0 removed
[  267.662003][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.924734][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.405898][ T1000] bond0 (unregistering): Released all slaves
[  268.510859][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[  268.570770][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.880410][ T1000] IPVS: stop unused estimator thread 0...
[  271.163421][ T8417] overlayfs: failed to clone upperpath
[  271.304055][ T8022] veth0_vlan: entered promiscuous mode
[  271.463064][ T8022] veth1_vlan: entered promiscuous mode
[  271.604587][ T8022] veth0_macvtap: entered promiscuous mode
[  271.656069][ T8022] veth1_macvtap: entered promiscuous mode
[  271.787860][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.854551][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.887844][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.061584][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.322617][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.387182][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.433979][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.472143][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.507627][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.544018][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.596899][ T8022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.634111][ T8022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.662617][ T8022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.674061][ T8022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.699822][ T8069] veth0_vlan: entered promiscuous mode
[  272.823870][ T8069] veth1_vlan: entered promiscuous mode
[  274.757856][ T8069] veth0_macvtap: entered promiscuous mode
[  274.837224][ T8069] veth1_macvtap: entered promiscuous mode
[  274.936029][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.058925][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.124117][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.198591][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.208443][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  275.331011][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.420280][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.508847][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.570228][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.630895][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.680766][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.741192][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.751375][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.759773][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.768091][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.776506][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.784011][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.796411][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.878671][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.919493][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.999744][ T8069] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.041255][ T8069] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.088786][ T8069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.097516][ T8069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.565731][ T1000] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.695776][ T1000] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.724955][ T7030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.764123][ T7030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.866346][ T1000] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.045346][ T1000] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.223850][ T7030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.295416][ T7030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.254910][ T5781] Bluetooth: hci1: command tx timeout
[  278.445071][ T8452] chnl_net:caif_netlink_parms(): no params data found
[  279.148833][    T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  280.222226][    T9] usb 8-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping
[  280.282008][    T9] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  280.292251][ T5781] Bluetooth: hci1: command tx timeout
[  280.336136][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.357433][    T9] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  280.380048][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.410837][    T9] usb 8-1: Manufacturer: syz
[  280.415462][    T9] usb 8-1: SerialNumber: syz
[  280.431676][ T8452] bridge_slave_0: entered allmulticast mode
[  280.461411][ T8452] bridge_slave_0: entered promiscuous mode
[  280.499765][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.506919][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.558018][ T8452] bridge_slave_1: entered allmulticast mode
[  280.579176][ T8452] bridge_slave_1: entered promiscuous mode
[  280.686858][    T9] usbhid 8-1:36.0: couldn't find an input interrupt endpoint
[  280.727639][    T9] usb 8-1: USB disconnect, device number 2
[  280.816442][ T8516] loop5: detected capacity change from 0 to 512
[  280.880448][ T8516] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  280.932750][ T8516] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  280.994385][ T8516] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  281.037000][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.079565][ T8516] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  281.100418][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.119402][ T8516] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e02c, mo2=0000]
[  281.164458][ T8516] EXT4-fs (loop5): orphan cleanup on readonly fs
[  281.212527][ T8516] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.588: bg 0: block 34: padding at end of block bitmap is not set
[  281.286212][ T8516] EXT4-fs (loop5): Remounting filesystem read-only
[  281.320540][ T8516] Quota error (device loop5): write_blk: dquota write failed
[  281.378094][ T8516] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  281.417920][ T8452] team0: Port device team_slave_0 added
[  281.428098][ T8516] EXT4-fs (loop5): 1 truncate cleaned up
[  281.457243][ T8452] team0: Port device team_slave_1 added
[  281.473241][ T8516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  282.368810][ T5087] Bluetooth: hci1: command tx timeout
[  283.041833][ T1000] hsr_slave_0: left promiscuous mode
[  283.213314][ T6729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.232024][ T1000] hsr_slave_1: left promiscuous mode
[  283.267743][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.326995][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.380934][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.417243][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.464652][ T1000] bridge_slave_1: left allmulticast mode
[  283.504568][ T1000] bridge_slave_1: left promiscuous mode
[  283.532132][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.704816][ T1000] bridge_slave_0: left allmulticast mode
[  283.733541][ T1000] bridge_slave_0: left promiscuous mode
[  284.072267][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.913793][ T8544] syz.5.595 (8544): /proc/8543/oom_adj is deprecated, please use /proc/8543/oom_score_adj instead.
