last executing test programs:

1m36.423681445s ago: executing program 1 (id=559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20004001}, 0x48000)

1m36.207235038s ago: executing program 1 (id=560):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904"], 0x0}, 0x0)

1m31.738907749s ago: executing program 1 (id=573):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x81, 0xcf57, 0xff52, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8000, 0x8000, 0x8, 0x1}})

1m30.583193267s ago: executing program 1 (id=577):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
gettid()
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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")
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)

1m30.101074375s ago: executing program 1 (id=580):
futex(&(0x7f0000004000)=0x8007, 0x4, 0x0, 0x0, &(0x7f0000004000)=0x4, 0x10002)

1m29.607194553s ago: executing program 1 (id=586):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
socket$netlink(0x10, 0x3, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
keyctl$set_reqkey_keyring(0xe, 0x2)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES16=r3, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=")
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)={0x29, 0x4, 0x4, 0x0, 0x0, [@mcast1, @mcast1]}, 0x1)
setreuid(0x0, 0x0)

1m28.554073309s ago: executing program 32 (id=586):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
socket$netlink(0x10, 0x3, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
keyctl$set_reqkey_keyring(0xe, 0x2)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES16=r3, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$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")
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)={0x29, 0x4, 0x4, 0x0, 0x0, [@mcast1, @mcast1]}, 0x1)
setreuid(0x0, 0x0)

20.301582989s ago: executing program 4 (id=788):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000032a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00')
pread64(r3, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9)

19.58652674s ago: executing program 5 (id=789):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0)

18.108128524s ago: executing program 4 (id=791):
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

18.024247965s ago: executing program 5 (id=793):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000500)=0x8, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
writev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)="116bcd705f293f89d78714120f7555d1694074b905ab0162dbd5e435eab28cb1e2", 0x21}], 0x2)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000019080))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000009c0)=0x4, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000431fd9d2e"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {0x0}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd", 0xb5}, {&(0x7f00000015c0)="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", 0xbf9}], 0x4)
memfd_create(0x0, 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
pread64(r1, &(0x7f0000000080)=""/102341, 0x18fc5, 0x20)

16.760461385s ago: executing program 5 (id=798):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r2, 0x0, 0x1000008, 0x0)

15.114472161s ago: executing program 5 (id=801):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xc}, {0xffe0, 0x3}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0x2, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0x10}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r3, 0x1005)
socket$unix(0x1, 0x1, 0x0)
accept$unix(r3, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendmmsg$inet(r7, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{0x0}], 0x1}}], 0x1, 0x4000)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)

12.402926834s ago: executing program 5 (id=804):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

12.103361808s ago: executing program 3 (id=805):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r1, 0xa, 0x11)
fcntl$setlease(r0, 0x400, 0x2)
pause()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
listen(0xffffffffffffffff, 0xa)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
read$rfkill(r3, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x121)

11.98538469s ago: executing program 2 (id=807):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59)
openat$kvm(0xffffffffffffff9c, 0x0, 0xc03, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000119000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0)
truncate(&(0x7f0000000180)='./file1\x00', 0x28)

11.567253277s ago: executing program 5 (id=808):
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0)

11.106612264s ago: executing program 33 (id=808):
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0)

11.088042234s ago: executing program 2 (id=811):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
timer_create(0x2, &(0x7f0000002500)={0x0, 0x7, 0x4, @thr={&(0x7f0000001400)="91f834d857034b894a2ce563b2c03fca2344c36131f040d0f6063d9405961690624fabc1a98d77145707e09b8d4ed5930b88c24762824cf442d8a0e1abafb937da84dcf49d5600b8085f365d679b14f8a8a656b521c03acbaf86fac5cc2c1cc91752ec528a81e5f60b611ffbbf13320145f2555d978c3f0482ca12d87feb379388da25250085b20e122dca8a2b1afb8ca8688568e649edb01b139537c1ad32c2f9deac9b1002a099da2409cb116fe6089462c301a59e8b3d5b269b8da18374737d3f2349d6883efc5def825a416a824e2846e15dfa4e11256cede8c508162eba197e1634459ac92d9d2d6c604349ec6aa9ade7a6dc5280a109c5ce358992845d18730e68ec601693ad053e9ae5e78a889e5f59dbaefd49c95e836b568103eaf8e4142080d61ee1679e86981c72651bff88fba3410297e1b7531994456c038aeb3cb477696e9858120e06140bca43aa686876e02796b8bca58df4c52c33db57c1e13aa3a1258d631e95d9dab13536f81cb07202458600e1a3b6850c201482dbf847675873f46328284d8aa45480b75b46708e80db304d72ab8ee432d54649c395e614dd0c940b5d8ab1559e7656b4cfaae15baa16e6c767cc14587a1ea8312f610f45de8aeb55365a90351b053862ccf0f2644e78e682608be745b81e0e348347d21fb334d36dd2702183d3c2dd105c835d8814efd134d76c69fcd89cd1dbd73e8b1e2c971530339d7792bcfd3a2f432f1bf8c34688f673912e6a4234215c4a31d25acbb3f60bbdfd7ecd685fb21c80a9d45fc2681bac5d5235b1545e68afd91bf4f8f7393770a9ac4a27aecc5e01318237b3301ba65765b7ebeb4230694f573c609d4f372be14207d2735777ed73a67a05a59bd492655e5925d26edf484bc75a6c5c34abd2fd1539ab97209a6eea15e68009afbaf540576b01ed6b4f0439ef35ca4c831e3131057b0bc4429a705b426b3b3dc9ffcccfd60c10ab1a6aa2737ee7fdcdad3597ccbd722e34533932da33745364a275172a5ab824a20d9af16ff555cb178a4efe999173b9b1d0e4390ac02bb057889a7dc11eee84b6ba95700fd256610a2425f172ceb29173c7e90bb7e36ca04f1fd235a16d8fc459e95d81afa2c16f3e4299cfc6f3d081b1c5849ea4aa7377b4b7c50107302aeb67927076e1d79a27ea940803e4d9fa80a21198a7551983c9dc9ed48cb711b372185d385fe25e4af5461b1c7cbceb13bd29862718f3d8f59cba79fe3574aba18a3ec9d97bd76b8a8f262671f373cdfddfbeeee144634b4f550f9d3643b3b568523fdc8d9ef9d5519af7721e534d52667115f93692afa257acab7419d6eed7936fd1f17575c71c24a5dfdeee8d2fee6be5eb5d50a19b8f2e59ff123336797074f83b5467bc0dd37adcabd796d94053a742c8f78e524cb665e34bf3ba9c71451f57ec86162efc9fa7408e641da5da4bd043222d10493fbab3b10c200aec593fe30a0c91701b3a18f3b17eda0b286bfbfec4df5f21bf4e9f9525bdb7291b3052da1639cfd4b922ec7d932be88b33d47852adbf2a7081d36435233cda663ddb5143f6583ee3737f93a5a2f573b405bf54d00f2e169767a2127943b98da413ef4e197e005ea7846325ab50686d6f09f272296ef29e7bf5fc813fea528f411e50c603ae341d57901e7f40474d48d4a7ed60ff90010c3b8ed07c0d05cb121976b8053e52b4456386eaeb03f5fbe29ffb19f5aa06c748dfe81b4222c941b47054ec89143e54cba59c69f5fb8a8dabe4314bb21b0c18d5c352d1f353848b66cdd730ab5495ae18fbc8418281b2676925eca2ec50e39986f7717068dbe4098e30ec7ce75c7b5d8cd083c726b7805f41b8d6aacb6e175d45c34b4faf6c5853f4f236822420a1d1795091b5a46aacaf0cb5c2ada30c8ce61e08df7a4d9cd51bc6664d52c2fc0867549a80532ac53f4761ccd90c8de3b6be42499a57eb33f4c2c8a956734e1829f88b98460a6381b885525c6b06c0d0cb4385fd4b2fd69c60082d6f773a1c5e910163145ccd97a92a7f5b9226f84b46a5c0ccc4acaaa1481de622d58cb9a0d217ed3a6b1dec1a725321e78fd561cbc268d8db5d575ee088bd6efa1814a6bb7fe8cfa0c4b654a6d248f0b3a7e422ea68d22d350f09e7b84b0b27c4ee98e6b3055ae8a574bd28238e4af6a9b91b2a971d698ee4abab6a992e2c26804013c4365c21d50efcbf8e940dbbc3f81b60dbe7cd47d9ad2e6b13f680b792937731471ec4a96cc501d11eca8b1730eace32892a67e99860cc9d471b88b6a06aa92607ccfaf812fd4c057f228d2a39386c419922051f36789dd93a06dcd260524e2518ef97ef472f5e84b34a9db2cfcdf015527112f7891a4be6e59f893f6faf6e8dbee1d60a9a183f1f37ac69c849946143ef8cc91dbb72e4e8c102bae505e5986e773b429fe3a340443f4f433e909b2794e189b0002e85a10d2f665d2be0c5fa7e247b4ac3c6805fc07c0a30f02bdd030a86d02a72864b96c137939124d831d1f8ab25989cef84c52e8828009953fc6bdbf8e6440667243444393528595d0f1f722068e9d1aff16a95966e8e2a0fc67c5a086e3c236ab4f71802b05e4e6f344d08e9ef2621127f4997600f800d6277c4c2e3622add7f2f17d3c4714e177dfdc1ffdeddbf160194280d1fc8cdef20c5574b1358b0937f0a6fbc6d5a0697b86a25e828f59e63ac06fb6500f2873b131829f8f18606f5350b7aad331fa3f1a7c103723a7212e471daab018b504c394c25711b30ca6ebd28a3f7b96dd482858eb0e1b406ec95317255f2371286420247d2bfa4fb5af101e22d3e9730734406063af19be3f9b3a98cc6cbac71b11ee37e3d31013ff5468d48c4cc8e97186a391e9a543d27e4622bd59aa86458e1be107f6b57ca43f1cb5969b4306fd0d145e7bb2888257ccafe3241d242205eac894a41ece5813ee3d0c1ac0d48c9751f2bfc2427da231587560cc42e6b4bbed4f94e01161970f252c253562288314fac1aa8d2510fab76e9bd1383f3ed3ff753bc45c13718eb96fb474efbad3f92a64ef5f47060d81b816f7985a27bcafd507b15ca90d4ca00d0f53d7811da710f5b80a91acf8b4a7017b63073ba37dd9878bf36d3db75f48d9ca15bab443d77f31c1306eca4f64c79e82ac380ba74a876dbfaffbbbdfaf17ad70c0ccba9102f2d3eee59a25496f7d794934a393040b1f1e2cd2613d3f64f430cf5f13dc3d7adb14bfaf08e92edcaefe315ffe0a687e3043b00e1b3cd80de44caf1021e9eba83696613c6c3f618d9cf058591aefca9f870bf1410d682e3bd69ae2dca2cb7e2df7187bcd76a103c6b0afc88a797420ccdc4d3a60f57da283161f33ff9dc585aefa3df50f8d180d30ec4968beeb2d81c51115a50456ea53e2d0792bbf02437b737267520ad1a55e1a939537fccf7406542d601357904baecbbe089be93e33a9993ccaeafca84fededdb4eff61750f75b71d21edc8e0b91934e2ed24193afa2d20aa20ac7d6b4d09c74d26b5cb85d3f6c4b97bbe90226b2fb415fd298bd428b2a3115d1e292b825e3e21a70756fb8d2a5753020c62a6cba7d8ee95e9a887f45aaeee51085becdd5d76989b51fda63176fd9380298333db30409fbba51d228849d4150d8bd867064ae34e4315f23747391f295f0a8150e95b5bdd42af78673db3a4128e4031a1611737ea06362d656f2838e5023a69f56a8413eaaff4216ef5b0e9b64dd3edf2ef12f665945566bcf7700be48849d60783dd79d52b661e45866098c21e2a03701962d63a9d190ed31f77ad896d3fe6aef063b62e81d24417904892fb8f62d329d2b950fd168e0cb5712a5e452a0a8fdcc9b174ed006b24a6e727f8cc17f3884615ca03fc517905516a28f1201f5c70c98ece9880acdb3aab30a7ffff2e5b1de72878a17c3cf4b1e60be55278290e7ac238df0e3b210adee809243b5d1b1c9e0f9f804eea59f8e0d43b6224367a447589a43ca64052b11ca1fa18e62f54b0885d733007df1257dd28d9d2c141d4bd879436b55290bf03d2bcc84a3bf3184494a6aa48d8d51687431b6b48d2c24f60b17ed0d60b68b96559f9a2ea034da4b14353143723121c0ff23bc773e13d765bff2acaed073304b47740989fa69255b4a61579116a7a3d74710e1015f7a4b35f276b9e5549712d79cbca414d6eb5f53aa687a2b72465e70c4bb8486d24d035f05840cc65df6031062bc23b20248c4a2997a7d9fa9dbe45bf564228ac491e711c5a6299f89a7d18007b58dcddab68722a3e162799523dc8a9aaaea194d5601275fb5995f436ba182622f59f95121d6315b6caa016aa5d3a927fee5db0416d3ad40d5", &(0x7f0000000300)="133c9e00291f966d1d2648db7984b1b35470a0b6e62988b555d8c290696f524bf8e59b2724a22173352cc7a5127effe58208d2f83ddfe99a35d0d424cd82a358fa481f0bd735c6c3f0b52578ae391fa5e97e5868b45d2d44347f6ec72aa4a90334384b7bb85049bebbf42e5d1cf6b68959824db45eecb0742b47ba06a76b159f8bd9efc7ab54e3231377fd1134e676e2e2c4aae3412de9352be3deef53221fa0ef0b6973f7752d6c65195fd9befa733f9446ad36a1f052d17cab60c59efb6632c95cb830c4503d0d569589400a315e26eae3b98daaaa7c4801be421872f3571297fc69e967c7565f907aaa4b0f9d54eb26a5106259baa3b58a96e39cb7a13adef24dd72f6ba639682552495c6209d84c9e810d0437ce62b59c1435d092ee4ba0405a55dd0a8fe3b251ee45c7e0c9d0a7eb263cd6b04a815e382b4b70151ad2d805976a1a9a0bd0d6a0bd0f95e05ec20563de6021a4e504307103f796061a4a4c68abbaea5b48a08564a29a"}}, &(0x7f0000002540))
unshare(0x22020600)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

