last executing test programs:

3m52.782717153s ago: executing program 32 (id=113):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000680)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x80002)
r2 = dup3(r1, r0, 0x0)
write$binfmt_script(r2, 0x0, 0x0)

3m43.834905931s ago: executing program 0 (id=170):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xd7, 0x1ff, 0x1000d})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x9, 0x3ff, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1})

3m43.525491613s ago: executing program 0 (id=172):
ptrace$pokeuser(0x6, 0x0, 0x358, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x201048c, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0xfd, 0x659, &(0x7f0000000400)="$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")
truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x400)
creat(&(0x7f0000000180)='./file0/file0\x00', 0x18d)

3m42.583411269s ago: executing program 0 (id=179):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2004de, &(0x7f0000000080)={[{@minixdf}, {@dax_inode}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000300)="$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")
r0 = creat(&(0x7f0000000780)='./bus\x00', 0x39)
io_setup(0x2, &(0x7f00000007c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f0000000800)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000880), 0x200a00, 0xc00}])
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f00000008c0)={0x2, 0x2, 0x1000, 0x0, 0x0, 0xfffffe09, 0x0, 0x0})

3m41.41053106s ago: executing program 0 (id=184):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7068, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

3m41.102406501s ago: executing program 0 (id=186):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
write(r0, &(0x7f00000001c0)="d3", 0x1)

3m40.564858556s ago: executing program 0 (id=191):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xffffffff80000002, 0x12)

3m39.989010895s ago: executing program 33 (id=191):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0xffffffff80000002, 0x12)

3m30.421766176s ago: executing program 5 (id=250):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)={0x1, 0x5})

3m30.086393211s ago: executing program 5 (id=254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

3m29.834053247s ago: executing program 5 (id=255):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==")
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0)
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x1, {0x200004, 0x10005c62, 0x203, 0x8000000000000000, 0x8, 0x0, 0x10000006, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1}}, {0x0, 0xa}}}, 0xa0)

3m29.065268376s ago: executing program 5 (id=260):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000880)='./debug/tracing/options/context-info\x00', 0x61088, &(0x7f00000008c0)={[{@sbsector={'sbsector', 0x3d, 0x6}}, {@cruft}, {@dmode={'dmode', 0x3d, 0x2}}], [{@flag='rw'}]}, 0x1, 0x55a, &(0x7f000001a240)="$eJzs3d9P21gWwPFjCoKmUrXaXVUVAnpLdyUq0awTWqqoT17nJtw2sSPbqeCpQiVUqKFblV3twBsvnRlp5o+o5m3+iNH8N/M0mrfRaF4ysp3QQEJC+dEw6PuJ2nuxj32PTeQjh9gWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgllu07ZwlFePVV9Xx3GLgVwfM76zv/qFmwLgiVvxPpqbkdjrp9t8/zr4V/zcvM+lPMzIVN1Oyd+PWX578bXyss/yAhD6Lnd291+vNZuPdqZZunns+n1tZeyb0TdUpa2VCXxWui8hKKVQlU9HhWhjpqnID7UR+oBbc+ypXKCwpnV3z61656FR0Z+LjB3nbXlZPszXtBKHv/etpNnRXTKVivHISE8+OYx7Hb8RnJlKRdqpKbW41G0vDkoyDcicJyg8Lytv5fC6Xz+eWHxUePbbt8Z4J9hHSEzH6Ny1G65yP4MDpjbXrv1TEiCd1WRXV9+VKUQLxpXrM/LZO/f/n5OBxu+t/p8rf/jh7WpL6P5cEylxv/W+10llt/XO6+NeO7MqevJZ1aUpTGvJuZJmM5lUWLZ4YCcUXI1VxkimqPUVJQZZlWWx5IStSklCUlMRIRbSEsiahRKKTd5QrgWhxJBJfAlGyIK7cFyU5aU0WZEmUaMnKmvhSF0/KUhQnWcumbCX7fWlAjgdBuZME5QcEUf9xdud6/AbOotWp/wAAAAAA4Mqykk/f4/P/CZkVmbCkZCraHnVaAAAAAADgHCV/+Z+Jm4m4NysW5/8AAAAAAFw1lsy1PwXIyJ2017kSig8BAAAAAAC4IpK//8/FTSbu3RGL838AAAAAAK6ar467x/6PyVTLkrA2af3wiwTBhLVfW/2Hte3EM5zta+ly146uMSpNWzfbK0ma5fH2T66esdp3vzy4CebPafN7q9Xqn0fnXv/WOSQg38jdNObuRtpudOako2RKpqKzrl95khPHuTkW6dXof2+2vpBk87/2qjct2dxqNrIv/9PcSHLZj9eyv92+gWLPfRQH5PJfmU1jZvtv8URyIUZ73Ew6rt29/WPp4mOfMOZ7mU9j5jNpmzm8/VPxmLnsk852HNn6NItJETnTlr+Xe2nMvYV7abN3Q45mkc8e9zto74t89/4/1b7ozaJnXywNy2Kpk8X+x0E/JQsAGJXNIVXI6i38pzjWbg57ks+5VPf3spDGLEwnB9bx6T5HdHvYEd0+Y13/vucZSP1rbC4Z99uDcXPJuB/iBT4cO25YyVsy9fbXVmv7rdza2d17sLW9/qrxqvEmn19ath/a9qO8TGxujTfsuGk2bGoPAKCP5Bk70v8ZO2n9HxphPRxyVv3Xg68UZOWlyG+t1oYsJlcbJN846LvWTNfXEBaHnLVmup7wsjjkrC7T9aCXk8VSJwEAV8/8kDp8kvq/OOS8+3AtH3x23F3LAQDAxdDBdclEX1pBYGovcoVCzolWtAp895kKTLGslfEiHbgrjlfWqhb4ke/6lbjz3BR1qMJ6reYHkSr5gar5oVlNnvyu2o9+D3XV8SLjhrWKdkKtXN+LHDdSRRO6qlb/d8WEKzpIFg5r2jUl4zqR8T0V+vXA1VmlQq27Ak1Re5EpmbjrqVpgqk6wpp77lXpVq6IO3cDUIj9dYWcs45X8oJqsNjvqnQ0AwCWxs7v3er3ZbLy7wM6otxEAABxGlQYAAAAAAAAAAAAAAAAAAAAA4PL7HNf//fk6k5cjjdN1fvr/d8vxr/bsKxy7DJtzqNO56fRlyeeTk78EaZywM9rjEoCL90cAAAD//wQuUtc=")
umount2(&(0x7f0000000200)='./debug\x00', 0x0)

3m28.496689174s ago: executing program 5 (id=262):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f0000000000)=""/9, 0xc000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000600)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000640)=0x10, 0x4)
bind$xdp(r0, &(0x7f00000006c0)={0x2c, 0x8, 0x1, 0x0, 0x0}, 0x10)

3m27.878939077s ago: executing program 5 (id=268):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
fcntl$setlease(r0, 0x400, 0x0)

3m27.356082591s ago: executing program 34 (id=268):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
fcntl$setlease(r0, 0x400, 0x0)

2m28.796781528s ago: executing program 7 (id=640):
r0 = syz_open_dev$dri(&(0x7f0000000780), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000007c0), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000800)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000840)={&(0x7f0000000880)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000008c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000980)={0x0, 0x0, r3, r4, 0x1, 0x1800, 0x2, 0x1, {0xac7c, 0x1, 0x6, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe150, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

2m28.646238573s ago: executing program 7 (id=642):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"})
r1 = syz_open_pts(r0, 0x940)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x2000c, 0x8000, 0xffffffed, 0xa, "00f2ff17010400"})
read(r1, 0x0, 0x0)

2m28.401165049s ago: executing program 7 (id=645):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000440)={&(0x7f0000000500)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

2m28.129051956s ago: executing program 7 (id=647):
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x800, &(0x7f0000000900)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@grpquota}]}, 0x4, 0x504, &(0x7f0000000e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000500)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000600)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x101142, 0xeaf9)

2m27.047133237s ago: executing program 7 (id=650):
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000480)={0x4, @raw_data="5f8b6576c7c70f3e4d1af09f152e8d859d468c01879ae7993bdd907da2ed3aef9c2d2a3e667cfd7f197bca4a0bb36f08b02d3993a6d85704c02a4a63d3a483d83d3677676e877efafc9762503fe2039126f2163f315c6e10e82df53d8eaa71b5ec3fa1be4f4fff33fe8b6b99e2faa2618db472c108dc583f0c00b31412aca6dc938d60e86ed9b97e7aa66639b569f9b1b5135ffaffc112e33e4f232ca76940c67d23e04017aaf784bf415669dca772898fed20e38803ef896fd85b89cf9b3d365ca4df28efb92164"})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000480)=@sco={0x1f, @none}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x79a}}}, 0x0)

2m25.966097708s ago: executing program 7 (id=655):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_PROTOCOL={0x5, 0xc, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xcd9ad27008a939a2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

2m25.2646638s ago: executing program 35 (id=655):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_PROTOCOL={0x5, 0xc, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xcd9ad27008a939a2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1m47.091656816s ago: executing program 2 (id=906):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = gettid()
sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="a0", 0x1}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x845}, 0x80)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x81, 0x6}]})
syz_open_pts(0xffffffffffffffff, 0x40)
close_range(r2, 0xffffffffffffffff, 0x0)