[  285.030922][ T5087] Bluetooth: hci1: command tx timeout
[  285.854383][ T8548] sctp: [Deprecated]: syz.0.596 (pid 8548) Use of int in max_burst socket option.
[  285.854383][ T8548] Use struct sctp_assoc_value instead
[  286.979913][ T1000] veth1_macvtap: left promiscuous mode
[  286.985461][ T1000] veth0_macvtap: left promiscuous mode
[  287.051687][ T1000] veth1_vlan: left promiscuous mode
[  287.056996][ T1000] veth0_vlan: left promiscuous mode
[  292.656435][ T1000] team0 (unregistering): Port device team_slave_1 removed
[  292.861675][ T1000] team0 (unregistering): Port device team_slave_0 removed
[  293.039734][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.210904][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.373254][ T8584] loop7: detected capacity change from 0 to 32768
[  293.394542][ T8584] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.603 (8584)
[  293.425238][ T8584] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  293.435613][ T8584] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  293.444683][ T8584] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  293.454503][ T8584] BTRFS info (device loop7): use zstd compression, level 3
[  293.461975][ T8584] BTRFS info (device loop7): force clearing of disk cache
[  293.469181][ T8584] BTRFS info (device loop7): enabling disk space caching
[  293.476200][ T8584] BTRFS info (device loop7): disk space caching is enabled
[  294.477484][ T8584] BTRFS info (device loop7): enabling ssd optimizations
[  294.485672][ T8584] BTRFS info (device loop7): auto enabling async discard
[  294.512845][ T8584] BTRFS info (device loop7): rebuilding free space tree
[  294.569887][ T8584] BTRFS info (device loop7): disabling free space tree
[  294.577135][ T8584] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  294.587585][ T8584] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  295.467102][ T8069] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  297.846108][ T1000] bond0 (unregistering): Released all slaves
[  298.094041][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.129958][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.195484][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.604032][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.642870][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.698780][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.948954][ T8452] hsr_slave_0: entered promiscuous mode
[  302.101553][ T8452] hsr_slave_1: entered promiscuous mode
[  304.493352][ T8655] loop0: detected capacity change from 0 to 32768
[  304.546571][ T8452] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  304.629572][ T8452] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  304.692746][ T8452] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  304.762985][ T8452] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  305.178046][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.309622][ T8452] 8021q: adding VLAN 0 to HW filter on device team0
[  305.577044][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.584346][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.664307][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.671700][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.591700][ T8685] loop7: detected capacity change from 0 to 164
[  308.049965][ T8688] rock: directory entry would overflow storage
[  308.056442][ T8688] rock: sig=0x4f50, size=4, remaining=3
[  308.062233][ T8688] iso9660: Corrupted directory entry in block 5 of inode 1792
[  308.098290][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.218265][ T5820] IPVS: starting estimator thread 0...
[  309.338608][ T8711] IPVS: using max 34 ests per chain, 81600 per kthread
[  309.530328][ T8452] veth0_vlan: entered promiscuous mode
[  309.602248][ T8452] veth1_vlan: entered promiscuous mode
[  309.867754][ T8452] veth0_macvtap: entered promiscuous mode
[  309.944770][ T8452] veth1_macvtap: entered promiscuous mode
[  310.775665][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.567133][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.629892][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.598598][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.662469][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.726349][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.796805][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.892028][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.945341][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.009812][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.056703][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.114290][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.167197][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.239033][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.305004][ T8452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.355340][ T8452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.390880][ T8452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.420902][ T8452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.171051][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.216956][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.233428][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.283312][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.829877][ T8776] binder: 8775:8776 ioctl 4018620d 0 returned -22
[  317.246906][ T8774] loop6: detected capacity change from 0 to 4096
[  317.412983][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  317.429861][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  317.717781][ T8774] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512).
[  317.875162][ T8774] ntfs3: loop6: Failed to initialize $Extend/$ObjId.