11.086136844s ago: executing program 4 (id=812):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000780)=""/102400, 0x19000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
socket(0x10, 0x3, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010)
ftruncate(r3, 0x2000009)
sendfile(r1, r3, 0x0, 0x7ffff004)
syz_usb_disconnect(r0)

10.71244762s ago: executing program 0 (id=813):
socket$unix(0x1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)

9.611321008s ago: executing program 0 (id=814):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x1010008, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0x1b2, &(0x7f0000000580)="$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")
unshare(0x20060400)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
chmod(0x0, 0x234)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
flock(0xffffffffffffffff, 0xb)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xc)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000)
syz_usb_connect(0x0, 0x5a, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x114}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004005}, 0x0)

9.347850652s ago: executing program 4 (id=815):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0)
preadv(r2, 0x0, 0x0, 0x6, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x6, 0x4e20, 0x3}}}}}, 0x0)

9.097188426s ago: executing program 2 (id=816):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

8.83926115s ago: executing program 3 (id=817):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="400a2e000000c4b333209d5b64dea9fe5603cadbfeebc688397db29a42d1ddbd66b94eb4d1177f18d3ccafa6f5b464294b4b18ff7b023cc83b30b268c3b5f50bfbf58b8ae97d3d276a2c15dc3b97371e7048d2bb533e91e416a058a4b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x2400404e)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/47, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)

5.885884197s ago: executing program 0 (id=818):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='mem\x00\xffEe_hu\xb4\xc5\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\r4\b,H\xbf\xb6C\x9a\xd9g{\'\xc50\xba\xa7\xc4K\'\xf8x\xcc\x91\x85{$\x12\xcfO\x96\xd0]7\xdao8i\x85!!\f\xf1\xeeU\x12\xa5\xa70=\xf2\xcc9\xeb!F\xf2\xf6', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x50011, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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")
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x2, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
write$P9_RLERROR(r1, &(0x7f00000000c0)={0xe, 0x7, 0x1, {0x5, '.[-/\''}}, 0xe)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)

5.884298847s ago: executing program 2 (id=819):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/file0\x00', 0x181201, 0x0)
write(r3, &(0x7f0000000200)='0x5678\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099c", 0x38)
pipe(&(0x7f00000002c0))
splice(r3, 0x0, r5, 0x0, 0x9, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409\x00', r2, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ecm.usb0\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
write(r6, &(0x7f00000004c0)='\n', 0x1)
socket(0x10, 0x803, 0x0)

5.611362521s ago: executing program 4 (id=820):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd, 0x7f)
chown(&(0x7f00000000c0)='./file2\x00', 0x0, r1)

3.362810267s ago: executing program 3 (id=821):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
write(r0, &(0x7f0000000d00)="99598e37a1a480e95cd6f12df8c28c78cae0", 0x12)

3.073504431s ago: executing program 3 (id=822):
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054)

3.072916231s ago: executing program 0 (id=823):
socket$unix(0x1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)

2.221022025s ago: executing program 2 (id=824):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r3, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000440), 0x1000a)
sendfile(r3, r4, &(0x7f0000000080)=0x11, 0x7fff)

1.967007909s ago: executing program 4 (id=825):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200)

1.903299369s ago: executing program 0 (id=826):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
timer_create(0x2, &(0x7f0000002500)={0x0, 0x7, 0x4, @thr={&(0x7f0000001400)="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", &(0x7f0000000300)="133c9e00291f966d1d2648db7984b1b35470a0b6e62988b555d8c290696f524bf8e59b2724a22173352cc7a5127effe58208d2f83ddfe99a35d0d424cd82a358fa481f0bd735c6c3f0b52578ae391fa5e97e5868b45d2d44347f6ec72aa4a90334384b7bb85049bebbf42e5d1cf6b68959824db45eecb0742b47ba06a76b159f8bd9efc7ab54e3231377fd1134e676e2e2c4aae3412de9352be3deef53221fa0ef0b6973f7752d6c65195fd9befa733f9446ad36a1f052d17cab60c59efb6632c95cb830c4503d0d569589400a315e26eae3b98daaaa7c4801be421872f3571297fc69e967c7565f907aaa4b0f9d54eb26a5106259baa3b58a96e39cb7a13adef24dd72f6ba639682552495c6209d84c9e810d0437ce62b59c1435d092ee4ba0405a55dd0a8fe3b251ee45c7e0c9d0a7eb263cd6b04a815e382b4b70151ad2d805976a1a9a0bd0d6a0bd0f95e05ec20563de6021a4e504307103f796061a4a4c68abbaea5b48a08564a29a"}}, &(0x7f0000002540))
unshare(0x22020600)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

1.902965039s ago: executing program 3 (id=827):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380))
r6 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x888)
timer_create(0x3, 0x0, &(0x7f0000044000))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002600)={<r7=>0x0, 0x0, "8ef11670764929adde2ed4400fae9b48c777917822452397cd2e7848dc668a9d7f65a91b486f24ad094d1d9edaa5951d606630ade5810f11b5a1477a26d3459dee8b16c0b607c4d0b2d91caaffeb5983a0d6676b3e5c35b030f33d168ca0b0edff7b667195ac0a0dc4fecd727508d8ab7bd32bfa6694118900b509fb858e1d876e27ca4f76e7292d32824c82763c77f55e56a4f4b3b6cc538195c2b6ab4e71627e373e4cf093047022cd92d6db17a7a21d7ed71d147292dd7f0f44b743857d0bbfc2a1639bd84363a6a05f710c2fb5a85e87e6fd52bc585a322fd8b111e306fcc07f4917d60dc8eba82d8d83b3cfbccd4adae4bd2be2e1d74d27a4930d9ed556", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0xb, "97451a24bdc556"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, &(0x7f0000000600)={r9, r8, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"})
r10 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r10)
sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="24000000000000002900000032000000fc"], 0x28}}], 0x1, 0x4048011)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

1.172754181s ago: executing program 2 (id=828):
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xee01, 0x0, 0x1000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
fallocate(r1, 0x20, 0x0, 0x1)

5.24441ms ago: executing program 0 (id=829):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)

0s ago: executing program 3 (id=830):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="400a2e000000c4b333209d5b64dea9fe5603cadbfeebc688397db29a42d1ddbd66b94eb4d1177f18d3ccafa6f5b464294b4b18ff7b023cc83b30b268c3b5f50bfbf58b8ae97d3d276a2c15dc3b97371e7048d2bb533e91e416a058a4b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x2400404e)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/47, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)

kernel console output (not intermixed with test programs):