1m46.048882803s ago: executing program 2 (id=916):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x806)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000580), 0xffffffffffffff94, 0x201, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f00000005c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1m45.638553605s ago: executing program 2 (id=919):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000380), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000003c0))
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000440)="d7")
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000480))

1m45.343475535s ago: executing program 2 (id=922):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x51)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x4)

1m44.875252743s ago: executing program 2 (id=924):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f0000000080))

1m44.208830991s ago: executing program 2 (id=927):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
syz_fuse_handle_req(r0, &(0x7f0000000a40)="6467b84289c47f9a09399f66529c18d6fb2defe303e67abdf5f6788660a732b40118f14b460c2aa401d6235c0e56d57bf8b6bb132bf251e112321dd449b7c6f6fbc2422750b8f37bc569f789169661f48e51da06ef1cda47b16904feba751b73a59c2bfc5e8530f3154397e6abd07e8005794f13ce800076a7fbbcf143078df616cfd8fc8ad1056783e5756bb90028990c351fd045e2e911572819580158d3e02bc945947d4d4b1a0934b7fb821c64351efa3a1f0a5e2df700170a173147cde5e8a83b500c6e479f86c16ab43d3dc45b17c44bcf3a725a673b85debe867a3655f15a11cf0e8184751c144cd3954972b39f7508b7ff50dedaa08fa1422fb149ad12ff7240f85e94f0f5e9a1bb1a8be9f1209e2b7a1dcdac1a5c03236ed57b7bf87d4a57f0b49fd225b0363c68044550ae48feb4ab3c7109f32415b8fda5b55619be7e5c19b7b2938aa8ffc458827f7dcc8a34e52c20eeab88ad9fe5f164fe234178f1818ecfd5de330dee09b07ca48a3102c145a94a86847e6eac47371fd92ff8b104582c070b55ad7c2434924d4a7b80ce9eebfd6475e59c005f1de3482197937364bfbf6a85fcd0e6925d1ed54306643fceece33875c4bdadd5da7adebf94385d9ecd10d7d5b5e00eb21164fdfe839fe3a1fdba6f6bc2736366a6fd6ff722c546403a0531702d08f994b1ac1a3bba38b37d17976ab27d2e0682c2f362210f1d4bc6e9431270e7a2bde75db8a93a87ff0b9fad37c82021ef1c530ec32ca344f1ae2eb732ca1f632b25432aafc7411868e0ddd973a7837d7ae14eb907b36fa1df4c8ef62dfb90e63e41862e41a4b17d6fdf44c6097c0e814a8bb81b08685ac4e23342766ef19f88b5c24c06378d7dd51e6e68d484754a92d42985746a58af588b49f30c8cb5742a85559108558ef55527ae6c18831f59ec67e09af97d491440774211c53bb558f0aa06f7e93479a91625e54e6aafdc45ccae3aea901893f0b7ac006acb4a686869d90144bc864b5d409ab2adb29b90d74c5ddbcba3546c8af5996fbb9d888c74d24558d9d260fd97912efb661080e81b82843112edb205ee1be501f91295e4b5cc8663bd7d4510c7562d1886e6f4a14067e8b9c8ff8fff772070a747efbaa610c0a8b186084b01f0fe5cb6f9fdf2a424879fb10302b02afe970ac3f1ace8f52cf9998e2e224e51262341555545f67ed96b87cde3c85ef2ed5e8f6f5284be6810ff77342c743693524ce4805fbd933c9ebae5b8e5bbdbb308765369c5588823476f430a66ed79afa85ea189fd9e49fdbf684f9b0e8eae0be40f14a60b86cf36b3e39567a4f37cfdc7e1cbab283de52a60e09e4aece84d339ceb8f1766dc3985ba78d99c449b0dbc1d21b96d461415d0ede7d786497cdc607a55f19e0adab9a6e685c8820f5df19ee70ac3375ab902fe7111d3a476bc1a82942a0493bb257b05e5ec68168f31c3f60c525ab4eddc4b0aa9737a5c3e385c04a5ffb4cbe596bdc95720769bcb2cfc8e83170311a5025f266883240e5784774223b6449cf0ff2f62d12d803462b01cebe4364b87db89169a735aff1c5122846f60436f073e985866667b286e2b9b72987aed6a2f1d894cdf8a001bcb42f0a0d9d843fb13389287b3a0c9df28e295831dcb7056304339000ca0c15191c46ea1e95188aa2f802b9adae4feaad5c94f32608954ef586c1502ddb7fd6f4d83ac5cd7c1a9140e22972f85b215a3ea502375ca08bb59f7ebea5283178fa25f11aef3bc15a96bad7ad2c98afb723c688e9f0ad1b6a2035eb78df913934d65637c8da705df5e4dd4fd966e5aef1c18ca8dab35c499ba0f52fe6a02c0d1932653a7a7c5b4adb852c57f3845b3748275be18c483b9443fb1627d81279515b5fc423f209886831c86bfaf2e8ed4f8addcfde1b8810ed352b1aaad70e74be5565f932215b60a07ca37459a706ecc67f9bebd9996324cc68d5bf5ee333a99ce4e35f06ebb9be9b8ea94b11fd7305c9f32b2a2d38df190d834f9f4112b37ac3a3f7be32b93c081b5d53348dd2b2f2c053a507fb312bfc70c92dd007576a974456bcc8d9e284120be18c341dc2a7d13dd2f319bc1b940ae24a62a74ccb6d3cd3f97ce88a62cd77d405b251f50740e9af35b99084d8b5e9c1ab632694cc3d089f24a0e4af63dabefe1ca480fe486c3acf628b50a56f98a6fe6ab0a7612e3c0cf3b8d6604b3daded2b028d1762f38efbd39ab306aeeb464e3d6672599d99409329b4b09be3af525fd0e36debb3c37270d1ade380c9f30bf80914654e178b12cffe6cb5253bafc3a1639d8e56cd02876cc374d6deec5e60bc25d627e2522e57b173fe156fcf5f69bd74b7b58418cabfc92ba45ea001d6a491e01bbfb39b37efd98e0c44109274ad014461dd1eaf3418e09d9bb74de94477ea5b8015d0ed2f3c6a2870556a1a138821f0a7b9a1c98cedd0fef6edaf72910c0bb0d2947e0cb290a0714f9fa748c619318f21fba6206546973971fc0b01e2a49a3ee978c68595081af5c44ec5d77ee74af24c5e6b395e69eb5879c20d899299d3443d023b424e6647baa667638b7b2d04c18fbb92c0d416873e4de78b72828a5e68d0a20bd6182bc074cdc0a4119e171798c4214a06ca31f05a5d7b3975e45c7db9f12949549364abb5b7f41b49947369edfde1b5278e60b1c1cfe96dffef0c1d4d1492be4d7d2e948605ea015968a9ab97bb027fd5e6799ef9ab59f6fc178afe016fdddd6c2b4401247b6872920b5f0cd3b877aaa684153f646bdc222c2a859a466f7c87f5bdb8c735f394f96f34b52856ff046f77f40bf2d9c45c3f038d38549ac6671884fd367ac5e255f48b2c5fa79a6a2db66b8fb86aa39c69ccd027df26b4dec14cb8d3e00a4b31203eb44dfacff7922e06994887d87eaacc4a07036b5804102c55c2a3e5ae321532abe00db495c4d0712ffdfa1fa42aadc0238f1f760f5f3427085e2e10ea70bb3671fe3ffa6e642b22970326f1cb062e5e557cd777e8b30bfac60633c2d124fb321aad50934a8a5e821781c0ce341e3108998ae24b61d49e9552d3539b546a9830349badcc271fca2bf5a1cc68f23f390c88ec9fa6d7120a1490192679a343aa373da64e676be16f5b91a0deac15bf080c3275adf3581149069f35c944139c298117c1ffdbf937c4c6498a7d2a7c4c1cd27147cff0eb0e8ed1568dcfa58ff0ef242b8e6d4aad1c405a7fe344c6521f249267cb3fce3fb35a1db8ee5b694676e7ad0c318d29238881ed6080c1b47da6027f19833c2846400d631b25d5a2b058c414e65d9f356c0fcdc1f5e2a074e4a52fc4b53cec097578594e8dd29e9a90e3ba4518e9a850f5314ada577d94c55a5c7cb6385492da3957dcf1b83c1b31f78f54f435c464126a3511772414701f2b5ae708bbbd3723d7879c89c465f81888ea75a49404a7f71cf180316636e9dac9a24213a2b7260c3507b1c6021ddd8cedbfffdd1e1703a74fab43441b5a4b16c400bee3bd21f2bc216d0ab8a025057a51dda32345c6f907