[  321.653447][ T8811] mmap: syz.0.647 (8811): VmData 39628800 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  322.070179][ T8817] loop5: detected capacity change from 0 to 1024
[  322.077231][ T8817] ext2: Unknown parameter 'noacl'
[  322.131961][ T8753] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  322.243875][   T28] audit: type=1326 audit(1791224050.599:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.0.647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e3f9e199 code=0x7fc00000
[  331.055890][ T8857] loop6: detected capacity change from 0 to 512
[  331.065558][ T8857] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  331.151651][ T8857] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.657: bad orphan inode 131083
[  331.169312][ T8857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.671329][ T8452] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.246812][ T8871] loop5: detected capacity change from 0 to 32768
[  334.764481][ T8871] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  334.938798][ T8871] XFS (loop5): Ending clean mount
[  337.066897][ T6729] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  339.781150][ T8910] loop7: detected capacity change from 0 to 256
[  340.319260][ T8910] exfat: Deprecated parameter 'utf8'
[  340.336085][ T8911] loop5: detected capacity change from 0 to 256
[  340.387438][ T8911] exfat: Deprecated parameter 'utf8'
[  340.461580][ T8911] exfat: Bad value for 'uid'
[  340.466618][ T8910] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5a1fe699, utbl_chksum : 0xe619d30d)
[  342.734257][ T8923] loop5: detected capacity change from 0 to 1024
[  342.788611][ T8923] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  345.704275][ T8923] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5.
[  345.861485][ T8930] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  345.861485][ T8930] 
[  345.876052][ T8930] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  345.889172][ T8930] CIFS: Attempting to mount //127.0.0.1/share
[  345.901590][ T8930] CIFS: VFS: Error connecting to socket. Aborting operation.
[  345.909484][ T8930] CIFS: VFS: cifs_mount failed w/return code = -111
[  350.164391][ T8974] loop6: detected capacity change from 0 to 2048
[  350.235182][ T8974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  351.453212][ T5781] Bluetooth: hci5: command 0x0406 tx timeout
[  357.672910][ T9011] sctp: [Deprecated]: syz.5.687 (pid 9011) Use of int in maxseg socket option.
[  357.672910][ T9011] Use struct sctp_assoc_value instead
[  358.706165][ T9017] nvme_fabrics: unknown parameter or missing value 'trans' in ctrl creation request
[  364.294765][ T9050] loop7: detected capacity change from 0 to 32768
[  365.278833][ T9050] JBD2: Ignoring recovery information on journal
[  365.286873][ T9050] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75
[  365.295622][ T9050] JBD2: bad block at offset 32
[  365.352574][ T9050] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  366.512236][ T9064] OCFS2: ERROR (device loop7): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  366.533821][ T9064] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  366.543769][ T9064] OCFS2: File system is now read-only.
[  366.549431][ T9064] (syz.7.689,9064,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  366.558496][ T9064] (syz.7.689,9064,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  366.566574][ T9064] (syz.7.689,9064,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  366.574746][ T9064] (syz.7.689,9064,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  366.583967][ T9064] (syz.7.689,9064,0):ocfs2_write_cluster:1155 ERROR: status = -30
[  366.591868][ T9064] (syz.7.689,9064,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30
[  366.600450][ T9064] (syz.7.689,9064,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30
[  366.609291][ T9064] (syz.7.689,9064,0):ocfs2_write_begin:1909 ERROR: status = -30
[  368.187631][ T9068] program syz.6.699 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  368.396254][ T8069] ocfs2: Unmounting device (7,7) on (node local)
[  368.547875][ T9074] loop5: detected capacity change from 0 to 1024
[  368.662445][ T9074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  368.867598][ T9074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.279471][ T6729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.281421][ T9089] random: crng reseeded on system resumption
[  373.409480][ T9088] loop5: detected capacity change from 0 to 128
[  373.974652][ T9103] 9pnet_fd: p9_fd_create_unix (9103): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  374.120353][ T9104] loop6: detected capacity change from 0 to 1024
[  377.901033][ T9136] syz.0.709 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  378.854197][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  378.860917][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  379.318597][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.710'.
[  380.292708][ T9142] team0: Port device team_slave_0 removed
[  380.673739][ T9166] loop6: detected capacity change from 0 to 512
[  380.713585][ T9166] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  380.753831][ T9166] EXT4-fs (loop6): Test dummy encryption mode enabled
[  380.784846][ T9166] EXT4-fs error (device loop6): ext4_quota_enable:7140: comm syz.6.713: Bad quota inum: 2934046720, type: 1
[  380.829833][ T9166] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix.