1b tx timeout
[   67.235074][ T4282] Bluetooth: hci0: command 0x041b tx timeout
[   67.235104][ T4279] Bluetooth: hci4: command 0x041b tx timeout
[   67.276726][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.284178][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.304978][ T4284] Bluetooth: hci2: command 0x041b tx timeout
[   67.305797][ T4279] Bluetooth: hci3: command 0x041b tx timeout
[   67.324340][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.334373][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.358101][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.377990][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.390769][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.405170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.413706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.443992][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.475269][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.510181][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.519560][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.537155][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.547165][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.559049][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.570791][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.582448][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.632179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.651367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.661766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.670190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.678562][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.687043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.698676][ T4280] device veth0_vlan entered promiscuous mode
[   67.712676][ T4280] device veth1_vlan entered promiscuous mode
[   67.743064][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.751588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.765822][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.785453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.825833][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.838396][ T4273] device veth0_vlan entered promiscuous mode
[   67.852034][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.862040][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.875127][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.883484][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.917512][ T4273] device veth1_vlan entered promiscuous mode
[   67.939909][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.955159][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.965866][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.973524][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.003476][ T4280] device veth0_macvtap entered promiscuous mode
[   68.016430][ T4280] device veth1_macvtap entered promiscuous mode
[   68.026068][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.045209][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.054112][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.070683][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.079606][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.096342][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.104414][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.148466][ T4283] device veth0_vlan entered promiscuous mode
[   68.158656][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.168606][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.183057][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.193544][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.213054][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.242803][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.254397][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.270950][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.280256][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.289739][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.297516][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.307965][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.321857][ T4273] device veth0_macvtap entered promiscuous mode
[   68.332492][ T4273] device veth1_macvtap entered promiscuous mode
[   68.339937][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.349133][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.357763][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.366571][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.381340][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.390283][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.399321][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.408189][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.419086][ T4283] device veth1_vlan entered promiscuous mode
[   68.436549][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.476935][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.488711][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.500599][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.535674][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.543817][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.556157][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.566350][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.575295][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.584022][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.592842][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.601816][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.612432][ T4283] device veth0_macvtap entered promiscuous mode
[   68.626189][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.639483][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.652270][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.669032][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.678374][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.687385][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.696319][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.711282][ T4283] device veth1_macvtap entered promiscuous mode
[   68.719642][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.728156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.736948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.747197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.756363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.813919][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.822460][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.835984][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.844284][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.853474][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.861883][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.871454][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.880344][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.888274][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.896394][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.903965][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.922723][ T4272] device veth0_vlan entered promiscuous mode
[   68.938782][ T4276] device veth0_vlan entered promiscuous mode
[   68.966599][ T4272] device veth1_vlan entered promiscuous mode
[   68.979405][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.990394][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.001180][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.011655][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.022585][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.033830][ T4276] device veth1_vlan entered promiscuous mode
[   69.053141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.061508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.070520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.078874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.089201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.100588][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.111129][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.121232][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.132548][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.143649][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.179044][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.187261][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.197629][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.217517][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.225824][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.227080][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.242114][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.251364][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.260161][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.274289][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.288827][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.305071][ T4279] Bluetooth: hci1: command 0x040f tx timeout
[   69.306084][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[   69.311083][ T4279] Bluetooth: hci4: command 0x040f tx timeout
[   69.326656][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.342423][ T4272] device veth0_macvtap entered promiscuous mode
[   69.355768][ T4276] device veth0_macvtap entered promiscuous mode
[   69.362825][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.371126][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.385448][ T4279] Bluetooth: hci3: command 0x040f tx timeout
[   69.385473][ T4284] Bluetooth: hci2: command 0x040f tx timeout
[   69.405482][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.414109][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.425303][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.434050][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.443246][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.463607][ T4272] device veth1_macvtap entered promiscuous mode
[   69.470926][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.479670][ T4276] device veth1_macvtap entered promiscuous mode
[   69.485416][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.507813][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.516883][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.526092][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.543087][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.572942][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.582840][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.594104][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.604553][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.628768][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.647152][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.672389][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.683036][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.693087][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.704015][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.714838][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.725449][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.738308][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.748883][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.758900][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.769349][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.780387][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.793934][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.805936][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.816033][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.829018][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.839697][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.853631][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.871730][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.886439][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   69.890917][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.915515][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.924299][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.936500][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.940862][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   69.952344][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.973972][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.984809][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.002498][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.015297][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.026583][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.036632][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.047451][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.070894][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.087043][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.101298][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.104725][ T4317] usb 4-1: Using ep0 maxpacket: 32
[   70.117235][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.128810][ T4317] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.134312][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.144645][ T4317] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.152207][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.167725][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.171941][ T4317] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   70.187377][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.196479][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.205677][ T4317] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   70.211805][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.214009][ T4317] usb 4-1: Product: syz
[   70.214024][ T4317] usb 4-1: Manufacturer: syz
[   70.233011][ T4317] hub 4-1:4.0: USB hub found
[   70.240086][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.302408][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.325549][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.361904][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.405166][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.413256][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.439228][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.441726][ T4317] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[   70.502121][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.515815][ T4317] usb 4-1: USB disconnect, device number 2
[   70.520678][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.564156][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.633424][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.651624][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.671616][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.680620][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.712376][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.741555][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.815264][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.003983][ T4372] loop1: detected capacity change from 0 to 2048
[   71.138320][ T4372]  loop1: p1 < > p4
[   71.138320][ T4372]  p4: <netbsd: >
[   71.158451][ T4372] loop1: p4 size 722688 extends beyond EOD, truncated
[   71.274433][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[   71.280989][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[   71.419511][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   71.425927][ T4284] Bluetooth: hci0: command 0x0419 tx timeout
[   71.432636][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[   71.475111][ T4279] Bluetooth: hci2: command 0x0419 tx timeout
[   71.935411][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.944440][ T4371] loop2: detected capacity change from 0 to 512
[   72.005490][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.065477][ T4371] EXT4-fs: Mount option(s) incompatible with ext3
[   72.106961][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   72.129621][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   72.258108][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'.
[   72.359166][ T4321] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   72.510731][ T4380] bond0: (slave bond_slave_0): Releasing backup interface
[   72.545716][ T4284] Bluetooth: hci3: command 0x0419 tx timeout
[   72.569321][ T4321] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   72.586048][ T4321] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.641278][ T4321] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   72.669228][ T4321] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   72.678132][ T4321] usb 4-1: Product: syz
[   72.682308][ T4321] usb 4-1: Manufacturer: syz
[   72.690760][ T4321] hub 4-1:4.0: USB hub found
[   72.894289][ T4321] hub 4-1:4.0: 1 port detected
[   73.028878][ T4392] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use)
[   73.106955][ T4321] hub 4-1:4.0: hub_hub_status failed (err = 0)
[   73.495334][ T4321] hub 4-1:4.0: config failed, can't get hub status (err -5)
[   74.032854][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   74.555794][ T4396] sched: RT throttling activated
[   74.562963][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[   74.817300][ T4398] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.826331][ T4398] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.835187][ T4398] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.843887][ T4398] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.975591][ T4402] usb 4-1: USB disconnect, device number 3
[   75.453356][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   75.481644][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[   75.525074][ T4403] Zero length message leads to an empty skb
[   76.091031][ T4432] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 11 (only 8 groups)
[   76.409391][   T27] audit: type=1800 audit(1790255127.886:2): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[   77.401327][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   77.422644][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   77.533587][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   77.680381][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   78.271440][ T4464] Config c/1 of g1 needs at least one function.
[   78.291131][ T4464] udc dummy_udc.0: failed to start g1: -22
[   78.300095][ T4464] configfs-gadget.g1: probe of gadget.0 failed with error -22
[   78.360272][ T4464] UDC core: g1: couldn't find an available UDC or it's busy
[   78.686251][ T4477] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 10 (only 8 groups)
[   78.861359][   T27] audit: type=1800 audit(1790255130.346:3): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.33" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[   79.555679][ T4483] syz.1.33 (4483) used greatest stack depth: 19888 bytes left