e14602fe2e1da67b05d3859780f6ce0d190dca7303b6b911a082261e2be9f17b889600feb74d076eaf3b4ae62033196b4c1cea2db6ab2745eadd879724632a3c91f83b04c43d038adda24309d926c7277f830519e32e3998fa613afbee5e38648f35446ceb0f31c88c74a4f3187385e3c02276d646f3291b4ad6fb145fe18c8393df960fba0d9af93e2d4d772530b8cf05c3f297833b5daf009b8cab7a864f62c1cb75e38af0c3f3a0925b9f0b492fcc168a516739c80a2e51309d92e8b971dce8a7f8bc87ce759c3336aa9923a37ab7464128988f9447d45b74d8b401e2b18460502a58d9291f98930c1e4559f59efc6a5b96095a5f2d2c3bcf32d9811db54d367fef224a70f3499892d64cae28126adc8feb55c181b90ae5ae03ba232ec2f52cd339c024d02fab50d98ebf0abb80d89d82ba9107ddc6baa24972889c6eaa854cbb787bce85474cf4f2e9ba1cc266825deafeca3a8d81271707235adbc8f2b05f34594e945048b5d50743bc43be4f23630e16aafabab4c1c96ba8c08185be3300108cf6b98bb97b3a6f6952ef8fafcc46edfd5efe1576d16025da59a8b269dc4797b1631854ffcb45031aa63ea6ae95a2cf3e811950a3744c74a741ec9a8e8bdbe44c4759ea4ceec3710542cfc4c2e74541f6768f2659168fed8bb372cc047fe8912b70062459a230d83b1118a4bceadc4d51e294f45b0727e8005419ce0809217bc2ca1dda7e487722c7fe96c8319cc4d309b38832898c241e376a41461f2f5c6cb1419cbb5c72ad37c1b661492af7fceea93bddf26d1d6b40b6acc61e62d073d0d6c5fb52e49abb513d3faa9f1acbe2577428a0d40fa91aa8162f8105da57d860d92ce7d108970aac9eb451a9d61bce19b76d054d71e9380b256f963539d7c9640ccde8021953fd0451c903aaf10a5fea3e3391d0d1a458b1f69dc619cc41c471e2b19c01905473b33fb3706fd9d96f4ca1948141fdea3c800ef8f4670b3dcae73c19904b292ff8f167cfb5728e5ebe42ba933a730597c5ce9555245c5866b6eb51b0841a1f9733dd54a0f43b8b0a33db28bebb53c36a3dcd83a59768077eb65220dcd358e80ba973770bad498a2e8372d30c9217f8cf8904b5b0b808a52a34bd8f91720ddebcb2dea75b1dcc0d6570750540e5d49fb7f785fbd39922dd9b5827478264ed9af01979961092650add2c19ea3115188f2059fe3ace4d5fdc514bd179be99942da83bf0e4c4579360b6d7b3c6aaae90dbee450e56b1d3149f02ff07d9ec3d24f8c2c2b6ba202b270dc75a7405149baeccbbad7f9cfe27ae203db5d8660cc8e92dd6a7326c13603c9c2a3cb33c2d4f2d28b75ba71e0b8c7320291db89b45f4d9f7d2e1704c42b7338a7e4bd19236d4551cf29ba1c1f95573b58e6f4b49742ef3fe3ff73f2184e4d4289f54a44a4fc60aeb8fcd1e270d535e07d2a1f53e3103ab1f186d4863b25c45fdba4de4e33a3d76dd347040b563a62bd55602dfca3ce6ef06bc408e5785858aeffa7c3b340eb7db146eaa3e922a27124be5f69bf50b653f86c09032a70478460db9d8aa09dc76cff4b2d829ddafde9a6e2c48eed3f80b9350f64321fcc1868efc9124559501f1132041b6735b361a76c2bd23890553660b13891606c4c80b0e1c8be19843b7ee9a3254138953804e9e0781a83139f0778049781cdaaf378d426a028529f106d0d882387ecd61ed194a84748b05e023fe57b42353ea5b6fa5529efe32d515909376c33fde06dfd277e10b43e248af7a48eda919f6ed6ac594467e1578ad8edb54f0a846e1fdccf7aea125ed014765d641665f6f32fcd1a77d3d37672f5399cf82f1855b987c4158196783c8918a0e838566a6d625d8107ae6247a83a8cd7304afec76cc8ae5d38bd1dde196d5cdfbc828d772583bfedf8655a22c8fc12f4aa06f38a9b49e13d84e7c8fc4b40c0986dd356ecb9e365f257ae968c8f1af2bfb66100452ea0b08d2b4da2ba9315ea3e7070fcfdfd3106dce790217ec333228d9fb37f5b31b1f01da5dead89964a3391aa8a5798a5bddb999e5e5596b239b82725f18f6b0a37657a8fc9759a3a5e40ee88aaafe80ce296381c98079f16c3841b08ec4da35f931baac3e8434658df61cb142c59c3985e698370b0985b865c7e75d4b2905a9568993db9263b47433eddeaa57c472d74f895e012d344acb52a04d64b4f37a1dab1640f85e2aad56552fbaa98e998ad476cbd4bef89ba3d5cfaa33b0d2d892593277e7d165eeabb2e9dee23192089e2c6e0bbc7ac86ffa7d464b101db1c314573f76630c32e46d74de750f605e5b8e41070cf1c624947a3a12a8ff43c45412933beeebc2cb96bececbc17958d25516c0a368528e583fba16156c82b2aee2243e7a01a297e59b4e0dd2cf37344f3abec6534db61652a3f892621ead0591689a2c6285bb5978804385a4127f8a8df269ecf3c563292f7b83fad7fb7900d9adcb40373184a99c40433724f54da51689e8535c0ff672a73c90c0571639c49fed07f05d0f4a187599010760a701e7d4cb628dc63138db68e4cdc7096ddee58b2046ab561cfb4b1a77b8bf56688071630cb7ad718561b09db0b99b992a455b3cf55cbaa27dabb736d9a6f7b80849bdf9c081ac501fe2ad65ac5cb12b875dcd8692a0e51e6bc8a4196985e78e8da0f65f1812739a2c480a89601bd4a4220edee35fd0d9e9734e59ef9c1842db9ca772c92afae8c913ff66a8f011426799447df8cecbe34b994bee50362150fbe3585aeb86548c6a78e138fd97b7cdcf0219e79377d4635467260492d278ac9e6b958a4af0242852c1ab2642d1493524d00de5aa824543f7fca827f35b24b5498be28010a98dae60a5000dbbb42c76795dcf38dd0c4cf3626dda545d8fd605638030e26a197763de06a9300ddef434a2f32960f0cb7c15f41dda2562b28873ab0846699079b104d4c99ec4cb946914f798190f363d42b0df2c21a034d2163791a5eb9820c93ee2a14aa4a6c0cc920ccfaf6584d70f69d835e3fb75112a2080af0a31a5920979f07e6c7cf5e85434e887dbe255f9d935cd89db24963526c660f45ecb9d686e244795ce3236f59361d7ed0f5d7a4b6b843d60b0e5654554a30b1159cae67686eb39ef0804044e5ab367ac1bf11a1dffdd93f2cd85241d5b1c9642de62783311c8eb60463d5a990d1c8b559dbf59ee5d8360074e8476cd019015069e28e03ac142f8bc5a8b0057bd714a21dc3e916234d7f7a0033ce59909b20f45a0820e638bc2904128843d08461248141095c25b0435d9f9896011b05154a847128da7536ab87fdb673709a0f6ad506f140910176bc9f84659633b050edb9e0a353d3f891e809eb0d5aed8ecd5926d5ddb7a8b7538c99bf1eb532a4fd1d3f2b3c1973a50498d20197ebf5469eee129ee8defbcd5e8a4c00d69b7976d91138b51084d4562a176b752fb8bc246eec25f9b39ba0892c528d6c5317569109c9b29e036bd573add17d44d436e5b019205de927f275189277bf995b7bc2d7dd44231e55d025022307367b03ad80e94392fb0b851ad45d803eba26eaea01ce6a14ff827fd007884e9465c7406a53d76ee5407ae5b1c21aef6b49e820838eb46891e7d2d8a271a17c6b13270914c2a8d50c781116f88157637ff26f7672d171f70f2b0b3b9aad0b27f2c98aba4afb2e30996797854f82829a8bea07c838f3a54c5bbf6dc419429b9950a2a9d46571eef318544ebd96e0a4bd601f30c9b3a0c58b2eb05fd9ebde494ec9c97929b2b60f9340676e5dd228805dc5f714de3942216e2528c2234e7803686fd89899c2e832bd6b60b136a177382a56255e3849bc0946d2653f586c1dad1d1b7ca1179e83635a2a95ac955cb9456a4a54dc848c87f753222b4d8c414b95af317ea6612ad9481a2bcca0dd7a2fc29680e0d42e4d10d355aaa141f83ef15b3fc5b816090e595a048793cf775775be40916a70d596bea8219e97551793192b89a20a396960c7735f9e0ba891e944519f55ab40ff5b5598599e71a5f73d7bb373f136f6d24b1b6242bfc484e6313893e45df33d7201b6cb4731ead17a14522e97c916afaf793e6e7d60fedc31ad3065e818cba3dda3bf0189140dae56dd7d1960e66531b80d832526afb0f26835108e8dac68610f2acdbb25dec5d99737475e2be5c3ae874ed4528c442b1a03b44fefbf07f33d2fcd73381f764c03050a9a0820344232b825d78a636da742f700237039b6da9b574a4281809a55d1c50901bedd3c4cebc87ad225e566c1132c880ea920fc315441daa1b25a52e0dd24b2d05ad901f50f8dea717ebf7aa355dc98c81dadcd310b2e609f6224b726963b4dcb228fbed63fa6ba47d8c97e88be488cacaba2493c65b42c37a4b882bd6079b7ec6858d6d1aeee7f44992a55a9f6bfcb9afcf12e1721e1d41a857641424455eeb987274a2534a8c6d925b188accf833c2e4299e0b236323d2da6006433d67fa34facd1fc3fd4b7a04b940e012523a7d835e1985356dba3897e7a3451baeb8c16413881563622ab0b58fe548c764b2819bae2ea15ec8ce77bf420ae4bb1f0344550e83f61b1c7a3a1bb675173c5099ae6ae576940640be658eb63b814cc812dd549723a0330034d0d5ad6c1e709b3a4ee895f84d5502a250b9b414a0e28e562a48b7618f994cb17290c5e1eba04177e9beafbb0fe5f2d594af4b85124bafbc1f946e5392a6e49a9b2c3f98db964bbf3f592356de49a5acc2db29afbf5cc15ff94225bdc20ef9d908e7451d084229adba97982e838aafffbfe529943cc96a234b027dac2a945212f3a2f1f0d0a11b99ccaacfa1892bafaca676ffac448ddc3639c68b8e5a31a1c97fab18c450c0dc4c0c3f4ee017c3d3f2f0d38a53280a61d61238ba9d2ce492927beebc03af9d6a11dc5aa26967594a92462d7a0303e5ef05f7b4752ac00c59c0525ea7281ac27e39e64ab39010b048e6a62a3447c5e221be618000f3ece711d18697d1112680735b73e64d71ea364402d1bc97fb487c0a0ebec4db4444884d879fa5d288576292c99b2934b7e0c36c4988b622cd56abe092118a40b2ff231185331d45825f967b1fce56a809b13c6c693ec334394e28b2ac5f4b37072b9cf62d59f539800bd08f89d0d3d43580e7531783141cea4b061474dac035384de4838e96d7d1213e721723bfcced5a7f4b57381ce9d53d634a14d0667ed3bb8efd260b5114038794c07264f0f470a012109cf48cf9e690f026d877bac2b4dc4d22b2bbf74a662fadc7666e9fb207dd7eaef2bfe424462027c3e2b8fd64dd170bba93c70fd888828dc0de12d8ebde1325e37f7da33ccead7b483a786ed107d3641dfbc2eb6f6b146a282caf41bf9986295aa14a797e4b263cd54934cf976e62d55c6104b861a1d0c2ad2e9b9a5ce37ca31d46b546e1a0c7337675d71ea9bd3ac2fd3da6553f3b4a09a7359f0cf6f0e4b94fe18703e948d6cf27a95874658a583cb1714d4edc2f42b9d962f184e543846c3e4f56e71e09ea629a26b9d2984563cedd98d5b84905f89a8c8dfe337a8b352e40ca182de25ce36cde3e26c81e207ff163d5f2544c82a0d3af09442999c5a1f524a9e8e67ab3b2d466206ba726a232bf0bf995dbd216eee329d4830f52f14856ed2272a110de92e917fab1710d6e2261c0b1f652d61516d1436daf63bd066642bb673a4dff84cd1069f717e9546a2854d7bcff28bbf11f6e479436a7bdb12fa73800fc9675b2931edbfe3ee80c5cb67acbed2d393581eac3a6e7259f61f0d5cc2ffeb7322274a5c6b1a316401f77a3890cdda913ee09cb99b1a05c11d239ddfb1bd3e3c08986f12c3b65a71f0deadddbdb11781ee50a7f6732831d3ec1d7748e70b44309d6c767bec3d811c65039880ca9c5eefcc996614d0553c1e3174026273b17218bdb165c948b2e9f88743d7a683fc5fd357364bc89d7fdfc8d7017e1bc6ddd04b58885c0d9864b589f60a0f14efb51f3ee1ffacf9363eff14f7b6c332a02237cb9e8bc51f5079eaf53348b4f2cda7bc95a72321d14f03baa8e5e57ed6dc908cee028137860e613d41e3778955368b6b85e4187299d82cef80c5a047c48e1cc39e90f5ce14646bf5f096c89fe5259f3f846fc95606a853a8df0efd9cb657d7bc1417f55a9aea65fe48a7c890c805ff6fe8fbaa50266a4d48bf22e22ad96f88a70d5d28b8503c42a1f3d29a5adebf6eecf433bade12948daa766b89404387d258ae65a1b3754b07742a4ad24bcc0ff756cb4abb79a14ed5f727eb9dcec95536f0cc0ad80d9d7b2dc726b9052031364d16c60c7251003da1a3b967968f6ca59c6d9e67e4a33d42330626207c854932dab1be0d4db3faa3c87d04dd2e51d2f8e523911f7fa6d59ba2db28984ef2b00b2e7dbc5cfd156de72f5c219de79a98fe6f2a9abb765aefb432703c8aede595143bb5d1b62d8e7176a2a3d6de3d97dba0d51ad3312045b8fbdee661ebe9cb3884287981bfffe300b1ad9cea20aa4d0eb74dc9519259f8e785536bb9b5f124b9c1763cea7569636fd1c45b39190d2cbb7e79a34ee1477b56c5dbcbdd06c56877543f7a32cd6f1f9dca80ad1ccee495cd5fcf3754505deccbd1787b2a3b37f1ec015aa5ec06844deee4bd616b4a582e0eccfa6b79f29417e4bb7f3af81f65d55e962fc72eada691a8b881efe54a56e4d2ef748a1f5e7b8415b69813939815734c1ebc1d5bee0fdb17667306f24397c56c55770a4e2b84c9a03825e5e30875ae1c6e56d5ef2a8594772bd8c00d9c9bb166617e463a6ec2c75d1fd128e465758e1e945d4281d1063ef86e94fb473e0809ab72e4870e59133a27d62b2b9ae1ed518691bf14fcd3dd197cf7faf3de17ae1b6c5abcf4180d841f337a9ba2cf33d49d1bb673e27175b32a48eb40fb519e33c700494d643f6badef71d00e063fb0a3636347eafe876754e05383b45b917e4e8af69418dd0a289b848309bf7143e46ec9bb6c9f53a71da664941f79578a28d8ed48c3be6ebde1611f3853e2060833db20340d3be3662342ba8231043f5ddb493f45e63e3d255765f7ceeb5974c180a435a340dc69bdda3d8d19a2610f7e1dd858fa1e776b83fda284261fda9e51c58f64d464ac42540aa42517752f4cd080d73f03525f23dfc837230fa4f3ff7a12bdcde8b3784452adc0c205fec28b8f7af4e233ba01fbaa667444812b75ba1bc3c3523b8623a3945c0d0edeef542f09c832c04a6cb550337b7ab3b51fd3238c2d0a5e279ad879501522f20763d6bd40b7ce6d9b8be00e9de8d0a3df7b5b7c863e84c8db3cff1f1b6dfa1f651474e5e57c477f033962bd2fa7ac0cdb326916467a49860e1f0e9a9d0a0b9c3530a5aa92ee327d810836f1e501168deae88a320c7b4c92aebf00a9e42744d0f0fdaf1b201660979fadb18ac4ae9f997f5dfce2452243c1948461710a957703c14f987643a6157295737830b91bc6095f911e8c4ab50ec55a55c46372074a9068e38046e8a9f39d30cecf2535e92288e196b0276b355535d6331a8dd18659e0dc9194d849d1f78fbd5d3d97a2ce32d5789e125623a5ed4000f0d85deaba418baaf43267feb38930a8b29072ce1925ad4603d437387f764f2fa141a47bb910f1de8ddfe0c027de70bfa5e113e712dd7f12d98bbb22b645ec01f9ce62dfa426c8117376a2bb8f47303bc0c30e782fa721f591400ec6d2cece10c24d5e910cc12903d625482df496b6e1cb1326a722293f16d0d374dd668b4e34f5eba766992c5e782ae4dbd140424ddcfc2440159117b6a1fe03efccc379c4de8aab39f1198ef31c34b98d6093ac3a56ad626b99a519fb0c81c1dc5ab270d0df34c61f4e607f5b28d9e9a8b423a2568919c38145d32683e44bea8979c3ca27ab6cb2364978a3a4b9e5d60e03b5759b1c147040e4377d28cc35055658ee069ad09ac6fb71e05c4b77daad9074fbfee85f785b5b5a8c3e68aa8593842c8e175d9554f5e57c723e3c237550a5b70fbe7aa18ec4206db3dc1f96d18c59f37df5c62437ea34c0a7d4e37ed5641b36169878a703f579c854e8a7f4862e92667ee183b6", 0x2000, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m43.689041735s ago: executing program 36 (id=927):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
syz_fuse_handle_req(r0, &(0x7f0000000a40)="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", 0x2000, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m31.915097222s ago: executing program 3 (id=989):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x4076cbba9945d516, &(0x7f0000000040)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844)
sendto$packet(r0, &(0x7f0000000380)="e8b77052a9", 0x5ac, 0x40, &(0x7f0000000500)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14)