[  380.861765][ T9166] EXT4-fs (loop6): mount failed
[  390.300352][   T28] audit: type=1326 audit(1791224118.659:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9205 comm="syz.5.721" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d3119e199 code=0x0
[  393.728812][ T5087] Bluetooth: hci1: command 0x0405 tx timeout
[  393.938624][ T9234] netlink: 64 bytes leftover after parsing attributes in process `syz.5.724'.
[  394.146570][ T9233] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  395.060585][ T9233] CIFS: Attempting to mount //127.0.0.1/share
[  396.006429][ T9233] CIFS: VFS: Error connecting to socket. Aborting operation.
[  396.066612][ T9233] CIFS: VFS: cifs_mount failed w/return code = -4
[  399.314504][ T9264] loop6: detected capacity change from 0 to 32768
[  399.459463][ T9264] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  400.459486][ T9289] mmap: syz.0.732 (9289) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  400.623957][ T8452] ocfs2: Unmounting device (7,6) on (node local)
[  401.408863][ T5781] Bluetooth: hci1: command 0x0405 tx timeout
[  405.632962][   T28] audit: type=1326 audit(1791224133.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9318 comm="syz.7.737" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd844b9e199 code=0x0
[  405.898876][ T5761] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  406.110251][ T5761] usb 7-1: not running at top speed; connect to a high speed hub
[  406.160989][ T5761] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  406.207174][ T5761] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  407.215687][ T5761] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  407.288609][ T5761] usb 7-1: Product: syz
[  407.292824][ T5761] usb 7-1: Manufacturer: syz
[  407.393541][ T5761] usb 7-1: Found UVC 1.00 device syz (225a:e1d4)
[  408.262736][ T5761] usb 7-1: No streaming interface found for terminal 2.
[  408.972365][ T5761] usb 7-1: USB disconnect, device number 2
[  409.584452][ T9359] overlayfs: conflicting options: userxattr,redirect_dir=on
[  412.511214][ T9359] gadgetfs: bound to dummy_udc driver
[  415.333786][ T9384] loop7: detected capacity change from 0 to 512
[  415.426350][ T9384] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.749: inode has both inline data and extents flags
[  415.441640][ T9384] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.749: couldn't read orphan inode 15 (err -117)
[  415.455809][ T9384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.707072][ T8069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.267692][ T9412] kAFS: unable to lookup cell 'Þ({^ú@'
[  419.161083][ T9413] input: syz0 as /devices/virtual/input/input8
[  420.219933][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.753'.
[  425.406216][ T9446] binder: 9441:9446 ioctl 4018620d 0 returned -22
[  425.414182][ T9446] binder: 9441:9446 unknown command 0
[  425.419825][ T9446] binder: 9441:9446 ioctl c0306201 200000000c00 returned -22
[  428.652192][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  428.662805][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  428.673902][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  428.682959][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  428.690763][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  428.698019][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  429.329431][ T9473] chnl_net:caif_netlink_parms(): no params data found
[  429.716514][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.801520][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.852909][ T9473] bridge_slave_0: entered allmulticast mode
[  429.902491][ T9473] bridge_slave_0: entered promiscuous mode
[  429.946340][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.995280][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.055714][ T9473] bridge_slave_1: entered allmulticast mode
[  430.104515][ T9473] bridge_slave_1: entered promiscuous mode
[  430.273451][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.380089][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.907855][ T5781] Bluetooth: hci3: command tx timeout
[  431.170723][ T9473] team0: Port device team_slave_0 added
[  431.245454][ T9473] team0: Port device team_slave_1 added
[  431.517237][ T7029] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.086257][ T5781] Bluetooth: hci3: command tx timeout
[  433.460510][ T7029] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.587057][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.650462][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.802905][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.893686][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.932751][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.082660][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.226859][ T7029] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.482634][ T7029] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.572360][ T9543] overlayfs: conflicting options: userxattr,redirect_dir=on
[  434.632092][ T9473] hsr_slave_0: entered promiscuous mode
[  434.703465][ T9473] hsr_slave_1: entered promiscuous mode
[  434.777186][ T9473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  434.810244][ T9473] Cannot create hsr debugfs directory