[   79.937973][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'.
[   79.964597][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'.
[   80.000120][ T4499] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.008958][ T4499] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.017881][ T4499] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.026827][ T4499] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.637417][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'.
[   80.654256][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'.
[   81.078496][ T4519] Config c/1 of g1 needs at least one function.
[   81.108542][ T4519] udc dummy_udc.0: failed to start g1: -22
[   81.137494][ T4519] configfs-gadget.g1: probe of gadget.0 failed with error -22
[   81.158085][ T4519] UDC core: g1: couldn't find an available UDC or it's busy
[   81.351145][ T4523] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups)
[   81.390418][   T14] cfg80211: failed to load regulatory.db
[   81.572955][   T27] audit: type=1800 audit(1790255133.056:4): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.48" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[   83.042584][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'.
[   83.073693][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   83.128772][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'.
[   83.184587][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   83.555885][ T4553] Config c/1 of g1 needs at least one function.
[   83.616927][ T4553] udc dummy_udc.0: failed to start g1: -22
[   83.638646][ T4553] configfs-gadget.g1: probe of gadget.0 failed with error -22
[   83.687539][ T4553] UDC core: g1: couldn't find an available UDC or it's busy
[   85.835856][   T27] audit: type=1800 audit(1790255137.306:5): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.64" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[   85.889833][ T4570] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups)
[   86.152775][ T4578] syz.1.64 (4578) used greatest stack depth: 19728 bytes left
[   87.100248][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   87.315109][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'.
[   87.427241][ T4592] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.436094][ T4592] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.444898][ T4592] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.453623][ T4592] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.264476][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   89.294473][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.304475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.314475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   89.898860][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'.
[   89.957895][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'.
[   89.971294][ T4649] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.980223][ T4649] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.988970][ T4649] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.997684][ T4649] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.014762][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'.
[   90.028858][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'.
[   92.946536][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'.
[   93.164475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.184475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.194479][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.204477][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.214482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.224477][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   93.604619][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'.
[   93.670822][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'.
[   93.750875][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'.
[   96.041673][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'.
[   96.060615][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'.
[   96.080726][ T4744] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.089614][ T4744] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.098496][ T4744] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.108633][ T4744] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.143099][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'.
[   96.152734][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'.
[   97.007951][ T4760] FAULT_INJECTION: forcing a failure.
[   97.007951][ T4760] name failslab, interval 1, probability 0, space 0, times 1
[   97.023395][ T4760] CPU: 0 PID: 4760 Comm: syz.1.122 Not tainted syzkaller #0
[   97.030717][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   97.040802][ T4760] Call Trace:
[   97.044095][ T4760]  <TASK>
[   97.047037][ T4760]  dump_stack_lvl+0x188/0x24e
[   97.051763][ T4760]  ? show_regs_print_info+0x12/0x12
[   97.056949][ T4760]  ? load_image+0x410/0x410
[   97.061444][ T4760]  ? __might_sleep+0xd0/0xd0
[   97.066023][ T4760]  ? __lock_acquire+0x7c40/0x7c40
[   97.071039][ T4760]  should_fail_ex+0x390/0x4c0
[   97.075708][ T4760]  should_failslab+0x5/0x20
[   97.080196][ T4760]  slab_pre_alloc_hook+0x59/0x300
[   97.085216][ T4760]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[   97.090972][ T4760]  __kmem_cache_alloc_node+0x4f/0x270
[   97.096335][ T4760]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[   97.102051][ T4760]  __kmalloc+0xa3/0x240
[   97.106199][ T4760]  tomoyo_realpath_from_path+0xe2/0x5c0
[   97.111741][ T4760]  tomoyo_check_open_permission+0x212/0x440
[   97.117642][ T4760]  ? tomoyo_check_open_permission+0x1bf/0x440
[   97.123700][ T4760]  ? tomoyo_check_path_number_acl+0x280/0x280
[   97.129752][ T4760]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   97.135735][ T4760]  ? __lock_acquire+0x7c40/0x7c40
[   97.140774][ T4760]  ? __lock_acquire+0x7c40/0x7c40
[   97.145821][ T4760]  ? __rwlock_init+0x140/0x140
[   97.150578][ T4760]  ? tomoyo_file_open+0xe9/0x170
[   97.155513][ T4760]  security_file_open+0x5e/0xa0
[   97.160373][ T4760]  do_dentry_open+0x2fd/0x10b0
[   97.165133][ T4760]  ? memcpy+0x3c/0x60
[   97.169105][ T4760]  path_openat+0x2674/0x2f10
[   97.173693][ T4760]  ? verify_lock_unused+0x140/0x140
[   97.178878][ T4760]  ? do_sys_openat2+0xdd/0x4f0
[   97.183639][ T4760]  ? do_filp_open+0x420/0x420
[   97.188312][ T4760]  do_filp_open+0x1ee/0x420
[   97.192826][ T4760]  ? vfs_tmpfile+0x470/0x470
[   97.197415][ T4760]  ? _raw_spin_unlock+0x24/0x40
[   97.202255][ T4760]  ? alloc_fd+0x590/0x640
[   97.206576][ T4760]  do_sys_openat2+0x14b/0x4f0
[   97.211254][ T4760]  ? do_sys_open+0xe0/0xe0
[   97.215666][ T4760]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   97.221660][ T4760]  ? lock_chain_count+0x20/0x20
[   97.226502][ T4760]  __x64_sys_openat+0x135/0x160
[   97.231341][ T4760]  do_syscall_64+0x4c/0xa0
[   97.235758][ T4760]  ? clear_bhb_loop+0x60/0xb0
[   97.240421][ T4760]  ? clear_bhb_loop+0x60/0xb0
[   97.245085][ T4760]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   97.251086][ T4760] RIP: 0033:0x7f0b0875e98e
[   97.255504][ T4760] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   97.275116][ T4760] RSP: 002b:00007f0b096a3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   97.283515][ T4760] RAX: ffffffffffffffda RBX: 00007f0b096a46c0 RCX: 00007f0b0875e98e
[   97.291471][ T4760] RDX: 0000000000101b01 RSI: 00007f0b096a3c00 RDI: ffffffffffffff9c
[   97.299440][ T4760] RBP: 00007f0b096a3c00 R08: 0000000000000000 R09: 0000000000000000
[   97.307414][ T4760] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[   97.315387][ T4760] R13: 00007f0b08a26038 R14: 00007f0b08a25fa0 R15: 00007fffb127a788
[   97.323362][ T4760]  </TASK>
[   97.360756][ T4760] ERROR: Out of memory at tomoyo_realpath_from_path.
[   98.938485][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'.
[   98.974578][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'.
[   99.035523][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'.
[   99.081837][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'.
[  105.533038][ T4878] loop3: detected capacity change from 0 to 128
[  105.753964][ T4262] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  105.788706][ T4878] xt_hashlimit: size too large, truncated to 1048576
[  106.001719][ T4886] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups)
[  107.360774][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'.
[  107.887142][ T4904] Config c/1 of g1 needs at least one function.
[  108.000750][ T4904] udc dummy_udc.0: failed to start g1: -22
[  108.068474][ T4904] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  108.324613][ T4904] UDC core: g1: couldn't find an available UDC or it's busy
[  109.840365][ T4927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'.
[  109.949244][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[  110.019220][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'.
[  110.175453][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[  111.001078][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[  111.884581][   T27] audit: type=1800 audit(1790255162.586:6): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.180" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  114.106390][ T4968] Config c/1 of g1 needs at least one function.
[  114.143854][ T4968] udc dummy_udc.0: failed to start g1: -22
[  114.172292][ T4968] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  114.209159][ T4968] UDC core: g1: couldn't find an available UDC or it's busy
[  114.500561][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'.
[  114.527453][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'.
[  114.541693][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'.
[  114.557571][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'.
[  115.539331][   T27] audit: type=1800 audit(1790255167.016:7): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  116.302348][ T4993] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups)
[  118.391774][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[  118.400902][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[  118.417141][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[  118.474806][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[  119.545565][ T5009] loop1: detected capacity change from 0 to 40427
[  119.576845][ T5009] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  119.584185][ T5009] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  119.620590][ T5009] F2FS-fs (loop1): invalid crc value
[  119.903847][ T5009] F2FS-fs (loop1): Found nat_bits in checkpoint
[  120.211724][ T5009] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  120.252090][ T5009] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  120.602154][   T27] audit: type=1804 audit(1790255172.096:8): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.199" name="/newroot/41/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  121.720687][ T4333] kworker/u4:6: attempt to access beyond end of device
[  121.720687][ T4333] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.896724][ T5048] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups)
[  123.205815][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'.
[  123.862900][ T5077] netlink: 388 bytes leftover after parsing attributes in process `syz.4.216'.
[  124.518797][ T5095] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0
[  126.064576][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[  131.580563][   T27] audit: type=1800 audit(1790255182.396:9): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.244" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  131.651103][   T27] audit: type=1800 audit(1790255183.096:10): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.244" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  132.201891][ T5193] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 7 (only 8 groups)
[  132.590706][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.597699][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  134.563918][   T27] audit: type=1800 audit(1790255185.176:11): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.259" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  134.807792][   T27] audit: type=1800 audit(1790255186.096:12): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  134.867910][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'.
[  136.666004][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801f7b8c00: rx timeout, send abort
[  136.676474][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f7b8c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session.
[  138.698575][ T5276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'.
[  140.140259][ T5294] loop1: detected capacity change from 0 to 2048
[  143.123486][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056fe1c00: rx timeout, send abort
[  143.623802][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880577d6000: rx timeout, send abort
[  143.632528][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056fe1c00: abort rx timeout. Force session deactivation
[  144.138302][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880577d6000: abort rx timeout. Force session deactivation
[  145.691190][ T5342] loop3: detected capacity change from 0 to 2048
[  150.042220][ T5365] Config c/1 of g1 needs at least one function.
[  150.054670][ T5365] udc dummy_udc.0: failed to start g1: -22
[  150.104026][ T5365] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  150.142789][ T5365] UDC core: g1: couldn't find an available UDC or it's busy
[  151.409042][ T5383] loop4: detected capacity change from 0 to 512
[  151.608432][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027c13400: rx timeout, send abort
[  151.806876][ T5383] EXT4-fs (loop4): orphan cleanup on readonly fs
[  151.816258][ T5383] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.306: bad orphan inode 15
[  151.837440][ T5383] ext4_test_bit(bit=14, block=18) = 1
[  151.842966][ T5383] is_bad_inode(inode)=0
[  151.847222][ T5383] NEXT_ORPHAN(inode)=1023
[  151.851601][ T5383] max_ino=32
[  151.854940][ T5383] i_nlink=0
[  151.865714][ T5383] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2921: inode #15: comm syz.4.306: corrupted xattr block 19
[  151.882223][ T5383] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117)
[  151.892270][ T5383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  152.570499][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027c13400: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session.
[  153.013360][ T5391] loop1: detected capacity change from 0 to 2048
[  153.872493][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  155.019903][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'.
[  155.066257][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'.
[  155.176192][ T5415] loop0: detected capacity change from 0 to 512
[  155.219535][ T5415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  155.231288][ T5418] loop4: detected capacity change from 0 to 512
[  155.237829][ T5415] System zones: 1-12
[  155.261170][ T5415] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.319: missing EA_INODE flag
[  155.278213][ T5415] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.319: error while reading EA inode 12 err=-117
[  155.312053][ T5415] EXT4-fs (loop0): 1 orphan inode deleted
[  155.319654][ T5418] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.321: missing EA_INODE flag
[  155.355515][ T5415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  155.407550][ T5427] loop2: detected capacity change from 0 to 512
[  155.413766][ T5418] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.321: error while reading EA inode 12 err=-117
[  155.574126][ T5427] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  155.592585][ T5418] EXT4-fs (loop4): 1 orphan inode deleted
[  155.634649][ T5418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  155.664828][ T5427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  155.748895][ T5432] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  156.061063][ T5427] EXT4-fs (loop2): 1 truncate cleaned up
[  156.127757][ T5427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  156.181326][ T5418] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  156.215456][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  156.307415][ T5418] EXT4-fs error (device loop4): __ext4_new_inode:1359: inode #15: comm syz.4.321: mark_inode_dirty error
[  156.335879][ T5418] EXT4-fs error (device loop4) in __ext4_new_inode:1361: Corrupt filesystem
[  156.388289][ T5418] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  156.400964][ T5418] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #15: comm syz.4.321: mark_inode_dirty error
[  156.458503][ T5418] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  156.565534][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  156.609289][ T5442] loop0: detected capacity change from 0 to 1024
[  156.682681][ T5442] EXT4-fs: Ignoring removed bh option
[  156.789030][ T5442] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  157.151072][ T5442] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  157.205567][ T5453] loop1: detected capacity change from 0 to 1024
[  157.254271][ T5453] =======================================================
[  157.254271][ T5453] WARNING: The mand mount option has been deprecated and
[  157.254271][ T5453]          and is ignored by this kernel. Remove the mand
[  157.254271][ T5453]          option from the mount to silence this warning.
[  157.254271][ T5453] =======================================================
[  157.316133][ T5442] EXT4-fs error (device loop0): ext4_check_all_de:666: inode #12: block 7: comm syz.0.327: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  157.773355][ T5442] EXT4-fs (loop0): Remounting filesystem read-only
[  157.801453][ T5454] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz.0.327: path /59/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=128 fake=0
[  157.837417][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'.
[  157.856526][ T5453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  157.901255][ T5453] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.927963][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'.
[  157.989513][ T5454] EXT4-fs (loop0): Remounting filesystem read-only
[  158.102963][ T5453] serio: Serial port ptm0
[  158.243274][ T4276] EXT4-fs (loop0): unmounting filesystem.
[  158.541025][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  158.919196][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  159.383530][ T5494] serio: Serial port ptm0