1m31.568763978s ago: executing program 3 (id=981):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000024c0)="438dc77642449e6e17553493f7aeb57e36", 0x11}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008011}, 0x4040004)
recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0)

1m31.311457754s ago: executing program 3 (id=982):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340), 0x4)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000380)=0x80000004, 0x4)

1m30.813496406s ago: executing program 3 (id=983):
syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x1000800, &(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000005d40)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000005d80)='./file0\x00', &(0x7f0000005dc0), 0x800000, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_mount_image$vfat(&(0x7f0000006180), &(0x7f00000061c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f00000062c0))
rename(&(0x7f0000006300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000006400)='./bus\x00')

1m28.456000227s ago: executing program 3 (id=990):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x1c, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000500)=@vmx={0x0, 0x0, 0x2080, {0x8080000, 0x0, {}, 0x0, 0x2}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002580)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

1m27.100651966s ago: executing program 3 (id=997):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

1m26.578760899s ago: executing program 37 (id=997):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)

4.810695687s ago: executing program 6 (id=1591):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xaa)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000700)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x3a, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0)

4.472872212s ago: executing program 6 (id=1595):
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]})
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)

3.845074546s ago: executing program 1 (id=1601):
r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x5)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

3.629836658s ago: executing program 4 (id=1602):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

3.566525725s ago: executing program 1 (id=1603):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x48, 0x1, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x1234, 0x1}}}}}, 0x0)

3.391370232s ago: executing program 1 (id=1604):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa548, 0x800, 0x1, 0x153}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x2e, 0x6000, @fd_index=0x6, 0x5, 0x0, 0x0, 0xb, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x42be, 0xafb2, 0x8, 0x0, 0x0)

3.374346005s ago: executing program 4 (id=1605):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa5e438, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32=r1, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f00000000c0)=[{0x9, 0x3, 0x3, {0x5, 0xfb}, 0x5a}, {0x5, 0xb3, 0x1, {0x7fff, 0x1}, 0x3e, 0x12f, 0x6}], 0x2, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x40}, {0x0, 0x0, 0x28, 0x6, 0xe}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x990, 0x200000000000008}})

3.063529436s ago: executing program 1 (id=1607):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, &(0x7f0000000140)='size=4\xe0\x06')
chdir(&(0x7f0000000440)='./mnt\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file5\x00', 0x86c0, 0x19f)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x8, r0, 0x0)

2.816399142s ago: executing program 4 (id=1608):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)

2.662687047s ago: executing program 1 (id=1610):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000009c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000005f80)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000005fc0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000006000)='./file0\x00', 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

2.605228144s ago: executing program 9 (id=1611):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r0, 0x84, 0x81, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
sendto$inet6(r0, &(0x7f0000000100)='X', 0x34000, 0xe0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)

2.378034866s ago: executing program 9 (id=1613):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000480)=""/31, &(0x7f0000000080)=0x1f)

2.336972991s ago: executing program 8 (id=1614):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local, @random="0100000000c9", @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x4}}, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x0, 0x81, 0x0, @remote, @mcast2}}}}, 0x0)
r1 = epoll_create(0x7f)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x40000004})

2.195234085s ago: executing program 9 (id=1615):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000680)=""/106, 0x6a}], 0x2}, 0x12153)

2.128650192s ago: executing program 8 (id=1616):
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000001c00)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0)

2.05291787s ago: executing program 9 (id=1617):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x9a, 0x62, 0x20, 0x40, 0x421, 0x3cd, 0xee46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x70, 0x3, "", [{{0x9, 0x4, 0x28, 0x81, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0xb, 0x2, 0x7}}]}}]}}]}}, 0x0)

1.914115454s ago: executing program 8 (id=1618):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
capset(&(0x7f0000003280)={0x20080522}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000003300)={0x15, 0x17, &(0x7f00000033c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={r0, 0x20, &(0x7f0000000e40)={&(0x7f0000000c40)=""/198, 0xc6, 0x0, &(0x7f0000000d40)=""/225, 0xe1}}, 0x10)

1.723114484s ago: executing program 4 (id=1619):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0x24, 0x0, 0x5, &(0x7f0000000680), 0x40000121, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.694212197s ago: executing program 6 (id=1620):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000440)=0x1ff, 0x4)
syz_emit_ethernet(0x86, &(0x7f00000004c0)={@local, @random="005c62509e00", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "5f0f5412b6871b386fa5eeb1f63a854953be6b687c5ca8f24d70097114a49438", "d6a5aea62ca640d24af68d48a8225caf", {"175b3b854944cbe40dfb8d58bcffa2e3", "eed366003e65d38b98f7535880606655"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/50, 0x32}, 0x40}], 0x1, 0x40010040, 0x0)

1.630562243s ago: executing program 8 (id=1621):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
socket(0x11, 0x3, 0x300)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x40000cf, 0x0)

1.4716679s ago: executing program 4 (id=1622):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000b80)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000bc0)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000c00)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x0)

1.421382825s ago: executing program 6 (id=1623):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff)
mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x149000, 0x19a)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x9, 0xffffffffffffffff, 0x8, 0x47ffb, 0xfeb, 0x2})

1.386921918s ago: executing program 8 (id=1624):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0xf, 0x0, 0x1, r2, 0x4})

1.120232726s ago: executing program 8 (id=1625):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020)

1.119530056s ago: executing program 6 (id=1626):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0x87)
sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

687.23242ms ago: executing program 1 (id=1627):
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='27', 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x40000000)

402.625509ms ago: executing program 4 (id=1628):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x1000, &(0x7f0000ff3000/0x1000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff)

368.340673ms ago: executing program 9 (id=1629):
r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000000)={0x0, 0x1b6c, 0x10, 0x1024002, 0x804d}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
clock_gettime(0x0, &(0x7f0000000480)={<r4=>0x0, <r5=>0x0})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0)={r4, r5+10000000}, 0x1, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000280)={0x2e, 0x70, 0x0, <r6=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0)
syz_ublk_setup_io_uring(0x13b1, &(0x7f0000000980)={0x0, 0x8012, 0x40, 0x3, 0x34b, 0x0, r0}, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)=<r7=>0x0)
syz_ublk_add_dev(r0, r1, r2, r7, &(0x7f0000000ac0)={0x2e, 0x4, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x147becae, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x2, 0x7f4, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0xd6}}}, 0x0)

52.338935ms ago: executing program 6 (id=1630):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x201}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000003880)={0x14, 0x0, &(0x7f00000038c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
ioctl(r0, 0x8914, &(0x7f0000003900)="7573623000000000000000000000000003")

0s ago: executing program 9 (id=1631):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