[  435.170730][ T5781] Bluetooth: hci3: command tx timeout
[  437.248715][ T5781] Bluetooth: hci3: command tx timeout
[  440.311974][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  440.324637][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  440.794768][ T9473] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  440.983363][ T9473] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  441.060823][ T9473] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  441.281776][ T9473] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  442.600934][ T7029] hsr_slave_0: left promiscuous mode
[  442.652089][ T7029] hsr_slave_1: left promiscuous mode
[  442.737366][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.792811][ T7029] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.885425][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.933803][ T7029] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.965943][ T7029] bridge_slave_1: left allmulticast mode
[  443.013729][ T7029] bridge_slave_1: left promiscuous mode
[  443.068913][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.128952][ T7029] bridge_slave_0: left allmulticast mode
[  443.169662][ T7029] bridge_slave_0: left promiscuous mode
[  443.200352][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.237427][ T9643] loop7: detected capacity change from 0 to 8192
[  443.386793][ T5781] Bluetooth: hci5: unexpected event for opcode 0x2042
[  443.399590][ T7029] veth1_macvtap: left promiscuous mode
[  443.434204][ T7029] veth0_macvtap: left promiscuous mode
[  443.473519][ T7029] veth1_vlan: left promiscuous mode
[  443.518215][ T7029] veth0_vlan: left promiscuous mode
[  445.738854][ T9669] loop7: detected capacity change from 0 to 8192
[  445.809176][ T5781] Bluetooth: hci5: unexpected event for opcode 0x2042
[  446.313057][ T7029] team0 (unregistering): Port device team_slave_1 removed
[  446.382765][ T7029] team0 (unregistering): Port device team_slave_0 removed
[  446.445307][ T7029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  446.525215][ T7029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.411188][ T5781] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  447.423278][ T5781] Bluetooth: hci5: Injecting HCI hardware error event
[  447.466422][ T5781] Bluetooth: hci5: hardware error 0x00
[  450.368488][ T5781] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  451.495019][ T9690] loop7: detected capacity change from 0 to 1024
[  452.752768][ T7029] bond0 (unregistering): Released all slaves
[  453.025589][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.065468][ T9473] 8021q: adding VLAN 0 to HW filter on device team0
[  454.179551][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.186719][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.637983][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.645163][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.101054][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.624133][ T9473] veth0_vlan: entered promiscuous mode
[  457.743996][ T9473] veth1_vlan: entered promiscuous mode
[  458.795277][ T9473] veth0_macvtap: entered promiscuous mode
[  458.916668][ T9473] veth1_macvtap: entered promiscuous mode
[  458.924690][    T8] IPVS: starting estimator thread 0...
[  459.003302][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.051463][ T9780] IPVS: using max 34 ests per chain, 81600 per kthread
[  459.085723][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.270754][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.517380][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.568350][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  459.620618][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.680066][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.752247][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.813985][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.870352][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.988204][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  460.048913][ T9473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  460.235467][ T9473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  460.520416][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.581826][ T9473] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.629546][ T9473] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.672990][ T9473] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.718520][ T9473] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.278092][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.567743][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.638901][ T3242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.665123][ T9803] loop5: detected capacity change from 0 to 8192
[  461.680386][ T3242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.764588][ T5781] Bluetooth: hci0: unexpected event for opcode 0x7270
[  464.533632][   T66] Bluetooth: hci1: Frame reassembly failed (-84)
[  466.539442][ T5087] Bluetooth: hci1: command 0x1003 tx timeout
[  466.546492][ T5781] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  467.582091][ T9800] IPVS: starting estimator thread 0...
[  467.698964][ T9861] IPVS: using max 34 ests per chain, 81600 per kthread
[  468.226091][ T9800] IPVS: starting estimator thread 0...