[  161.032172][ T5516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.039677][ T5516] IPv6: NLM_F_CREATE should be set when creating new route
[  161.047009][ T5516] IPv6: NLM_F_CREATE should be set when creating new route
[  162.767531][ T5525] netlink: 200 bytes leftover after parsing attributes in process `syz.2.350'.
[  163.194085][ T5532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.724859][ T5540] loop2: detected capacity change from 0 to 40427
[  166.753598][ T5540] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  166.770009][ T5540] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  166.803244][ T5540] F2FS-fs (loop2): invalid crc value
[  166.850948][ T5540] F2FS-fs (loop2): Found nat_bits in checkpoint
[  166.973296][ T5540] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  166.989564][ T5540] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  167.100130][   T27] audit: type=1804 audit(1790255218.596:13): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.354" name="/newroot/75/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  167.362291][ T4394] kworker/u4:9: attempt to access beyond end of device
[  167.362291][ T4394] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.904613][ T4261] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  168.126412][ T4261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  168.230694][ T4261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  168.290025][ T4261] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  168.318388][ T4261] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  168.349277][ T4261] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  168.437481][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.447013][ T4261] usb 2-1: Product: syz
[  168.451610][ T4261] usb 2-1: Manufacturer: syz
[  168.456679][ T4261] usb 2-1: SerialNumber: syz
[  168.467486][ T5573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  168.496605][ T4261] cdc_mbim 2-1:1.0: skipping garbage
[  168.712692][ T5573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  168.994651][ T5588] loop3: detected capacity change from 0 to 512
[  170.048176][ T4261] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS
[  170.084659][ T4261] cdc_mbim 2-1:1.0: bind() failure
[  170.094109][ T4261] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  170.101315][ T5588] EXT4-fs: Mount option(s) incompatible with ext3
[  170.126568][ T4261] cdc_ncm 2-1:1.1: bind() failure
[  170.147601][ T4261] usb 2-1: USB disconnect, device number 2
[  172.354803][ T5605] serio: Serial port ptm0
[  173.238569][ T5610] binder_alloc: 5609: binder_alloc_buf, no vma
[  173.475600][ T5614] kvm: pic: non byte write
[  175.225881][ T5639] using random self ethernet address
[  175.584901][ T5639] using random host ethernet address
[  175.817735][ T5643] loop3: detected capacity change from 0 to 512
[  176.084850][ T5643] EXT4-fs (loop3): orphan cleanup on readonly fs
[  176.097848][ T5643] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.381: bad orphan inode 15
[  176.111229][ T5643] ext4_test_bit(bit=14, block=18) = 1
[  176.116758][ T5643] is_bad_inode(inode)=0
[  176.121017][ T5643] NEXT_ORPHAN(inode)=1023
[  176.125474][ T5643] max_ino=32
[  176.128733][ T5643] i_nlink=0
[  176.139622][ T5643] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2921: inode #15: comm syz.3.381: corrupted xattr block 19
[  176.153568][ T5643] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117)
[  176.163083][ T5643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  176.299097][ T5641] Config c/1 of g1 needs at least one function.
[  176.576868][ T5641] udc dummy_udc.0: failed to start g1: -22
[  176.582741][ T5641] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  176.721089][ T5641] UDC core: g1: couldn't find an available UDC or it's busy
[  177.506151][   T27] audit: type=1800 audit(1790255228.996:14): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.382" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  177.681292][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  178.045905][ T5664] loop1: detected capacity change from 0 to 256
[  178.089577][ T5665] loop4: detected capacity change from 0 to 256
[  178.098994][ T5664] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  178.119123][ T5665] exfat: Deprecated parameter 'utf8'
[  178.200015][ T5665] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  178.287998][ T5669] serio: Serial port ptm0
[  178.657974][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'.
[  179.104881][ T5675] syz.1.389: attempt to access beyond end of device
[  179.104881][ T5675] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  179.119724][ T5675] syz.1.389: attempt to access beyond end of device
[  179.119724][ T5675] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  179.135378][   T27] audit: type=1800 audit(1790255230.636:15): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.389" name="file1" dev="loop1" ino=1048596 res=0 errno=0
[  180.643558][ T5700] loop2: detected capacity change from 0 to 1024
[  180.653715][ T5702] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 5 (only 8 groups)
[  180.666797][ T5700] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  180.682019][ T5700] EXT4-fs (loop2): barriers disabled
[  180.687865][ T5700] JBD2: no valid journal superblock found
[  180.694063][ T5700] EXT4-fs (loop2): error loading journal
[  181.000252][ T5714] Config c/1 of g1 needs at least one function.
[  181.027860][ T5714] udc dummy_udc.0: failed to start g1: -22
[  181.033963][ T5714] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  181.064906][ T5714] UDC core: g1: couldn't find an available UDC or it's busy
[  181.098125][ T5723] serio: Serial port ptm0
[  182.158772][ T5740] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 5 (only 8 groups)
[  182.992903][ T5763] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.422'.
[  183.298331][ T5772] serio: Serial port ptm0
[  183.811929][ T5780] netlink: 'syz.3.428': attribute type 29 has an invalid length.
[  183.823481][ T5780] netlink: 'syz.3.428': attribute type 29 has an invalid length.
[  183.895106][ T5781] netlink: 'syz.3.428': attribute type 29 has an invalid length.
[  183.911303][ T5780] netlink: 'syz.3.428': attribute type 29 has an invalid length.
[  183.950127][ T5780] netlink: 'syz.3.428': attribute type 29 has an invalid length.
[  184.183179][ T5794] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.435'.
[  185.874763][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[  185.874800][ T4291] Bluetooth: hci1: command 0x0406 tx timeout
[  185.884537][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  185.893479][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  185.898801][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  186.868293][ T5803] netlink: 'syz.2.437': attribute type 10 has an invalid length.
[  187.054044][ T5803] team0: Device gre0 is of different type
[  188.803527][ T5838] serio: Serial port ptm0
[  189.639903][ T5844] loop4: detected capacity change from 0 to 256
[  189.662075][ T5844] exfat: Deprecated parameter 'utf8'
[  189.693555][ T5844] exfat: Deprecated parameter 'utf8'
[  189.741036][ T5844] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  189.873678][ T5848] loop3: detected capacity change from 0 to 256
[  189.913157][ T5848] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d)
[  190.811286][ T5856] loop2: detected capacity change from 0 to 256
[  192.555765][ T5868] loop3: detected capacity change from 0 to 512
[  192.634588][ T5868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  192.676541][ T5868] System zones: 1-12
[  192.684164][ T5870] loop2: detected capacity change from 0 to 2048
[  192.716704][ T5868] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.459: missing EA_INODE flag
[  192.812537][ T5868] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.459: error while reading EA inode 12 err=-117
[  192.823490][ T5870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  192.833359][ T5870] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.867196][ T5868] EXT4-fs (loop3): 1 orphan inode deleted
[  192.872990][ T5868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  192.893374][ T5870] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.460: bg 0: block 345: padding at end of block bitmap is not set
[  192.992012][ T5870] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  193.151193][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  193.561773][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[  193.703604][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  194.241124][ T5898] serio: Serial port ptm0
[  194.905889][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.912211][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  195.206816][ T5890] serio: Serial port ptm0
[  200.738450][ T5955] serio: Serial port ptm0
[  200.765772][ T5956] serio: Serial port ptm1
[  201.579292][ T5936] loop3: detected capacity change from 0 to 40427
[  201.650873][ T5936] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  201.676728][ T5936] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  201.727532][ T5936] F2FS-fs (loop3): invalid crc value
[  201.840168][ T5936] F2FS-fs (loop3): Found nat_bits in checkpoint
[  205.843196][ T6000] input: syz0 as /devices/virtual/input/input6
[  206.114817][ T5985] loop1: detected capacity change from 0 to 40427
[  206.143212][ T5985] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  206.207160][ T5985] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  206.410701][ T5985] F2FS-fs (loop1): Found nat_bits in checkpoint
[  206.673463][ T6011] device syz_tun entered promiscuous mode
[  206.713879][ T5985] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  206.743639][ T5985] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  207.843402][ T6025] loop2: detected capacity change from 0 to 512
[  210.162146][ T6025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  210.187709][ T6031] input: syz1 as /devices/virtual/input/input7
[  210.678328][ T5020] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  210.895675][ T5020] usb 1-1: not running at top speed; connect to a high speed hub
[  210.923481][ T5020] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.964990][ T5020] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  210.977276][ T5020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.991254][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  211.937070][ T5020] usb 1-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  211.944056][ T5020] usb 1-1: No streaming interface found for terminal 2.
[  212.073765][ T5020] usb 1-1: USB disconnect, device number 2
[  213.604703][  T129] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  213.829945][ T6062] loop2: detected capacity change from 0 to 256
[  213.866611][ T6062] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  213.986025][  T129] usb 1-1: unable to get BOS descriptor or descriptor too short
[  214.002678][  T129] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  214.029551][  T129] usb 1-1: string descriptor 0 read error: -22
[  214.035870][  T129] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  214.052628][ T6075] serio: Serial port ptm0
[  214.059319][  T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.092458][  T129] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  214.291586][  T129] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  214.318607][ T6082] loop2: detected capacity change from 0 to 512
[  215.076250][ T6082] EXT4-fs: Ignoring removed bh option
[  215.123718][ T6082] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  215.270457][ T6082] EXT4-fs (loop2): 1 truncate cleaned up
[  215.307250][ T6082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  215.756198][  T129] usb 1-1: USB disconnect, device number 3
[  215.778909][ T6096] loop1: detected capacity change from 0 to 512
[  215.956803][ T6096] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.526: missing EA_INODE flag
[  215.981044][ T6096] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.526: error while reading EA inode 12 err=-117
[  216.008887][ T6096] EXT4-fs (loop1): 1 orphan inode deleted
[  216.014883][ T6096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  216.045083][ T6100] Cannot find set identified by id 65535 to match
[  216.086320][   T27] audit: type=1800 audit(1790255273.588:16): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.526" name="file1" dev="loop1" ino=15 res=0 errno=0
[  216.131332][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  216.230125][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  216.275720][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  217.811324][ T6125] loop3: detected capacity change from 0 to 512
[  217.953717][ T6125] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  217.987015][ T6125] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  218.177495][ T6125] EXT4-fs error (device loop3): __ext4_new_inode:1083: comm syz.3.534: reserved inode found cleared - inode=18
[  218.724614][ T6136] loop4: detected capacity change from 0 to 512
[  219.052951][ T6136] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  220.811432][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  221.001441][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  221.342805][ T6145] loop3: detected capacity change from 0 to 512
[  221.635160][ T6145] EXT4-fs (loop3): orphan cleanup on readonly fs
[  221.683514][ T6151] loop2: detected capacity change from 0 to 256
[  221.706978][ T6145] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  221.869830][ T6151] exfat: Deprecated parameter 'namecase'
[  221.921824][ T6145] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  221.984345][ T6151] exfat: Deprecated parameter 'namecase'
[  222.077087][ T6145] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  222.094042][ T6151] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  222.239589][ T6145] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.538: bad orphan inode 14
[  222.295307][ T6145] ext4_test_bit(bit=13, block=18) = 1
[  222.300727][ T6145] is_bad_inode(inode)=0
[  222.325262][ T6145] NEXT_ORPHAN(inode)=0
[  222.334720][ T6145] max_ino=32
[  222.347509][ T6145] i_nlink=1
[  222.380926][ T6145] EXT4-fs (loop3): 1 truncate cleaned up
[  222.405211][ T6145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  222.521703][ T6145] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz.3.538: deleted inode referenced: 12
[  222.533343][  T129] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  222.661139][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  222.709910][  T129] usb 2-1: unable to get BOS descriptor or descriptor too short
[  222.726234][  T129] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  222.775099][   T27] audit: type=1800 audit(1790255280.268:17): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.544" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  223.077490][  T129] usb 2-1: string descriptor 0 read error: -22
[  223.228405][  T129] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  223.354521][  T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.431904][  T129] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  224.245899][  T129] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  224.543453][ T6177] loop2: detected capacity change from 0 to 2048
[  224.575962][ T4266] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  225.830790][  T129] usb 2-1: USB disconnect, device number 3
[  226.434188][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.501332][ T6184] loop1: detected capacity change from 0 to 2048
[  226.650774][ T6184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  226.877259][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  228.195436][ T6198] loop2: detected capacity change from 0 to 512
[  228.221317][ T6198] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  228.356459][ T6198] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.554: bg 0: block 104: invalid block bitmap
[  228.452934][ T6198] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  228.479577][ T6198] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.554: invalid indirect mapped block 1 (level 1)
[  228.586878][ T6198] EXT4-fs (loop2): 1 truncate cleaned up
[  228.592627][ T6198] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  228.847529][   T27] audit: type=1800 audit(1790255286.288:18): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  229.587129][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  229.711115][ T4318] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  230.576948][ T4318] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.644568][ T4318] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.684923][ T4318] usb 2-1: config 0 interface 0 has no altsetting 0
[  230.687514][ T6229] loop3: detected capacity change from 0 to 1024
[  230.692148][ T4318] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  230.749235][ T6229] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  230.820236][ T6229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  230.834302][ T6229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  230.845284][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.890927][ T4318] usb 2-1: config 0 descriptor??
[  230.898128][ T6229] System zones: 0-1, 3-36
[  230.911968][ T6229] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  231.904535][ T6180] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  231.997984][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  232.020563][ T6247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  232.059793][ T6247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  232.117019][ T6180] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  232.128354][ T6180] usb 1-1: config 0 has no interface number 0
[  232.138678][ T6180] usb 1-1: config 0 interface 41 has no altsetting 0
[  232.249089][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.299100][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.340592][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.365304][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.391225][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.442523][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.467583][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.493589][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.525003][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.556968][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.586750][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.604272][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.635716][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.668283][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.697860][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.731752][ T4318] sony 0003:054C:09CC.0001: unknown main item tag 0x0