048703][ T7117]  copyin+0x1b/0x120
[  219.052667][ T7117]  _copy_from_iter+0x559/0x1130
[  219.057593][ T7117]  ? copyout_mc+0x110/0x110
[  219.062166][ T7117]  ? __lock_acquire+0x142d/0x7ea0
[  219.067317][ T7117]  ? page_copy_sane+0x4e/0x390
[  219.072166][ T7117]  copy_page_from_iter+0x77/0x100
[  219.077260][ T7117]  skb_copy_datagram_from_iter+0x2c5/0x6b0
[  219.083151][ T7117]  unix_stream_sendmsg+0x4d5/0xa70
[  219.088351][ T7117]  ? unix_show_fdinfo+0x2c0/0x2c0
[  219.093431][ T7117]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  219.099922][ T7117]  ? apparmor_socket_sendmsg+0x8a/0x330
[  219.105536][ T7117]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  219.110886][ T7117]  ? security_socket_sendmsg+0x7c/0xa0
[  219.116403][ T7117]  ? unix_show_fdinfo+0x2c0/0x2c0
[  219.121506][ T7117]  ____sys_sendmsg+0x5ed/0x9a0
[  219.126338][ T7117]  ? __sys_sendmsg_sock+0x30/0x30
[  219.131419][ T7117]  ? __import_iovec+0x306/0x510
[  219.136363][ T7117]  ? import_iovec+0x6f/0xa0
[  219.140933][ T7117]  ___sys_sendmsg+0x2a2/0x360
[  219.145680][ T7117]  ? __sys_sendmsg+0x2a0/0x2a0
[  219.150568][ T7117]  __se_sys_sendmsg+0x1c3/0x2b0
[  219.154854][ T7121] netlink: 'syz.2.805': attribute type 2 has an invalid length.
[  219.155462][ T7117]  ? __x64_sys_sendmsg+0x80/0x80
[  219.164313][ T4363] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  219.168071][ T7117]  ? lockdep_hardirqs_on+0x94/0x140
[  219.168108][ T7117]  do_syscall_64+0x4c/0xa0
[  219.185280][ T7117]  ? clear_bhb_loop+0x60/0xb0
[  219.190019][ T7117]  ? clear_bhb_loop+0x60/0xb0
[  219.194768][ T7117]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.200746][ T7117] RIP: 0033:0x7f9e92fa94d9
[  219.205217][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.225320][ T7117] RSP: 002b:00007f9e93e75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.233793][ T7117] RAX: ffffffffffffffda RBX: 00007f9e93225fa0 RCX: 00007f9e92fa94d9
[  219.241837][ T7117] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000004
[  219.249896][ T7117] RBP: 00007f9e9303804e R08: 0000000000000000 R09: 0000000000000000
[  219.257938][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.265992][ T7117] R13: 00007f9e93226038 R14: 00007f9e93225fa0 R15: 00007fff020aff58
[  219.274041][ T7117]  </TASK>
[  219.279339][ T7121] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.805'.
[  219.315766][ T7102] loop6: detected capacity change from 0 to 32768
[  219.365284][ T4363] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  219.394825][   T27] audit: type=1800 audit(1794626500.595:15): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.790" name="file1" dev="loop6" ino=4 res=0 errno=0
[  219.406017][ T4363] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  219.464598][ T4363] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.513877][   T27] audit: type=1800 audit(1794626500.715:16): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.790" name="file1" dev="loop6" ino=4 res=0 errno=0
[  219.560894][ T4363] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  219.604143][ T4363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  219.654642][ T4363] usb 9-1: Product: syz
[  219.671104][ T4363] usb 9-1: Manufacturer: syz
[  219.691034][ T4363] usb 9-1: SerialNumber: syz
[  219.942318][ T4363] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  220.199970][ T4364] usb 9-1: USB disconnect, device number 2
[  220.223923][ T7113] usblp0: removed
[  220.845270][ T7164] loop2: detected capacity change from 0 to 33280
[  220.904462][ T7164] EXT4-fs: Ignoring removed oldalloc option
[  220.941974][ T7164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  221.023966][ T7164] EXT4-fs (loop2): 1 truncate cleaned up
[  221.079032][ T7164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  221.407540][ T4358] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  221.474287][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  221.597597][ T4358] usb 4-1: Using ep0 maxpacket: 16
[  221.607182][ T4358] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  221.648436][ T4358] usb 4-1: config 0 has no interface number 0
[  221.688781][ T4358] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  221.728886][ T4358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.782840][ T4358] usb 4-1: Product: syz
[  221.787088][ T4358] usb 4-1: Manufacturer: syz
[  221.807884][ T4358] usb 4-1: SerialNumber: syz
[  221.868378][ T4358] usb 4-1: config 0 descriptor??
[  221.902556][ T4358] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  222.443150][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.462465][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.487247][   T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  222.502269][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.527759][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.584595][ T7207] loop8: detected capacity change from 0 to 49152
[  222.684683][ T7207] EXT4-fs (loop8): mounted filesystem with ordered data mode. Quota mode: none.
[  222.707628][   T14] usb 7-1: Using ep0 maxpacket: 32
[  222.721651][   T14] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  222.738280][   T14] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  222.747279][   T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  222.757061][   T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  222.768627][   T14] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  222.780122][   T14] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  222.795347][   T14] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  222.811343][   T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.842107][   T14] usb 7-1: config 0 descriptor??
[  223.005586][ T6652] EXT4-fs (loop8): unmounting filesystem.
[  223.067308][   T14] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  223.088694][ T4358] gspca_spca1528: reg_w err -71
[  223.093719][ T4358] spca1528: probe of 4-1:0.1 failed with error -71
[  223.170779][ T4358] usb 4-1: USB disconnect, device number 13
[  223.217058][ T7225] loop4: detected capacity change from 0 to 33280
[  223.248386][ T7225] EXT4-fs: Ignoring removed nobh option
[  223.301572][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'.
[  223.341445][    C0] usblp0: nonzero read bulk status received: -71
[  223.350660][ T4363] usb 7-1: USB disconnect, device number 5
[  223.367176][ T7205] usblp0: removed
[  223.378308][ T7225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  223.451477][ T7225] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.534349][ T7225] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.828: corrupted inode contents
[  223.620591][ T7225] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #2: comm syz.4.828: mark_inode_dirty error
[  223.654834][ T7225] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.828: corrupted inode contents
[  223.699855][ T7225] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.828: mark_inode_dirty error
[  223.809557][ T6258] EXT4-fs (loop4): unmounting filesystem.
[  224.305704][ T7252] loop6: detected capacity change from 0 to 4096
[  224.327472][ T4364] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  224.406090][ T7259] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.456361][   T27] audit: type=1800 audit(1794626505.655:17): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.835" name="file1" dev="loop6" ino=15 res=0 errno=0
[  224.518264][ T4364] usb 4-1: Using ep0 maxpacket: 8
[  224.528914][ T4364] usb 4-1: config 0 has no interfaces?
[  224.560075][ T4364] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  224.569781][   T26] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  224.604619][ T4364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.641795][ T4364] usb 4-1: Product: syz
[  224.646047][ T4364] usb 4-1: Manufacturer: syz
[  224.672164][ T4364] usb 4-1: SerialNumber: syz
[  224.692724][ T4364] usb 4-1: config 0 descriptor??
[  224.759757][   T26] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.791035][   T26] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  224.843059][   T26] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.895919][   T26] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  224.911913][   T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  224.957682][   T26] usb 9-1: Product: syz
[  224.966439][   T26] usb 9-1: Manufacturer: syz
[  224.996609][ T4358] usb 4-1: USB disconnect, device number 14
[  225.034148][ T7256] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  225.054437][   T26] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected
[  225.098857][   T26] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  225.213599][ T7245] loop4: detected capacity change from 0 to 32768
[  225.353930][ T7245] XFS (loop4): Mounting V5 Filesystem
[  225.479643][ T4358] usb 9-1: USB disconnect, device number 3
[  225.530146][ T4358] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  225.553199][ T4358] garmin_gps 9-1:1.0: device disconnected
[  225.621066][ T7245] XFS (loop4): Ending clean mount
[  225.723278][ T7287] loop6: detected capacity change from 0 to 33280
[  225.808133][ T7287] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  225.856659][ T7287] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.871814][ T7294] loop2: detected capacity change from 0 to 33280
[  225.971108][ T6258] XFS (loop4): Unmounting Filesystem
[  225.989805][ T7294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  226.037576][ T7294] System zones: 1-12
[  226.064163][ T7294] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.844: missing EA_INODE flag
[  226.318070][ T7294] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.844: error while reading EA inode 12 err=-117
[  226.370763][ T4996] EXT4-fs (loop6): unmounting filesystem.
[  226.407271][ T7294] EXT4-fs (loop2): 1 orphan inode deleted
[  226.428480][ T7294] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  226.516266][ T7304] loop8: detected capacity change from 0 to 2048
[  226.662804][ T7309] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.734322][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  227.226606][   T27] audit: type=1326 audit(1794626508.425:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.2.854" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdcdba94d9 code=0x0