[  469.890551][ T9873] IPVS: using max 34 ests per chain, 81600 per kthread
[  481.460281][ T5781] Bluetooth: hci2: unexpected event for opcode 0x7270
[  494.671396][T10057] loop8: detected capacity change from 0 to 512
[  494.834659][T10057] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  494.911057][T10057] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  494.964100][T10057] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  495.004960][T10057] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  495.164674][T10057] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e02c, mo2=0000]
[  495.185396][T10057] EXT4-fs (loop8): orphan cleanup on readonly fs
[  495.204126][T10057] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.861: bg 0: block 34: padding at end of block bitmap is not set
[  495.454504][T10057] EXT4-fs (loop8): Remounting filesystem read-only
[  495.471986][T10057] Quota error (device loop8): write_blk: dquota write failed
[  495.487515][T10057] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  495.511377][T10057] EXT4-fs (loop8): 1 truncate cleaned up
[  495.530864][T10057] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  495.592320][ T9473] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.067518][T10087] loop8: detected capacity change from 0 to 8192
[  497.081407][T10092] ==================================================================
[  497.081420][T10092] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x4e2/0xa70
[  497.081545][T10092] Read of size 256 at addr ffff888077bf8760 by task syz.5.870/10092
[  497.081556][T10092] 
[  497.081561][T10092] CPU: 0 PID: 10092 Comm: syz.5.870 Not tainted syzkaller #0
[  497.081572][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  497.081583][T10092] Call Trace:
[  497.081590][T10092]  <TASK>
[  497.081596][T10092]  dump_stack_lvl+0x18c/0x250
[  497.081673][T10092]  ? __lock_acquire+0x7eb0/0x7eb0
[  497.081703][T10092]  ? show_regs_print_info+0x20/0x20
[  497.081718][T10092]  ? load_image+0x420/0x420
[  497.081738][T10092]  ? atomic_notifier_call_chain+0x26/0x180
[  497.081761][T10092]  ? __virt_addr_valid+0x10c/0x380
[  497.081778][T10092]  ? __virt_addr_valid+0x10c/0x380
[  497.081791][T10092]  ? __virt_addr_valid+0x10c/0x380
[  497.081805][T10092]  print_report+0xa8/0x210
[  497.081819][T10092]  ? fbcon_prepare_logo+0x4e2/0xa70
[  497.081833][T10092]  kasan_report+0x117/0x150
[  497.081863][T10092]  ? fbcon_prepare_logo+0x4e2/0xa70
[  497.081879][T10092]  kasan_check_range+0x241/0x290
[  497.081892][T10092]  ? fbcon_prepare_logo+0x4e2/0xa70
[  497.081907][T10092]  __asan_memcpy+0x29/0x70
[  497.081922][T10092]  fbcon_prepare_logo+0x4e2/0xa70
[  497.081940][T10092]  fbcon_init+0x1380/0x2460
[  497.081958][T10092]  visual_init+0x2dd/0x650
[  497.081984][T10092]  do_bind_con_driver+0x859/0x1030
[  497.082000][T10092]  ? sysfs_kf_read+0x360/0x360
[  497.082018][T10092]  store_bind+0x798/0xa20
[  497.082029][T10092]  ? sysfs_kf_read+0x360/0x360
[  497.082039][T10092]  kernfs_fop_write_iter+0x3a4/0x520
[  497.082051][T10092]  vfs_write+0x474/0x9a0
[  497.082067][T10092]  ? file_end_write+0x250/0x250
[  497.082082][T10092]  ? __fget_files+0x3fc/0x460
[  497.082102][T10092]  ? __fdget_pos+0x2a3/0x330
[  497.082115][T10092]  ? ksys_write+0x74/0x260
[  497.082129][T10092]  ksys_write+0x151/0x260
[  497.082144][T10092]  ? __ia32_sys_read+0x90/0x90
[  497.082159][T10092]  ? lockdep_hardirqs_on+0x98/0x150
[  497.082172][T10092]  do_syscall_64+0x55/0xb0
[  497.082186][T10092]  ? clear_bhb_loop+0x40/0x90
[  497.082246][T10092]  ? clear_bhb_loop+0x40/0x90
[  497.082256][T10092]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.082297][T10092] RIP: 0033:0x7f5d3119e199
[  497.082308][T10092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.082318][T10092] RSP: 002b:00007f5d320c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  497.082331][T10092] RAX: ffffffffffffffda RBX: 00007f5d31426090 RCX: 00007f5d3119e199