[  232.831644][ T4318] sony 0003:054C:09CC.0001: hidraw0: USB HID vb6.2c Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0
[  232.850705][ T4318] sony 0003:054C:09CC.0001: failed to claim input
[  233.066380][ T4318] usb 2-1: USB disconnect, device number 4
[  233.194233][ T6180] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  233.203520][ T6180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.213518][ T6180] usb 1-1: Product: syz
[  233.217876][ T6180] usb 1-1: Manufacturer: syz
[  233.222590][ T6180] usb 1-1: SerialNumber: syz
[  233.230332][ T6180] usb 1-1: config 0 descriptor??
[  233.322760][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  233.469391][ T6264] overlayfs: workdir and upperdir must be separate subtrees
[  233.634879][   T27] audit: type=1800 audit(1790255291.088:19): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.572" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  234.337253][ T6180] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  234.636206][ T6281] loop1: detected capacity change from 0 to 4096
[  234.766333][ T6281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  235.019495][ T6289] loop4: detected capacity change from 0 to 512
[  235.126305][ T6289] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.581: inode has both inline data and extents flags
[  235.162780][ T6289] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.581: couldn't read orphan inode 15 (err -117)
[  235.192377][ T6289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  235.295134][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  235.523566][ T4399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  235.646784][ T6299] UDC core: g1: couldn't find an available UDC or it's busy
[  235.777311][ T4399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.272198][ T4399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.282641][ T4399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.361395][ T6180] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  236.402801][ T6180] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  236.412848][ T6180] CoreChips: probe of 1-1:0.41 failed with error -71
[  236.456435][ T6180] usb 1-1: USB disconnect, device number 4
[  236.461569][ T6305] loop3: detected capacity change from 0 to 16
[  236.506722][ T6305] erofs: (device loop3): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel
[  236.583111][ T4399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.629476][ T4399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.683052][ T6311] loop2: detected capacity change from 0 to 16
[  236.737369][ T6311] erofs: (device loop2): mounted with root inode @ nid 36.
[  236.781852][ T6311] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  236.809004][ T4399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.829625][ T6311] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  236.873495][ T4399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.476951][ T6318] loop4: detected capacity change from 0 to 256
[  237.802882][ T6330] loop3: detected capacity change from 0 to 512
[  237.886577][ T6330] EXT4-fs warning (device loop3): ext4_multi_mount_protect:324: fsck is running on the filesystem
[  237.946706][ T6330] EXT4-fs warning (device loop3): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu;v-desk.muc.corp.google.cÿÿ, last update device: loop14
[  238.775228][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.785473][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.794051][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.803289][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.118595][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  239.125966][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.650332][ T6338] chnl_net:caif_netlink_parms(): no params data found
[  240.002867][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.024186][ T6360] Config c/1 of g1 needs at least one function.
[  240.040899][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.059533][ T6360] udc dummy_udc.0: failed to start g1: -22
[  240.081027][ T6338] device bridge_slave_0 entered promiscuous mode
[  240.088452][ T6360] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  240.106900][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.127103][ T6360] UDC core: g1: couldn't find an available UDC or it's busy
[  240.144578][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.181103][ T6338] device bridge_slave_1 entered promiscuous mode
[  241.153832][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.226614][ T4279] Bluetooth: hci1: command 0x0409 tx timeout
[  241.273235][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.338365][ T6378] loop4: detected capacity change from 0 to 2048
[  241.373666][ T4262] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  241.987349][ T6338] team0: Port device team_slave_0 added
[  242.495043][ T6338] team0: Port device team_slave_1 added
[  243.062103][ T6395] overlayfs: missing 'workdir'
[  243.151153][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.194417][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.270238][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.300260][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.307396][ T4279] Bluetooth: hci1: command 0x041b tx timeout
[  243.312654][ T6401] loop3: detected capacity change from 0 to 512
[  243.339822][ T6401] EXT4-fs warning (device loop3): ext4_multi_mount_protect:324: fsck is running on the filesystem
[  243.359400][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.392817][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.424461][ T6401] EXT4-fs warning (device loop3): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu;v-desk.muc.corp.google.cÿÿ, last update device: loop14
[  245.180691][ T6338] device hsr_slave_0 entered promiscuous mode
[  245.214880][ T6338] device hsr_slave_1 entered promiscuous mode
[  245.362938][ T6338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.384533][ T4279] Bluetooth: hci1: command 0x040f tx timeout
[  245.851643][ T6338] Cannot create hsr debugfs directory
[  246.421191][ T6426] loop4: detected capacity change from 0 to 128
[  247.466382][ T4279] Bluetooth: hci1: command 0x0419 tx timeout
[  248.530600][ T6454] loop4: detected capacity change from 0 to 512
[  248.580037][ T6338] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  248.597278][ T6454] FAT-fs (loop4): Directory bread(block 2080) failed
[  248.606778][ T6454] FAT-fs (loop4): Directory bread(block 2081) failed
[  248.638673][ T6454] FAT-fs (loop4): Directory bread(block 2082) failed
[  248.654112][ T6338] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  248.672315][ T6454] FAT-fs (loop4): Directory bread(block 2083) failed
[  248.722677][ T6454] FAT-fs (loop4): Directory bread(block 2084) failed
[  248.732797][ T6454] FAT-fs (loop4): Directory bread(block 2085) failed
[  248.760211][ T6454] FAT-fs (loop4): Directory bread(block 2086) failed
[  248.780355][ T6454] FAT-fs (loop4): Directory bread(block 2087) failed
[  248.789627][ T4399] device hsr_slave_0 left promiscuous mode
[  248.816867][ T6454] FAT-fs (loop4): Directory bread(block 2080) failed
[  248.833206][ T4399] device hsr_slave_1 left promiscuous mode
[  248.845277][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.852765][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.894571][ T6454] FAT-fs (loop4): Directory bread(block 2081) failed
[  248.921702][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.954808][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.984928][ T4399] device bridge_slave_1 left promiscuous mode
[  248.993092][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.119703][ T4399] device bridge_slave_0 left promiscuous mode
[  249.185208][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.090636][ T4399] device veth1_macvtap left promiscuous mode
[  250.165786][ T4399] device veth0_macvtap left promiscuous mode
[  250.173168][ T4399] device veth1_vlan left promiscuous mode
[  250.195260][ T4399] device veth0_vlan left promiscuous mode
[  250.906393][ T6487] loop2: detected capacity change from 0 to 128
[  251.527416][ T6487] EXT4-fs (loop2): Test dummy encryption mode enabled
[  251.573180][ T6487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  251.593615][ T6487] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  252.647629][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  252.659987][ T4399] team0 (unregistering): Port device team_slave_1 removed
[  252.736683][ T4399] team0 (unregistering): Port device team_slave_0 removed
[  252.781366][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.851448][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.139169][ T4399] bond0 (unregistering): Released all slaves
[  253.228193][ T6338] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  253.238186][ T6338] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  253.262489][ T6507] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  253.278308][ T6510] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  253.704611][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.797044][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  254.860342][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  254.885698][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'.
[  255.095454][ T6533] loop2: detected capacity change from 0 to 512
[  255.177262][ T6338] 8021q: adding VLAN 0 to HW filter on device team0
[  255.280784][ T6533] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: fsck is running on the filesystem
[  255.324507][ T6533] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu;v-desk.muc.corp.google.cÿÿ, last update device: loop14
[  255.418015][ T6338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  255.471283][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.477949][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.752837][ T6338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.253360][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  257.305888][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  257.364220][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.371294][ T6573] loop2: detected capacity change from 0 to 512
[  257.377668][ T6166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.457213][ T6573] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.649: missing EA_INODE flag
[  257.550238][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  257.550258][ T6573] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.649: error while reading EA inode 12 err=-117
[  257.559157][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  257.579664][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.586815][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.615521][ T6583] loop3: detected capacity change from 0 to 1024
[  257.622371][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  257.632086][ T6583] EXT4-fs: quotafile must be on filesystem root
[  257.641881][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  257.660696][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  257.674129][ T6573] EXT4-fs (loop2): 1 orphan inode deleted
[  257.677035][ T6583] syz.3.650: attempt to access beyond end of device
[  257.677035][ T6583] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0
[  257.700728][ T6573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  257.729307][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  257.755191][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  257.773454][ T6583] EXT4-fs (loop7): unable to read superblock
[  257.789963][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  257.819836][   T27] audit: type=1800 audit(1790255315.318:20): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.649" name="file1" dev="loop2" ino=15 res=0 errno=0
[  257.828771][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  257.887383][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  257.896372][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  257.906410][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  257.955881][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  257.976819][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  257.998015][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  258.055385][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  258.069265][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  258.085177][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  258.110019][ T6588] loop2: detected capacity change from 0 to 2048
[  258.127287][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.164924][ T4262] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  259.811896][ T6604] loop4: detected capacity change from 0 to 1024
[  259.819120][ T6604] EXT4-fs: Ignoring removed oldalloc option
[  259.825088][ T6604] EXT4-fs: Ignoring removed oldalloc option
[  259.849352][ T6604] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  259.970019][ T6604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  260.063971][ T6604] FAULT_INJECTION: forcing a failure.
[  260.063971][ T6604] name failslab, interval 1, probability 0, space 0, times 0
[  260.077373][ T6604] CPU: 1 PID: 6604 Comm: syz.4.656 Not tainted syzkaller #0
[  260.083593][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  260.084661][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  260.084724][ T6604] Call Trace:
[  260.084730][ T6604]  <TASK>
[  260.084738][ T6604]  dump_stack_lvl+0x188/0x24e
[  260.113145][ T6604]  ? show_regs_print_info+0x12/0x12
[  260.118365][ T6604]  ? load_image+0x410/0x410
[  260.122890][ T6604]  ? __might_sleep+0xd0/0xd0
[  260.127492][ T6604]  ? __lock_acquire+0x7c40/0x7c40
[  260.132539][ T6604]  should_fail_ex+0x390/0x4c0
[  260.137245][ T6604]  should_failslab+0x5/0x20
[  260.141762][ T6604]  slab_pre_alloc_hook+0x59/0x300
[  260.146818][ T6604]  ? ops_init+0x8a/0x5e0
[  260.151084][ T6604]  __kmem_cache_alloc_node+0x4f/0x270
[  260.156482][ T6604]  ? ops_init+0x8a/0x5e0
[  260.160750][ T6604]  __kmalloc+0xa3/0x240
[  260.164936][ T6604]  ? vlan_init_net+0x156/0x190
[  260.169726][ T6604]  ops_init+0x8a/0x5e0
[  260.173828][ T6604]  setup_net+0x4f2/0xbd0
[  260.178093][ T6604]  ? copy_net_ns+0x5b0/0x5b0
[  260.182705][ T6604]  ? copy_net_ns+0x324/0x5b0
[  260.187314][ T6604]  ? down_read_killable+0x1cc/0x340
[  260.192538][ T6604]  copy_net_ns+0x33e/0x5b0
[  260.196980][ T6604]  create_new_namespaces+0x3ce/0x700
[  260.202296][ T6604]  unshare_nsproxy_namespaces+0x116/0x160
[  260.208035][ T6604]  ksys_unshare+0x4f6/0x8e0
[  260.212567][ T6604]  ? sighand_ctor+0x40/0x40
[  260.217091][ T6604]  ? lock_chain_count+0x20/0x20
[  260.221967][ T6604]  ? syscall_enter_from_user_mode+0x21/0x80
[  260.227884][ T6604]  __x64_sys_unshare+0x34/0x40
[  260.232660][ T6604]  do_syscall_64+0x4c/0xa0
[  260.237092][ T6604]  ? clear_bhb_loop+0x60/0xb0
[  260.241791][ T6604]  ? clear_bhb_loop+0x60/0xb0
[  260.246490][ T6604]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  260.252421][ T6604] RIP: 0033:0x7ffa0419e159
[  260.256855][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.276482][ T6604] RSP: 002b:00007ffa0500f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  260.284918][ T6604] RAX: ffffffffffffffda RBX: 00007ffa04425fa0 RCX: 00007ffa0419e159
[  260.292904][ T6604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  260.300887][ T6604] RBP: 00007ffa0423506b R08: 0000000000000000 R09: 0000000000000000
[  260.308872][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.316855][ T6604] R13: 00007ffa04426038 R14: 00007ffa04425fa0 R15: 00007ffc93be7258
[  260.324854][ T6604]  </TASK>
[  260.335745][ T4320] usb 4-1: Using ep0 maxpacket: 16
[  260.364178][ T4320] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  260.396686][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.531429][ T4320] usb 4-1: Product: syz
[  260.539743][ T4320] usb 4-1: Manufacturer: syz
[  260.544703][ T4320] usb 4-1: SerialNumber: syz
[  260.573680][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  260.647643][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  260.694228][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  260.752732][ T6618] loop4: detected capacity change from 0 to 512
[  260.761286][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  260.777078][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  260.807036][ T6338] device veth0_vlan entered promiscuous mode
[  260.818970][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  260.826405][ T6618] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: fsck is running on the filesystem
[  260.847292][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  260.869031][ T6618] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu;v-desk.muc.corp.google.cÿÿ, last update device: loop14
[  260.901617][ T6338] device veth1_vlan entered promiscuous mode
[  260.980340][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  260.999576][ T4320] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[  261.034035][ T4320] usb 4-1: USB disconnect, device number 4
[  261.135198][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  261.406203][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  261.664436][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  261.707815][ T6338] device veth0_macvtap entered promiscuous mode
[  261.739600][ T6338] device veth1_macvtap entered promiscuous mode
[  261.901645][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  261.960538][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.024513][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.035194][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.045111][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.064729][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.250087][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.836499][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.020312][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.080005][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.263369][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.272161][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.325977][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.362501][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.375302][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.395594][ T6338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.424497][ T6338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.439628][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.458872][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  264.480976][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  264.508483][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  264.539385][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  264.565419][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  264.583063][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  264.622407][ T6338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.664046][ T6338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.673328][ T6338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.687307][ T6338] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.789482][ T6654] Config c/1 of g1 needs at least one function.