[  227.534295][ T7309] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  227.567477][ T7309] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  227.630886][ T7309] Remounting filesystem read-only
[  227.642002][ T6652] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  227.839695][ T7349] loop8: detected capacity change from 0 to 164
[  227.902271][ T7349] iso9660: Corrupted directory entry in block 2 of inode 1920
[  227.931054][ T7354] "syz.6.862" (7354) uses obsolete ecb(arc4) skcipher
[  227.949819][ T7356] iso9660: Corrupted directory entry in block 2 of inode 1920
[  228.239174][ T7359] loop0: detected capacity change from 0 to 1
[  228.293651][ T7359] ldm_validate_privheads(): Disk read failed.
[  228.302958][ T7359]  loop0:
[  228.306002][ T7359] loop0: partition table partially beyond EOD, truncated
[  228.350688][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'.
[  228.651852][ T7381] netlink: 194236 bytes leftover after parsing attributes in process `syz.8.869'.
[  228.714247][ T7389] loop3: detected capacity change from 0 to 64
[  228.726513][ T7381] netlink: zone id is out of range
[  228.733178][ T7381] netlink: zone id is out of range
[  228.767602][ T7381] netlink: get zone limit has 8 unknown bytes
[  228.779598][ T7398] futex_wake_op: syz.4.871 tries to shift op by 144; fix this program
[  229.639333][ T4364] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  229.666074][ T4364] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  230.111106][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.111106][ T6477] loop3: rw=1, sector=351, nr_sectors = 40 limit=64
[  230.156406][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.156406][ T6477] loop3: rw=1, sector=423, nr_sectors = 80 limit=64
[  230.201561][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.201561][ T6477] loop3: rw=1, sector=555, nr_sectors = 24 limit=64
[  230.244343][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.244343][ T6477] loop3: rw=1, sector=599, nr_sectors = 1 limit=64
[  230.311810][ T6477] buffer_io_error: 1070 callbacks suppressed
[  230.311829][ T6477] Buffer I/O error on dev loop3, logical block 599, lost async page write
[  230.347026][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.347026][ T6477] loop3: rw=1, sector=600, nr_sectors = 1 limit=64
[  230.381432][ T6477] Buffer I/O error on dev loop3, logical block 600, lost async page write
[  230.407841][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.407841][ T6477] loop3: rw=1, sector=601, nr_sectors = 1 limit=64
[  230.448925][ T6477] Buffer I/O error on dev loop3, logical block 601, lost async page write
[  230.507773][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.507773][ T6477] loop3: rw=1, sector=602, nr_sectors = 1 limit=64
[  230.545882][ T6477] Buffer I/O error on dev loop3, logical block 602, lost async page write
[  230.578384][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.578384][ T6477] loop3: rw=1, sector=627, nr_sectors = 1 limit=64
[  230.607522][ T6477] Buffer I/O error on dev loop3, logical block 627, lost async page write
[  230.616154][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.616154][ T6477] loop3: rw=1, sector=628, nr_sectors = 1 limit=64
[  230.687562][ T6477] Buffer I/O error on dev loop3, logical block 628, lost async page write
[  230.716608][ T6477] kworker/u4:14: attempt to access beyond end of device
[  230.716608][ T6477] loop3: rw=1, sector=629, nr_sectors = 1 limit=64
[  230.750930][ T6477] Buffer I/O error on dev loop3, logical block 629, lost async page write
[  230.790887][ T6477] Buffer I/O error on dev loop3, logical block 630, lost async page write
[  230.820274][ T6477] Buffer I/O error on dev loop3, logical block 1023, lost async page write
[  230.875069][ T6477] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  230.886971][ T4291] Bluetooth: Unknown LE signaling command 0xf9
[  230.893556][ T4291] Bluetooth: Wrong link type (-22)
[  231.589501][ T7474] FAULT_INJECTION: forcing a failure.
[  231.589501][ T7474] name failslab, interval 1, probability 0, space 0, times 0
[  231.620705][ T7474] CPU: 0 PID: 7474 Comm: syz.3.884 Not tainted syzkaller #0
[  231.628133][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  231.638243][ T7474] Call Trace:
[  231.641586][ T7474]  <TASK>
[  231.644559][ T7474]  dump_stack_lvl+0x188/0x24e
[  231.649301][ T7474]  ? show_regs_print_info+0x12/0x12
[  231.654560][ T7474]  ? load_image+0x410/0x410
[  231.659108][ T7474]  ? __might_sleep+0xd0/0xd0
[  231.663742][ T7474]  ? __lock_acquire+0x7ea0/0x7ea0
[  231.668819][ T7474]  should_fail_ex+0x390/0x4c0
[  231.673572][ T7474]  should_failslab+0x5/0x20
[  231.678108][ T7474]  slab_pre_alloc_hook+0x59/0x300
[  231.683356][ T7474]  kmem_cache_alloc_lru+0x49/0x2e0
[  231.688505][ T7474]  ? __d_alloc+0x2e/0x6e0
[  231.692878][ T7474]  __d_alloc+0x2e/0x6e0
[  231.697062][ T7474]  ? d_alloc_pseudo+0xe/0x70
[  231.701779][ T7474]  d_alloc_pseudo+0x19/0x70
[  231.706318][ T7474]  alloc_file_pseudo+0xe0/0x200
[  231.711218][ T7474]  ? alloc_empty_file_noaccount+0x80/0x80
[  231.716997][ T7474]  ? _raw_spin_unlock+0x24/0x40
[  231.721912][ T7474]  ? alloc_fd+0x590/0x640
[  231.726683][ T7474]  anon_inode_getfd+0xc6/0x1b0
[  231.731512][ T7474]  ? btf_get_fd_by_id+0x77/0x3e0
[  231.736597][ T7474]  btf_get_fd_by_id+0x338/0x3e0
[  231.741504][ T7474]  ? btf_get_fd_by_id+0x77/0x3e0
[  231.746587][ T7474]  ? btf_get_info_by_fd+0x5a0/0x5a0
[  231.751847][ T7474]  ? bpf_lsm_capable+0x5/0x10
[  231.756589][ T7474]  ? capable+0x84/0xe0
[  231.760733][ T7474]  __sys_bpf+0x68c/0x780
[  231.765043][ T7474]  ? bpf_link_show_fdinfo+0x550/0x550
[  231.770504][ T7474]  ? lock_chain_count+0x20/0x20
[  231.775426][ T7474]  __x64_sys_bpf+0x78/0x90
[  231.779929][ T7474]  do_syscall_64+0x4c/0xa0
[  231.784398][ T7474]  ? clear_bhb_loop+0x60/0xb0
[  231.789152][ T7474]  ? clear_bhb_loop+0x60/0xb0
[  231.793887][ T7474]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  231.799858][ T7474] RIP: 0033:0x7f9e92fa94d9
[  231.804334][ T7474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.824096][ T7474] RSP: 002b:00007f9e93e75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  231.832552][ T7474] RAX: ffffffffffffffda RBX: 00007f9e93225fa0 RCX: 00007f9e92fa94d9
[  231.840560][ T7474] RDX: 0000000000000004 RSI: 0000200000000480 RDI: 0000000000000013
[  231.848577][ T7474] RBP: 00007f9e9303804e R08: 0000000000000000 R09: 0000000000000000
[  231.856621][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.864738][ T7474] R13: 00007f9e93226038 R14: 00007f9e93225fa0 R15: 00007fff020aff58
[  231.872812][ T7474]  </TASK>
[  231.875895][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.032473][ T7481] loop4: detected capacity change from 0 to 736
[  232.148497][ T7481] rock: directory entry would overflow storage
[  232.161907][ T7481] rock: sig=0x3b10, size=4, remaining=3
[  232.454371][ T7496] netlink: 72 bytes leftover after parsing attributes in process `syz.6.901'.
[  232.768494][   T27] audit: type=1326 audit(1794626513.975:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.2.906" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdcdba94d9 code=0x0
[  233.045081][ T7519] user requested TSC rate below hardware speed
[  233.186496][ T7523] device bridge1 entered promiscuous mode
[  233.382424][ T7528] loop8: detected capacity change from 0 to 32896
[  233.508154][ T7528] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  233.576817][ T7528] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.657605][   T14] psmouse serio2: Failed to reset mouse on : -5
[  233.718892][ T7528] EXT4-fs (loop8): re-mounted. Quota mode: none.
[  233.782081][ T7547] EXT4-fs (loop8): re-mounted. Quota mode: none.
[  233.952054][ T6652] EXT4-fs (loop8): unmounting filesystem.
[  234.440681][ T7566] FAULT_INJECTION: forcing a failure.
[  234.440681][ T7566] name failslab, interval 1, probability 0, space 0, times 0
[  234.507723][ T7566] CPU: 1 PID: 7566 Comm: syz.4.920 Not tainted syzkaller #0
[  234.515124][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  234.525245][ T7566] Call Trace:
[  234.528610][ T7566]  <TASK>
[  234.531601][ T7566]  dump_stack_lvl+0x188/0x24e
[  234.536360][ T7566]  ? show_regs_print_info+0x12/0x12
[  234.541644][ T7566]  ? load_image+0x410/0x410
[  234.546230][ T7566]  ? __might_sleep+0xd0/0xd0
[  234.550889][ T7566]  ? __lock_acquire+0x7ea0/0x7ea0
[  234.556000][ T7566]  should_fail_ex+0x390/0x4c0
[  234.560766][ T7566]  should_failslab+0x5/0x20
[  234.565338][ T7566]  slab_pre_alloc_hook+0x59/0x300
[  234.570483][ T7566]  ? ops_init+0x8a/0x5e0
[  234.574806][ T7566]  __kmem_cache_alloc_node+0x4f/0x270
[  234.580270][ T7566]  ? ops_init+0x8a/0x5e0
[  234.584580][ T7566]  __kmalloc+0xa3/0x240
[  234.588793][ T7566]  ? ife_init_net+0x156/0x190
[  234.593556][ T7566]  ops_init+0x8a/0x5e0
[  234.597708][ T7566]  setup_net+0x4f2/0xbd0
[  234.602045][ T7566]  ? copy_net_ns+0x5b0/0x5b0
[  234.606772][ T7566]  ? copy_net_ns+0x324/0x5b0
[  234.611436][ T7566]  ? down_read_killable+0x1cc/0x340
[  234.616721][ T7566]  copy_net_ns+0x33e/0x5b0
[  234.621295][ T7566]  create_new_namespaces+0x3ce/0x700
[  234.626653][ T7566]  unshare_nsproxy_namespaces+0x116/0x160
[  234.632429][ T7566]  ksys_unshare+0x4f6/0x8e0
[  234.636985][ T7566]  ? sighand_ctor+0x40/0x40
[  234.641529][ T7566]  ? lock_chain_count+0x20/0x20
[  234.646439][ T7566]  ? syscall_enter_from_user_mode+0x21/0x80
[  234.652407][ T7566]  __x64_sys_unshare+0x34/0x40
[  234.657223][ T7566]  do_syscall_64+0x4c/0xa0
[  234.661705][ T7566]  ? clear_bhb_loop+0x60/0xb0
[  234.666462][ T7566]  ? clear_bhb_loop+0x60/0xb0
[  234.671197][ T7566]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.677145][ T7566] RIP: 0033:0x7fe5d63a94d9
[  234.681625][ T7566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.701283][ T7566] RSP: 002b:00007fe5d731c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  234.709741][ T7566] RAX: ffffffffffffffda RBX: 00007fe5d6625fa0 RCX: 00007fe5d63a94d9
[  234.717936][ T7566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  234.725948][ T7566] RBP: 00007fe5d643804e R08: 0000000000000000 R09: 0000000000000000
[  234.733954][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.741960][ T7566] R13: 00007fe5d6626038 R14: 00007fe5d6625fa0 R15: 00007ffdd5a23668
[  234.749988][ T7566]  </TASK>