[  497.082339][T10092] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003
[  497.082347][T10092] RBP: 00007f5d312350b8 R08: 0000000000000000 R09: 0000000000000000
[  497.082354][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  497.082360][T10092] R13: 00007f5d31426128 R14: 00007f5d31426090 R15: 00007ffdddcf68f8
[  497.082372][T10092]  </TASK>
[  497.082376][T10092] 
[  497.082378][T10092] Allocated by task 5527:
[  497.082383][T10092]  kasan_set_track+0x4e/0x70
[  497.082396][T10092]  __kasan_slab_alloc+0x6c/0x80
[  497.082407][T10092]  slab_post_alloc_hook+0x6a/0x4d0
[  497.082415][T10092]  kmem_cache_alloc+0x17e/0x2c0
[  497.082429][T10092]  vm_area_dup+0x27/0x270
[  497.082439][T10092]  __split_vma+0x1a8/0xc20
[  497.082459][T10092]  do_vmi_align_munmap+0x310/0x16a0
[  497.082472][T10092]  do_vmi_munmap+0x252/0x2d0
[  497.082485][T10092]  mmap_region+0x8d9/0x2090
[  497.082496][T10092]  do_mmap+0x98f/0x10a0
[  497.082508][T10092]  vm_mmap_pgoff+0x1c4/0x3f0
[  497.082521][T10092]  ksys_mmap_pgoff+0x4c9/0x720
[  497.082533][T10092]  do_syscall_64+0x55/0xb0
[  497.082546][T10092]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.082560][T10092] 
[  497.082562][T10092] The buggy address belongs to the object at ffff888077bf8700
[  497.082562][T10092]  which belongs to the cache vm_area_struct of size 192
[  497.082571][T10092] The buggy address is located 96 bytes inside of
[  497.082571][T10092]  allocated 192-byte region [ffff888077bf8700, ffff888077bf87c0)
[  497.082583][T10092] 
[  497.082586][T10092] The buggy address belongs to the physical page:
[  497.082594][T10092] page:ffffea0001defe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888077bf8400 pfn:0x77bf8
[  497.082607][T10092] memcg:ffff88802675de01
[  497.082611][T10092] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  497.082621][T10092] page_type: 0xffffffff()
[  497.082634][T10092] raw: 00fff00000000800 ffff888019e5bb40 0000000000000000 dead000000000001
[  497.082650][T10092] raw: ffff888077bf8400 000000008010000b 00000001ffffffff ffff88802675de01
[  497.082655][T10092] page dumped because: kasan: bad access detected
[  497.082663][T10092] page_owner tracks the page as allocated
[  497.082667][T10092] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5527, tgid 5527 (getty), ts 49456652913, free_ts 49416895080
[  497.082685][T10092]  post_alloc_hook+0x1c1/0x200
[  497.082694][T10092]  get_page_from_freelist+0x2181/0x22a0
[  497.082704][T10092]  __alloc_pages+0x1f0/0x460
[  497.082713][T10092]  alloc_slab_page+0x5d/0x180
[  497.082723][T10092]  new_slab+0x87/0x2d0
[  497.082731][T10092]  ___slab_alloc+0xc5c/0x12f0
[  497.082739][T10092]  kmem_cache_alloc+0x109/0x2c0
[  497.082753][T10092]  vm_area_dup+0x27/0x270
[  497.082761][T10092]  __split_vma+0x1a8/0xc20
[  497.082773][T10092]  do_vmi_align_munmap+0x310/0x16a0
[  497.082787][T10092]  do_vmi_munmap+0x252/0x2d0
[  497.082799][T10092]  mmap_region+0x8d9/0x2090
[  497.082810][T10092]  do_mmap+0x98f/0x10a0
[  497.082822][T10092]  vm_mmap_pgoff+0x1c4/0x3f0
[  497.082834][T10092]  ksys_mmap_pgoff+0x4c9/0x720
[  497.082846][T10092]  do_syscall_64+0x55/0xb0
[  497.082859][T10092] page last free stack trace:
[  497.082862][T10092]  free_unref_page_prepare+0x7d7/0x8f0
[  497.082871][T10092]  free_unref_page_list+0xbe/0x860
[  497.082880][T10092]  release_pages+0x208a/0x2300
[  497.082891][T10092]  tlb_flush_mmu+0x379/0x510
[  497.082904][T10092]  tlb_finish_mmu+0xf4/0x220
[  497.082918][T10092]  exit_mmap+0x428/0xb90
[  497.082930][T10092]  __mmput+0x118/0x3a0
[  497.082939][T10092]  exit_mm+0x23f/0x340
[  497.082952][T10092]  do_exit+0x909/0x2530
[  497.082965][T10092]  do_group_exit+0x22d/0x2f0
[  497.082973][T10092]  __x64_sys_exit_group+0x3f/0x40
[  497.082981][T10092]  do_syscall_64+0x55/0xb0