[  264.827750][ T6654] udc dummy_udc.0: failed to start g1: -22
[  264.833612][ T6654] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  264.875664][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.883518][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.905030][ T6654] UDC core: g1: couldn't find an available UDC or it's busy
[  264.929972][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  264.994160][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.022492][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.068132][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  265.177433][ T6666] loop4: detected capacity change from 0 to 256
[  265.239559][ T6666] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  265.586433][   T27] audit: type=1800 audit(1790255323.048:21): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.587" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  266.104421][  T127] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  266.160374][ T6680] loop4: detected capacity change from 0 to 512
[  266.176740][ T6680] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: fsck is running on the filesystem
[  266.270040][ T6680] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu;v-desk.muc.corp.google.cÿÿ, last update device: loop14
[  266.327636][  T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.368171][  T127] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.386911][  T127] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  266.455787][  T127] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  266.484601][  T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.502897][  T127] usb 4-1: Product: syz
[  266.517920][  T127] usb 4-1: Manufacturer: syz
[  266.522555][  T127] usb 4-1: SerialNumber: syz
[  266.575769][  T127] cdc_mbim 4-1:1.0: skipping garbage
[  266.854635][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  267.056197][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.103872][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.162642][  T127] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[  267.174890][  T127] cdc_mbim 4-1:1.0: bind() failure
[  267.180409][ T4320] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  267.186598][ T6697] loop4: detected capacity change from 0 to 512
[  267.353414][ T4320] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  267.406704][ T6697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  267.443131][  T127] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  267.519862][ T4320] usb 3-1: Manufacturer: syz
[  267.560325][  T127] cdc_ncm 4-1:1.1: bind() failure
[  267.585817][ T6697] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  267.720132][ T4320] usb 3-1: config 0 descriptor??
[  267.853470][  T127] usb 4-1: USB disconnect, device number 5
[  268.456945][ T6684] loop5: detected capacity change from 0 to 40427
[  268.472255][ T6684] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  268.480108][ T6684] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  268.492426][ T6684] F2FS-fs (loop5): invalid crc value
[  268.546903][ T6684] F2FS-fs (loop5): Found nat_bits in checkpoint
[  268.822149][ T6684] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  268.858748][ T6684] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  269.333745][ T4320] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71
[  269.335349][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  269.354682][ T4320] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71
[  270.100367][ T6720] Config c/1 of g1 needs at least one function.
[  270.146677][ T6720] udc dummy_udc.0: failed to start g1: -22
[  270.169926][ T6720] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  270.219132][ T6720] UDC core: g1: couldn't find an available UDC or it's busy
[  270.564432][ T4320] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71
[  270.572594][ T4320] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[  270.580190][ T4320] uclogic: probe of 0003:256C:006D.0002 failed with error -71
[  270.598108][ T4320] usb 3-1: USB disconnect, device number 2
[  271.143382][ T6739] device bridge0 entered promiscuous mode
[  271.237084][ T6739] device bridge0 left promiscuous mode
[  271.500820][ T4274] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  273.302791][ T4274] usb 5-1: not running at top speed; connect to a high speed hub
[  273.375757][ T6757] loop2: detected capacity change from 0 to 1024
[  273.408900][ T4274] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.575517][   T27] audit: type=1800 audit(1790255331.038:22): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.690" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  273.610383][ T4274] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  274.050748][ T6757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  274.117950][ T4274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.143282][ T6757] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.170158][   T27] audit: type=1800 audit(1790255331.668:23): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.692" name="file1" dev="loop2" ino=15 res=0 errno=0
[  274.193186][ T4274] usb 5-1: can't set config #1, error -71
[  274.894189][ T4274] usb 5-1: USB disconnect, device number 2
[  274.938166][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  275.001516][ T6778] Config c/1 of g1 needs at least one function.
[  275.046488][ T6780] loop3: detected capacity change from 0 to 512
[  275.073093][ T6778] udc dummy_udc.0: failed to start g1: -22
[  275.105790][ T6778] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  275.117979][ T6782] FAULT_INJECTION: forcing a failure.
[  275.117979][ T6782] name failslab, interval 1, probability 0, space 0, times 0
[  275.131732][ T6778] UDC core: g1: couldn't find an available UDC or it's busy
[  275.140517][ T6780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  275.161876][ T6780] EXT4-fs (loop3): Invalid default hash set in the superblock
[  275.188426][ T6782] CPU: 0 PID: 6782 Comm: syz.2.696 Not tainted syzkaller #0
[  275.195753][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  275.205820][ T6782] Call Trace:
[  275.209111][ T6782]  <TASK>
[  275.212054][ T6782]  dump_stack_lvl+0x188/0x24e
[  275.216787][ T6782]  ? show_regs_print_info+0x12/0x12
[  275.221986][ T6782]  ? load_image+0x410/0x410
[  275.226495][ T6782]  ? __might_sleep+0xd0/0xd0
[  275.231095][ T6782]  ? __lock_acquire+0x7c40/0x7c40
[  275.236122][ T6782]  should_fail_ex+0x390/0x4c0
[  275.240798][ T6782]  should_failslab+0x5/0x20
[  275.245290][ T6782]  slab_pre_alloc_hook+0x59/0x300
[  275.250322][ T6782]  ? save_fpregs_to_fpstate+0x9a/0x1f0
[  275.255866][ T6782]  kmem_cache_alloc+0x56/0x2f0
[  275.260623][ T6782]  ? mas_alloc_nodes+0x2ec/0x880
[  275.265557][ T6782]  mas_alloc_nodes+0x2ec/0x880
[  275.270335][ T6782]  mas_preallocate+0x162/0x3b0
[  275.275107][ T6782]  do_mas_align_munmap+0x239/0x12d0
[  275.280310][ T6782]  ? do_mas_munmap+0x2b0/0x2b0
[  275.285085][ T6782]  ? mtree_range_walk+0x664/0x780
[  275.290115][ T6782]  ? mas_walk+0x15f/0x180
[  275.294440][ T6782]  ? mas_find+0x1ba/0x220
[  275.298767][ T6782]  do_mas_munmap+0x240/0x2b0
[  275.303365][ T6782]  mmap_region+0x7ab/0x1c50
[  275.307871][ T6782]  ? file_mmap_ok+0x170/0x170
[  275.312546][ T6782]  ? vma_expand+0x850/0x850
[  275.317041][ T6782]  ? cap_mmap_addr+0x153/0x2c0
[  275.321813][ T6782]  do_mmap+0x9ce/0x10d0
[  275.325972][ T6782]  ? mlock_future_check+0x100/0x100
[  275.331162][ T6782]  ? ima_file_mmap+0xf7/0x140
[  275.335835][ T6782]  ? ima_file_free+0x3e0/0x3e0
[  275.340599][ T6782]  vm_mmap_pgoff+0x1c1/0x2d0
[  275.345199][ T6782]  ? account_locked_vm+0xe0/0xe0
[  275.350139][ T6782]  ? ksys_mmap_pgoff+0xef/0x720
[  275.354990][ T6782]  ? lockdep_hardirqs_on+0x94/0x140
[  275.360185][ T6782]  do_syscall_64+0x4c/0xa0
[  275.364592][ T6782]  ? clear_bhb_loop+0x60/0xb0
[  275.369256][ T6782]  ? clear_bhb_loop+0x60/0xb0
[  275.373921][ T6782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.379814][ T6782] RIP: 0033:0x7ff6ae59e159
[  275.384221][ T6782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.403818][ T6782] RSP: 002b:00007ff6af42e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  275.412225][ T6782] RAX: ffffffffffffffda RBX: 00007ff6ae825fa0 RCX: 00007ff6ae59e159
[  275.420188][ T6782] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000001000
[  275.428147][ T6782] RBP: 00007ff6ae63506b R08: ffffffffffffffff R09: 0000000001000000
[  275.436111][ T6782] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000000
[  275.444073][ T6782] R13: 00007ff6ae826038 R14: 00007ff6ae825fa0 R15: 00007ffd181782d8
[  275.452045][ T6782]  </TASK>
[  275.728603][ T6792] loop5: detected capacity change from 0 to 512
[  275.758900][ T6792] EXT4-fs warning (device loop5): ext4_multi_mount_protect:324: fsck is running on the filesystem
[  275.777411][ T6792] EXT4-fs warning (device loop5): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu;v-desk.muc.corp.google.cÿÿ, last update device: loop14
[  279.108142][   T27] audit: type=1800 audit(1790255336.558:24): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.703" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  279.504507][   T27] audit: type=1800 audit(1790255336.858:25): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.703" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  279.570983][ T6834] Config c/1 of g1 needs at least one function.
[  279.614011][ T6834] udc dummy_udc.0: failed to start g1: -22
[  279.630179][ T6834] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  279.682384][ T6834] UDC core: g1: couldn't find an available UDC or it's busy
[  279.886370][ T6850] loop5: detected capacity change from 0 to 512
[  279.920204][ T6850] EXT4-fs warning (device loop5): ext4_multi_mount_protect:324: fsck is running on the filesystem
[  279.949050][ T6850] EXT4-fs warning (device loop5): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu;v-desk.muc.corp.google.cÿÿ, last update device: loop14
[  280.501980][ T6872] loop2: detected capacity change from 0 to 512
[  280.920081][ T6872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  280.944124][ T6872] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.984151][ T6872] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  281.124957][   T27] audit: type=1800 audit(1790255344.607:26): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.720" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  281.473940][ T6872] EXT4-fs (loop2): Remounting filesystem read-only
[  281.730348][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  282.524083][ T6915] loop2: detected capacity change from 0 to 1024
[  282.700083][ T6915] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  282.951048][ T6915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  283.259546][ T6915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  283.374519][ T6915] System zones: 0-1, 3-36
[  283.470140][ T6915] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  283.556521][ T6926] loop5: detected capacity change from 0 to 512
[  283.567287][   T27] audit: type=1800 audit(1790255353.071:27): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.727" name="file1" dev="loop2" ino=15 res=0 errno=0
[  283.768693][ T6926] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  283.821888][ T6926] EXT4-fs (loop5): invalid journal inode
[  283.940919][ T6926] EXT4-fs (loop5): can't get journal size
[  284.146676][ T6926] EXT4-fs (loop5): 1 truncate cleaned up
[  284.162605][ T6926] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  284.306277][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  284.469962][ T6338] EXT4-fs (loop5): unmounting filesystem.
[  285.434231][ T6955] loop5: detected capacity change from 0 to 256
[  285.499436][ T6955] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  285.721417][   T27] audit: type=1800 audit(1790255355.221:28): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.733" name="file7" dev="sda1" ino=2048 res=0 errno=0
[  285.834456][   T27] audit: type=1800 audit(1790255355.261:29): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.733" name="file7" dev="sda1" ino=2048 res=0 errno=0
[  286.026130][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.737'.
[  286.691462][ T6973] loop3: detected capacity change from 0 to 256
[  286.710023][ T6971] loop2: detected capacity change from 0 to 8192
[  286.841029][ T6973] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  286.902257][ T6971] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  287.325240][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  287.356652][ T6973] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  287.369388][ T6973] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  287.382020][ T6973] exFAT-fs (loop3): failed to load alloc-bitmap
[  287.396576][ T6973] exFAT-fs (loop3): failed to recognize exfat type
[  287.404660][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  287.418173][ T6971] FAT-fs (loop2): Filesystem has been set read-only
[  287.436595][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  287.516406][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  287.532809][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  287.541236][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  287.573314][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  287.664457][ T4321] usb 5-1: Using ep0 maxpacket: 32
[  287.672027][ T4321] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11
[  287.703715][ T4321] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  287.734819][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  287.764512][ T6983] 9pnet_fd: Insufficient options for proto=fd
[  288.161156][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.169440][ T4321] usb 5-1: config 0 interface 0 has no altsetting 0
[  288.184409][ T4321] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  288.193830][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.237406][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.245983][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.253813][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.295408][ T4321] usb 5-1: config 0 descriptor??
[  288.312908][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.369375][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.408390][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.467421][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.517690][ T6971] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  288.599495][   T27] audit: type=1800 audit(1790255358.101:30): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.740" name="file2" dev="loop2" ino=1048604 res=0 errno=0
[  288.711997][ T4321] logitech 0003:046D:C24F.0003: unknown main item tag 0x2
[  288.732296][ T4321] logitech 0003:046D:C24F.0003: unknown main item tag 0x0
[  288.766690][ T6971] syz.2.740 (6971) used greatest stack depth: 19376 bytes left
[  288.781028][ T4321] logitech 0003:046D:C24F.0003: unknown main item tag 0x0
[  288.831999][ T4321] input: HID 046d:c24f as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C24F.0003/input/input8
[  289.096985][ T4321] logitech 0003:046D:C24F.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c24f] on usb-dummy_hcd.4-1/input0
[  289.160773][ T4321] logitech 0003:046D:C24F.0003: implement() called with too large value 245 (n: 0)! (kworker/1:4)
[  289.232631][ T4321] logitech 0003:046D:C24F.0003: implement() called with too large value 248 (n: 0)! (kworker/1:4)
[  289.243278][ T4321] logitech 0003:046D:C24F.0003: implement() called with too large value 129 (n: 0)! (kworker/1:4)
[  289.253879][ T4321] logitech 0003:046D:C24F.0003: implement() called with too large value 132 (n: 0)! (kworker/1:4)
[  289.264483][ T4321] logitech 0003:046D:C24F.0003: implement() called with too large value 3 (n: 0)! (kworker/1:4)
[  289.894836][   T27] audit: type=1800 audit(1790255359.371:31): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.752" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[  289.928569][ T7011] loop4: detected capacity change from 0 to 1024
[  289.936479][ T7011] EXT4-fs: Ignoring removed oldalloc option
[  289.942403][ T7011] EXT4-fs: Ignoring removed oldalloc option
[  289.967844][ T7011] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  290.028191][ T7011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  290.130324][ T7011] FAULT_INJECTION: forcing a failure.
[  290.130324][ T7011] name failslab, interval 1, probability 0, space 0, times 0
[  290.143038][ T7011] CPU: 0 PID: 7011 Comm: syz.4.751 Not tainted syzkaller #0
[  290.150342][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  290.160407][ T7011] Call Trace:
[  290.163697][ T7011]  <TASK>
[  290.166632][ T7011]  dump_stack_lvl+0x188/0x24e
[  290.171445][ T7011]  ? show_regs_print_info+0x12/0x12
[  290.176661][ T7011]  ? load_image+0x410/0x410
[  290.181187][ T7011]  ? __might_sleep+0xd0/0xd0
[  290.185782][ T7011]  ? __lock_acquire+0x7c40/0x7c40
[  290.190822][ T7011]  should_fail_ex+0x390/0x4c0
[  290.195521][ T7011]  should_failslab+0x5/0x20
[  290.200027][ T7011]  slab_pre_alloc_hook+0x59/0x300
[  290.205076][ T7011]  ? ops_init+0x8a/0x5e0
[  290.209425][ T7011]  __kmem_cache_alloc_node+0x4f/0x270
[  290.214809][ T7011]  ? ops_init+0x8a/0x5e0
[  290.219061][ T7011]  __kmalloc+0xa3/0x240
[  290.223228][ T7011]  ? vlan_init_net+0x156/0x190
[  290.228000][ T7011]  ops_init+0x8a/0x5e0
[  290.232094][ T7011]  setup_net+0x4f2/0xbd0
[  290.236351][ T7011]  ? copy_net_ns+0x5b0/0x5b0
[  290.240954][ T7011]  ? copy_net_ns+0x324/0x5b0
[  290.245561][ T7011]  ? down_read_killable+0x1cc/0x340
[  290.250776][ T7011]  copy_net_ns+0x33e/0x5b0
[  290.255211][ T7011]  create_new_namespaces+0x3ce/0x700
[  290.260515][ T7011]  unshare_nsproxy_namespaces+0x116/0x160
[  290.266245][ T7011]  ksys_unshare+0x4f6/0x8e0
[  290.270767][ T7011]  ? sighand_ctor+0x40/0x40
[  290.275276][ T7011]  ? lock_chain_count+0x20/0x20
[  290.280138][ T7011]  ? syscall_enter_from_user_mode+0x21/0x80
[  290.286051][ T7011]  __x64_sys_unshare+0x34/0x40
[  290.290830][ T7011]  do_syscall_64+0x4c/0xa0
[  290.295260][ T7011]  ? clear_bhb_loop+0x60/0xb0
[  290.299947][ T7011]  ? clear_bhb_loop+0x60/0xb0
[  290.304632][ T7011]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  290.310552][ T7011] RIP: 0033:0x7ffa0419e159