[  497.082994][T10092]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.083008][T10092] 
[  497.083010][T10092] Memory state around the buggy address:
[  497.083015][T10092]  ffff888077bf8680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  497.083022][T10092]  ffff888077bf8700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  497.083029][T10092] >ffff888077bf8780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  497.083034][T10092]                                            ^
[  497.083039][T10092]  ffff888077bf8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  497.083046][T10092]  ffff888077bf8880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  497.083051][T10092] ==================================================================
[  497.083060][T10092] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  497.083065][T10092] CPU: 0 PID: 10092 Comm: syz.5.870 Not tainted syzkaller #0
[  497.083075][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  497.083081][T10092] Call Trace:
[  497.083084][T10092]  <TASK>
[  497.083088][T10092]  dump_stack_lvl+0x18c/0x250
[  497.083103][T10092]  ? show_regs_print_info+0x20/0x20
[  497.083118][T10092]  ? load_image+0x420/0x420
[  497.083133][T10092]  panic+0x2ca/0x720
[  497.083144][T10092]  ? lock_chain_count+0x20/0x20
[  497.083156][T10092]  ? bpf_jit_dump+0xd0/0xd0
[  497.083167][T10092]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  497.083232][T10092]  ? lockdep_hardirqs_on+0x98/0x150
[  497.083244][T10092]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  497.083257][T10092]  ? _raw_spin_unlock+0x40/0x40
[  497.083269][T10092]  ? print_memory_metadata+0x314/0x400
[  497.083284][T10092]  ? fbcon_prepare_logo+0x4e2/0xa70
[  497.083298][T10092]  check_panic_on_warn+0x84/0xa0
[  497.083311][T10092]  ? fbcon_prepare_logo+0x4e2/0xa70
[  497.083324][T10092]  end_report+0x6f/0x130
[  497.083337][T10092]  kasan_report+0x128/0x150
[  497.083349][T10092]  ? fbcon_prepare_logo+0x4e2/0xa70
[  497.083365][T10092]  kasan_check_range+0x241/0x290
[  497.083378][T10092]  ? fbcon_prepare_logo+0x4e2/0xa70
[  497.083392][T10092]  __asan_memcpy+0x29/0x70
[  497.083407][T10092]  fbcon_prepare_logo+0x4e2/0xa70
[  497.083424][T10092]  fbcon_init+0x1380/0x2460
[  497.083444][T10092]  visual_init+0x2dd/0x650
[  497.083457][T10092]  do_bind_con_driver+0x859/0x1030
[  497.083473][T10092]  ? sysfs_kf_read+0x360/0x360
[  497.083484][T10092]  store_bind+0x798/0xa20
[  497.083494][T10092]  ? sysfs_kf_read+0x360/0x360
[  497.083504][T10092]  kernfs_fop_write_iter+0x3a4/0x520
[  497.083515][T10092]  vfs_write+0x474/0x9a0
[  497.083530][T10092]  ? file_end_write+0x250/0x250
[  497.083544][T10092]  ? __fget_files+0x3fc/0x460
[  497.083560][T10092]  ? __fdget_pos+0x2a3/0x330
[  497.083573][T10092]  ? ksys_write+0x74/0x260
[  497.083587][T10092]  ksys_write+0x151/0x260
[  497.083601][T10092]  ? __ia32_sys_read+0x90/0x90
[  497.083616][T10092]  ? lockdep_hardirqs_on+0x98/0x150
[  497.083628][T10092]  do_syscall_64+0x55/0xb0
[  497.083647][T10092]  ? clear_bhb_loop+0x40/0x90
[  497.083656][T10092]  ? clear_bhb_loop+0x40/0x90
[  497.083666][T10092]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  497.083681][T10092] RIP: 0033:0x7f5d3119e199
[  497.083689][T10092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.083697][T10092] RSP: 002b:00007f5d320c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  497.083708][T10092] RAX: ffffffffffffffda RBX: 00007f5d31426090 RCX: 00007f5d3119e199
[  497.083716][T10092] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003
[  497.083723][T10092] RBP: 00007f5d312350b8 R08: 0000000000000000 R09: 0000000000000000
[  497.083730][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  497.083736][T10092] R13: 00007f5d31426128 R14: 00007f5d31426090 R15: 00007ffdddcf68f8
[  497.083747][T10092]  </TASK>
[  497.083808][T10092] Kernel Offset: disabled