[  290.314981][ T7011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.334599][ T7011] RSP: 002b:00007ffa04fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  290.343021][ T7011] RAX: ffffffffffffffda RBX: 00007ffa04426090 RCX: 00007ffa0419e159
[  290.351007][ T7011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  290.359000][ T7011] RBP: 00007ffa0423506b R08: 0000000000000000 R09: 0000000000000000
[  290.366981][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.374959][ T7011] R13: 00007ffa04426128 R14: 00007ffa04426090 R15: 00007ffc93be7258
[  290.382952][ T7011]  </TASK>
[  291.161446][ T4321] logitech 0003:046D:C24F.0003: implement() called with too large value 248 (n: 0)! (kworker/1:4)
[  291.172094][ T4321] logitech 0003:046D:C24F.0003: implement() called with too large value 18 (n: 0)! (kworker/1:4)
[  291.190652][ T4321] logitech 0003:046D:C24F.0003: Force feedback support for Logitech Gaming Wheels
[  291.206077][ T4321] usb 5-1: USB disconnect, device number 3
[  291.960348][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  292.125748][ T7035] Config c/1 of g1 needs at least one function.
[  292.232428][ T7035] udc dummy_udc.0: failed to start g1: -22
[  292.254731][ T4321] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  292.353476][ T7035] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  292.361499][ T7035] UDC core: g1: couldn't find an available UDC or it's busy
[  292.389063][ T7023] fido_id[7023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  292.494531][ T4321] usb 6-1: Using ep0 maxpacket: 16
[  292.502886][ T4321] usb 6-1: unable to get BOS descriptor or descriptor too short
[  292.545003][ T4321] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  292.625794][ T4321] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  292.644515][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.652733][ T4321] usb 6-1: Product: syz
[  292.657620][ T4321] usb 6-1: Manufacturer: syz
[  292.662397][ T4321] usb 6-1: SerialNumber: syz
[  292.798048][ T4261] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  292.919502][ T4321] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  292.984583][ T4261] usb 4-1: Using ep0 maxpacket: 16
[  292.993689][ T4261] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.075918][ T4261] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  293.181017][ T4261] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  293.257064][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.323563][ T4261] usb 4-1: Product: syz
[  293.361412][ T4261] usb 4-1: Manufacturer: syz
[  293.400435][ T4261] usb 4-1: SerialNumber: syz
[  294.148086][ T4321] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  294.155989][ T4261] usb 4-1: 0:2 : does not exist
[  294.173766][ T4261] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  294.219424][ T4321] usb 6-1: 2:1 : can't get Cluster Descriptor
[  294.279305][ T4261] usb 4-1: USB disconnect, device number 6
[  294.369630][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  295.115767][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'.
[  295.124482][  T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  295.696414][ T4321] usb 6-1: USB disconnect, device number 2
[  295.927902][ T7080] syz.0.767 uses obsolete (PF_INET,SOCK_PACKET)
[  297.082914][   T27] audit: type=1326 audit(1790255372.575:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.5.768" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e69f9e159 code=0x0
[  297.421141][  T127] usb 5-1: Using ep0 maxpacket: 32
[  297.515843][  T127] usb 5-1: device descriptor read/all, error -71
[  297.607699][ T7095] loop3: detected capacity change from 0 to 128
[  297.615117][ T7095] EXT4-fs: Invalid want_extra_isize 0
[  299.214521][ T4262] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  301.701388][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'.
[  302.471968][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'.
[  302.903138][ T7154] overlayfs: missing 'lowerdir'
[  303.303421][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'.
[  307.016908][ T7207] Config c/1 of g1 needs at least one function.
[  307.057920][ T7207] udc dummy_udc.0: failed to start g1: -22
[  307.104641][ T7207] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  307.135333][ T7207] UDC core: g1: couldn't find an available UDC or it's busy
[  308.075559][ T4351] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  308.339602][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.366654][ T4351] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.422981][ T4351] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.442277][ T7235] loop2: detected capacity change from 0 to 512
[  308.468135][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.510826][ T7235] EXT4-fs: user quota file already specified
[  308.535400][ T4351] usb 1-1: config 0 descriptor??
[  309.037239][ T7242] loop2: detected capacity change from 0 to 16
[  309.048141][ T7242] erofs: Unknown parameter ''
[  309.430296][ T7244] overlayfs: missing 'lowerdir'
[  309.874014][ T7250] loop5: detected capacity change from 0 to 512
[  309.940431][ T7252] loop3: detected capacity change from 0 to 512
[  309.990189][ T4351] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  310.032490][ T7252] EXT4-fs: Ignoring removed orlov option
[  310.059659][ T7250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  310.092937][ T7250] System zones: 1-12
[  310.120873][ T4351] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  310.181525][ T7250] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.801: missing EA_INODE flag
[  310.226999][ T7252] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  310.247643][ T7250] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.801: error while reading EA inode 12 err=-117
[  310.281500][ T4351] usb 1-1: USB disconnect, device number 5
[  310.365007][ T7250] EXT4-fs (loop5): 1 orphan inode deleted
[  310.433825][ T7250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  312.880139][ T7259] fido_id[7259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  312.929803][ T6338] EXT4-fs (loop5): unmounting filesystem.
[  313.149884][ T7278] loop2: detected capacity change from 0 to 128
[  313.151259][ T7276] Config c/1 of g1 needs at least one function.
[  313.193636][ T7276] udc dummy_udc.0: failed to start g1: -22
[  313.206471][ T7273] loop3: detected capacity change from 0 to 8192
[  313.239312][ T7276] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  313.262007][ T7273] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  313.309964][ T7278] syz.2.807: attempt to access beyond end of device
[  313.309964][ T7278] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128
[  313.378430][ T7276] UDC core: g1: couldn't find an available UDC or it's busy
[  313.478845][   T27] audit: type=1804 audit(1790255388.975:33): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.805" name="/newroot/159/file0/file0" dev="loop3" ino=1048606 res=1 errno=0
[  313.517381][    T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.768243][    T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.934792][ T7291] binfmt_misc: register: failed to install interpreter file ./file0
[  314.098492][    T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.106256][ T7297] loop2: detected capacity change from 0 to 512
[  314.359136][ T7297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  314.398963][ T7297] System zones: 1-12
[  314.419545][    T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.432188][ T7297] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.811: missing EA_INODE flag
[  314.471559][ T7297] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.811: error while reading EA inode 12 err=-117
[  314.773558][ T7297] EXT4-fs (loop2): 1 orphan inode deleted
[  314.906700][ T7297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  315.452313][ T7312] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  315.840453][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'.
[  315.904100][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  316.052618][ T7322] loop2: detected capacity change from 0 to 512
[  316.113936][ T7322] EXT4-fs (loop2): Test dummy encryption mode enabled
[  316.166262][ T7322] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #11: comm syz.2.816: casefold flag without casefold feature
[  316.174932][ T7314] device veth0_to_bond entered promiscuous mode
[  316.224199][ T7322] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.816: couldn't read orphan inode 11 (err -117)
[  316.237524][ T7322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  316.246745][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  316.257424][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  316.269386][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  316.278323][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  316.286553][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  316.293911][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  317.046311][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.052658][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  318.345507][   T48] Bluetooth: hci1: command 0x0409 tx timeout
[  319.070411][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  319.572988][ T7341] loop4: detected capacity change from 0 to 4096
[  320.424490][   T48] Bluetooth: hci1: command 0x041b tx timeout
[  321.573275][ T7341] EXT4-fs: inline encryption not supported
[  321.573356][ T7343] Config c/1 of g1 needs at least one function.
[  321.653484][ T7343] udc dummy_udc.0: failed to start g1: -22
[  321.675312][ T7343] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  321.708602][ T7343] UDC core: g1: couldn't find an available UDC or it's busy
[  321.825502][ T7341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  321.873457][ T7341] EXT4-fs (loop4): Test dummy encryption mode enabled
[  322.016340][ T7341] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  322.656357][   T48] Bluetooth: hci1: command 0x040f tx timeout
[  322.682140][ T7341] System zones: 0-5
[  322.707865][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'.
[  322.752541][ T7341] EXT4-fs: error -4 creating inode table initialization thread
[  322.765062][ T7341] EXT4-fs (loop4): mount failed
[  322.811733][ T7326] chnl_net:caif_netlink_parms(): no params data found
[  322.876508][ T7358] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  322.885908][ T7358] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  322.895510][ T7358] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  322.990674][   T27] audit: type=1800 audit(1790255398.375:34): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.822" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  324.429519][ T7376] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  324.871040][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[  325.029187][ T7380] loop2: detected capacity change from 0 to 512
[  325.039770][ T7371] ------------[ cut here ]------------
[  325.045631][ T7371] failed to allocate ring buffer on CPU 0
[  325.046142][ T7380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  325.074641][ T7371] WARNING: CPU: 0 PID: 7371 at kernel/trace/ring_buffer.c:5860 trace_rb_cpu_prepare+0x349/0x3c0
[  325.085727][ T7371] Modules linked in:
[  325.089653][ T7371] CPU: 0 PID: 7371 Comm: syz.4.825 Not tainted syzkaller #0
[  325.097484][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  325.107604][ T7371] RIP: 0010:trace_rb_cpu_prepare+0x349/0x3c0
[  325.113610][ T7371] Code: f0 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 36 01 fd ff 48 c7 c7 80 73 90 8a 44 89 f6 e8 07 88 c8 ff <0f> 0b b8 f4 ff ff ff eb d4 e8 19 01 fd ff 0f 0b e9 07 fd ff ff e8
[  325.133299][ T7371] RSP: 0018:ffffc9000509fa98 EFLAGS: 00010246
[  325.139440][ T7371] RAX: 3c51afda1b26bb00 RBX: dffffc0000000000 RCX: 0000000000080000
[  325.147466][ T7371] RDX: ffffc9000eab1000 RSI: 0000000000020b4f RDI: 0000000000020b50
[  325.155501][ T7371] RBP: ffff888074339400 R08: ffff8880b8f279db R09: 1ffff110171e4f3b
[  325.163497][ T7371] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff88802e39acb0
[  325.171529][ T7371] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888074339400
[  325.179560][ T7371] FS:  00007ffa0500f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  325.188549][ T7371] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  325.195186][ T7371] CR2: 00007f45c51c4000 CR3: 00000000767ae000 CR4: 00000000003506f0
[  325.203173][ T7371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  325.211200][ T7371] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  325.219228][ T7371] Call Trace:
[  325.222525][ T7371]  <TASK>
[  325.225504][ T7371]  ? rb_get_reader_page+0xcd0/0xcd0
[  325.230730][ T7371]  cpuhp_invoke_callback+0x481/0x7e0
[  325.236083][ T7371]  ? __cpuhp_state_add_instance_cpuslocked+0x10b/0x600
[  325.242968][ T7371]  ? rb_get_reader_page+0xcd0/0xcd0
[  325.248232][ T7371]  ? mutex_lock_nested+0x10/0x10
[  325.253200][ T7371]  cpuhp_issue_call+0x452/0x7f0
[  325.258104][ T7371]  ? _find_next_bit+0x87/0x130
[  325.262906][ T7371]  __cpuhp_state_add_instance_cpuslocked+0x229/0x600
[  325.269653][ T7371]  __cpuhp_state_add_instance+0x21/0x30
[  325.271339][ T7380] EXT4-fs (loop2): 1 truncate cleaned up
[  325.275238][ T7371]  __ring_buffer_alloc+0x336/0x5d0
[  325.275338][ T7371]  allocate_trace_buffers+0x70/0x2b0
[  325.287337][ T7380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  325.291400][ T7371]  ? __raw_spin_lock_init+0x41/0x100
[  325.291426][ T7371]  trace_array_create+0x2d6/0xcb0
[  325.310277][ T7371]  ? instance_mkdir+0xb9/0x120
[  325.315142][ T7371]  instance_mkdir+0xc8/0x120
[  325.319766][ T7371]  tracefs_syscall_mkdir+0xb7/0x110
[  325.325040][ T7371]  vfs_mkdir+0x386/0x570
[  325.329322][ T7371]  do_mkdirat+0x1d8/0x440
[  325.333683][ T7371]  ? vfs_mkdir+0x570/0x570
[  325.338218][ T7371]  __x64_sys_mkdirat+0x85/0x90
[  325.343021][ T7371]  do_syscall_64+0x4c/0xa0
[  325.347569][ T7371]  ? clear_bhb_loop+0x60/0xb0
[  325.352272][ T7371]  ? clear_bhb_loop+0x60/0xb0
[  325.357044][ T7371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  325.362975][ T7371] RIP: 0033:0x7ffa0419e159
[  325.367484][ T7371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.387176][ T7371] RSP: 002b:00007ffa0500f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  325.395687][ T7371] RAX: ffffffffffffffda RBX: 00007ffa04425fa0 RCX: 00007ffa0419e159
[  325.403691][ T7371] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  325.411759][ T7371] RBP: 00007ffa0423506b R08: 0000000000000000 R09: 0000000000000000
[  325.413182][   T27] audit: type=1800 audit(1790255400.915:35): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.828" name="file1" dev="loop2" ino=15 res=0 errno=0
[  325.419785][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.419802][ T7371] R13: 00007ffa04426038 R14: 00007ffa04425fa0 R15: 00007ffc93be7258
[  325.419828][ T7371]  </TASK>
[  325.419849][ T7371] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  325.419858][ T7371] CPU: 0 PID: 7371 Comm: syz.4.825 Not tainted syzkaller #0
[  325.419875][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  325.419884][ T7371] Call Trace:
[  325.419890][ T7371]  <TASK>
[  325.419896][ T7371]  dump_stack_lvl+0x188/0x24e
[  325.419919][ T7371]  ? memcpy+0x3c/0x60
[  325.419936][ T7371]  ? show_regs_print_info+0x12/0x12
[  325.419955][ T7371]  ? load_image+0x410/0x410
[  325.419988][ T7371]  panic+0x2d3/0x710
[  325.420008][ T7371]  ? bpf_jit_dump+0xd0/0xd0
[  325.420043][ T7371]  __warn+0x2f8/0x4f0
[  325.420061][ T7371]  ? trace_rb_cpu_prepare+0x349/0x3c0
[  325.420082][ T7371]  ? trace_rb_cpu_prepare+0x349/0x3c0
[  325.420099][ T7371]  report_bug+0x2ba/0x4f0
[  325.420123][ T7371]  ? trace_rb_cpu_prepare+0x349/0x3c0
[  325.420145][ T7371]  handle_bug+0x3a/0x70
[  325.420161][ T7371]  exc_invalid_op+0x16/0x40
[  325.420178][ T7371]  asm_exc_invalid_op+0x16/0x20
[  325.420193][ T7371] RIP: 0010:trace_rb_cpu_prepare+0x349/0x3c0
[  325.420211][ T7371] Code: f0 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 36 01 fd ff 48 c7 c7 80 73 90 8a 44 89 f6 e8 07 88 c8 ff <0f> 0b b8 f4 ff ff ff eb d4 e8 19 01 fd ff 0f 0b e9 07 fd ff ff e8
[  325.420226][ T7371] RSP: 0018:ffffc9000509fa98 EFLAGS: 00010246
[  325.420241][ T7371] RAX: 3c51afda1b26bb00 RBX: dffffc0000000000 RCX: 0000000000080000
[  325.420253][ T7371] RDX: ffffc9000eab1000 RSI: 0000000000020b4f RDI: 0000000000020b50
[  325.420265][ T7371] RBP: ffff888074339400 R08: ffff8880b8f279db R09: 1ffff110171e4f3b
[  325.420277][ T7371] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffff88802e39acb0
[  325.420289][ T7371] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888074339400
[  325.420314][ T7371]  ? trace_rb_cpu_prepare+0x349/0x3c0
[  325.420336][ T7371]  ? rb_get_reader_page+0xcd0/0xcd0
[  325.420354][ T7371]  cpuhp_invoke_callback+0x481/0x7e0
[  325.420378][ T7371]  ? __cpuhp_state_add_instance_cpuslocked+0x10b/0x600
[  325.420401][ T7371]  ? rb_get_reader_page+0xcd0/0xcd0
[  325.420416][ T7371]  ? mutex_lock_nested+0x10/0x10
[  325.420439][ T7371]  cpuhp_issue_call+0x452/0x7f0
[  325.420462][ T7371]  ? _find_next_bit+0x87/0x130
[  325.420489][ T7371]  __cpuhp_state_add_instance_cpuslocked+0x229/0x600
[  325.420515][ T7371]  __cpuhp_state_add_instance+0x21/0x30
[  325.420537][ T7371]  __ring_buffer_alloc+0x336/0x5d0
[  325.420559][ T7371]  allocate_trace_buffers+0x70/0x2b0
[  325.420581][ T7371]  ? __raw_spin_lock_init+0x41/0x100
[  325.420600][ T7371]  trace_array_create+0x2d6/0xcb0
[  325.420619][ T7371]  ? instance_mkdir+0xb9/0x120
[  325.420638][ T7371]  instance_mkdir+0xc8/0x120
[  325.420658][ T7371]  tracefs_syscall_mkdir+0xb7/0x110
[  325.420680][ T7371]  vfs_mkdir+0x386/0x570
[  325.420705][ T7371]  do_mkdirat+0x1d8/0x440
[  325.420724][ T7371]  ? vfs_mkdir+0x570/0x570
[  325.420749][ T7371]  __x64_sys_mkdirat+0x85/0x90
[  325.420768][ T7371]  do_syscall_64+0x4c/0xa0
[  325.420783][ T7371]  ? clear_bhb_loop+0x60/0xb0
[  325.420798][ T7371]  ? clear_bhb_loop+0x60/0xb0
[  325.420816][ T7371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  325.420838][ T7371] RIP: 0033:0x7ffa0419e159
[  325.420853][ T7371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.420865][ T7371] RSP: 002b:00007ffa0500f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  325.420882][ T7371] RAX: ffffffffffffffda RBX: 00007ffa04425fa0 RCX: 00007ffa0419e159
[  325.420894][ T7371] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  325.420905][ T7371] RBP: 00007ffa0423506b R08: 0000000000000000 R09: 0000000000000000
[  325.420915][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.420925][ T7371] R13: 00007ffa04426038 R14: 00007ffa04425fa0 R15: 00007ffc93be7258
[  325.420950][ T7371]  </TASK>
[  325.440298][ T7371] Kernel Offset: disabled
[  325.831423][ T7371] Rebooting in 86400 seconds..