[  235.005470][ T6497] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.415746][ T6497] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.558980][ T6497] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.724619][ T6497] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.130551][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.142881][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.153154][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.163466][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.171869][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  236.179469][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.276164][ T7585] rxe_eth0 speed is unknown, defaulting to 1000
[  237.024358][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.037934][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.048201][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.056333][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.068090][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  237.081143][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.268776][ T7607] rxe_eth0 speed is unknown, defaulting to 1000
[  237.314435][ T7612] loop4: detected capacity change from 0 to 4096
[  237.393741][ T7585] chnl_net:caif_netlink_parms(): no params data found
[  237.410439][ T7612] ntfs3: loop4: Failed to load $Extend.
[  237.447576][   T14] misc userio: Buffer overflowed, userio client isn't keeping up
[  237.674230][ T6258] ntfs3: loop4: ino=5, mi_enum_attr
[  237.744114][ T6258] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  237.804666][ T6258] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  237.814265][ T7606] loop3: detected capacity change from 0 to 32768
[  237.998018][ T7606] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  238.006842][ T7606] XFS (loop3): Mounting V5 Filesystem
[  238.183083][ T7606] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  238.197692][ T4285] Bluetooth: hci2: command 0x0409 tx timeout
[  238.236770][ T7606] XFS (loop3): Tail block (0x10) overwrite detected. Updated to 0x30
[  238.304885][ T7606] XFS (loop3): Ending clean mount
[  238.326986][ T7606] XFS (loop3): Quotacheck needed: Please wait.
[  238.372068][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.423010][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.471013][ T7585] device bridge_slave_0 entered promiscuous mode
[  238.482664][ T7606] XFS (loop3): Quotacheck: Done.
[  238.551745][   T14] input: PS/2 Generic Mouse as /devices/serio2/input/input17
[  238.559756][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.566938][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.596198][ T7585] device bridge_slave_1 entered promiscuous mode
[  238.811669][ T4279] XFS (loop3): Unmounting Filesystem
[  238.817797][   T14] psmouse serio2: Failed to enable mouse on 
[  238.935277][ T7585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.980051][ T7661] FAULT_INJECTION: forcing a failure.
[  238.980051][ T7661] name failslab, interval 1, probability 0, space 0, times 0
[  239.037554][ T7661] CPU: 0 PID: 7661 Comm: syz.4.937 Not tainted syzkaller #0
[  239.044950][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  239.055077][ T7661] Call Trace:
[  239.058408][ T7661]  <TASK>
[  239.061388][ T7661]  dump_stack_lvl+0x188/0x24e
[  239.066165][ T7661]  ? show_regs_print_info+0x12/0x12
[  239.071537][ T7661]  ? load_image+0x410/0x410
[  239.076161][ T7661]  ? __might_sleep+0xd0/0xd0
[  239.080819][ T7661]  ? __lock_acquire+0x7ea0/0x7ea0
[  239.085916][ T7661]  should_fail_ex+0x390/0x4c0
[  239.090661][ T7661]  should_failslab+0x5/0x20
[  239.095250][ T7661]  slab_pre_alloc_hook+0x59/0x300
[  239.100437][ T7661]  ? pkcs7_parse_message+0xf2/0x520
[  239.105712][ T7661]  __kmem_cache_alloc_node+0x4f/0x270
[  239.111154][ T7661]  ? pkcs7_parse_message+0xf2/0x520
[  239.116420][ T7661]  kmalloc_trace+0x26/0xe0
[  239.120934][ T7661]  pkcs7_parse_message+0xf2/0x520
[  239.126035][ T7661]  verify_pkcs7_signature+0x2c/0x90
[  239.131402][ T7661]  pkcs7_preparse+0x87/0xb0
[  239.135965][ T7661]  ? pkcs7_preparse+0xb0/0xb0
[  239.140737][ T7661]  key_create_or_update+0x405/0xa50
[  239.146022][ T7661]  ? key_type_put+0x20/0x20
[  239.149142][ T7585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.150688][ T7661]  ? __check_object_size+0x86/0xa70
[  239.165089][ T7661]  ? strncpy_from_user+0x1dc/0x340
[  239.170273][ T7661]  __se_sys_add_key+0x34b/0x410
[  239.175213][ T7661]  ? __x64_sys_add_key+0xc0/0xc0
[  239.180241][ T7661]  ? lockdep_hardirqs_on+0x94/0x140
[  239.185523][ T7661]  ? __x64_sys_add_key+0x1c/0xc0
[  239.190539][ T7661]  do_syscall_64+0x4c/0xa0
[  239.195020][ T7661]  ? clear_bhb_loop+0x60/0xb0
[  239.199785][ T7661]  ? clear_bhb_loop+0x60/0xb0
[  239.204526][ T7661]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.210485][ T7661] RIP: 0033:0x7fe5d63a94d9
[  239.214960][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.234631][ T7661] RSP: 002b:00007fe5d731c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  239.243118][ T7661] RAX: ffffffffffffffda RBX: 00007fe5d6625fa0 RCX: 00007fe5d63a94d9
[  239.251723][ T7661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240
[  239.259768][ T7661] RBP: 00007fe5d643804e R08: ffffffffffffffff R09: 0000000000000000
[  239.267908][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.275935][ T7661] R13: 00007fe5d6626038 R14: 00007fe5d6625fa0 R15: 00007ffdd5a23668
[  239.283987][ T7661]  </TASK>
[  239.289369][ T4285] Bluetooth: hci3: command 0x0409 tx timeout
[  239.499386][ T7585] team0: Port device team_slave_0 added
[  239.510747][ T7607] chnl_net:caif_netlink_parms(): no params data found
[  239.595321][ T7585] team0: Port device team_slave_1 added
[  239.683159][ T6497] device hsr_slave_0 left promiscuous mode
[  239.700492][ T6497] device hsr_slave_1 left promiscuous mode
[  239.717646][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.741052][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.773696][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.799459][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.824325][ T6497] device bridge_slave_1 left promiscuous mode
[  239.845353][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.874686][ T6497] device bridge_slave_0 left promiscuous mode
[  239.895803][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.036683][ T6497] device veth1_macvtap left promiscuous mode
[  240.042962][ T6497] device veth0_macvtap left promiscuous mode
[  240.077259][ T6497] device veth1_vlan left promiscuous mode
[  240.083329][ T6497] device veth0_vlan left promiscuous mode
[  240.277666][ T4285] Bluetooth: hci2: command 0x041b tx timeout
[  241.317735][ T4291] Bluetooth: hci3: command 0x041b tx timeout
[  241.377792][   T22] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  241.470096][   T14] kernel read not supported for file /input/event1 (pid: 14 comm: kworker/0:1)
[  241.590005][   T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  241.610960][   T22] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  241.659472][   T22] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  241.675012][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.687672][   T22] usb 5-1: Product: syz
[  241.691930][   T22] usb 5-1: Manufacturer: syz
[  241.696580][   T22] usb 5-1: SerialNumber: syz
[  241.739031][   T22] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  241.779858][   T22] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  241.779858][   T22]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  242.245245][   T22] ums-sddr09: probe of 5-1:1.0 failed with error -5
[  242.272056][ T7739] loop3: detected capacity change from 0 to 32768
[  242.357597][ T4291] Bluetooth: hci2: command 0x040f tx timeout
[  242.429857][ T7739] XFS (loop3): Mounting V5 Filesystem
[  242.538238][ T7739] XFS (loop3): Ending clean mount
[  242.833400][ T4279] XFS (loop3): Unmounting Filesystem
[  242.954448][ T7765] FAULT_INJECTION: forcing a failure.
[  242.954448][ T7765] name fail_futex, interval 1, probability 0, space 0, times 1
[  242.995102][ T7765] CPU: 1 PID: 7765 Comm: syz.6.952 Not tainted syzkaller #0
[  243.002650][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  243.012737][ T7765] Call Trace:
[  243.016036][ T7765]  <TASK>
[  243.019093][ T7765]  dump_stack_lvl+0x188/0x24e
[  243.023865][ T7765]  ? show_regs_print_info+0x12/0x12
[  243.029112][ T7765]  ? load_image+0x410/0x410
[  243.033667][ T7765]  ? stack_trace_save+0xa6/0xf0
[  243.038608][ T7765]  ? __stack_depot_save+0x35/0x480
[  243.043899][ T7765]  should_fail_ex+0x390/0x4c0
[  243.048676][ T7765]  get_futex_key+0x1a6/0xe70
[  243.053602][ T7765]  ? futex_setup_timer+0xc0/0xc0
[  243.058715][ T7765]  futex_wake+0x123/0x4f0
[  243.063118][ T7765]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  243.069170][ T7765]  ? futex_wake_mark+0x150/0x150
[  243.074193][ T7765]  ? lockdep_hardirqs_on+0x94/0x140
[  243.079483][ T7765]  do_futex+0x2e2/0x320
[  243.083792][ T7765]  ? __ia32_sys_get_robust_list+0x100/0x100
[  243.089715][ T7765]  __se_sys_futex+0x381/0x410
[  243.094418][ T7765]  ? __x64_sys_futex+0xf0/0xf0
[  243.099220][ T7765]  ? __x64_sys_futex+0x1d/0xf0
[  243.104041][ T7765]  do_syscall_64+0x4c/0xa0
[  243.108523][ T7765]  ? clear_bhb_loop+0x60/0xb0
[  243.113269][ T7765]  ? clear_bhb_loop+0x60/0xb0
[  243.118089][ T7765]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.124048][ T7765] RIP: 0033:0x7fbd739a94d9
[  243.128515][ T7765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.148179][ T7765] RSP: 002b:00007fbd749160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  243.156771][ T7765] RAX: ffffffffffffffda RBX: 00007fbd73c25fa8 RCX: 00007fbd739a94d9
[  243.164802][ T7765] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd73c25fac
[  243.172895][ T7765] RBP: 00007fbd73c25fa0 R08: 003482a9a776a70c R09: 0000000000000000
[  243.180933][ T7765] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  243.188952][ T7765] R13: 00007fbd73c26038 R14: 00007ffe61c2b6c0 R15: 00007ffe61c2b7a8
[  243.197146][ T7765]  </TASK>
[  243.407820][ T4291] Bluetooth: hci3: command 0x040f tx timeout
[  243.581239][ T6497] team0 (unregistering): Port device team_slave_1 removed
[  243.672812][ T6497] team0 (unregistering): Port device team_slave_0 removed
[  243.766678][ T6497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  243.866140][ T6497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.094324][   T14] usb 5-1: USB disconnect, device number 5
[  244.242403][ T7782] loop4: detected capacity change from 0 to 2048
[  244.332356][ T7782] Alternate GPT is invalid, using primary GPT.
[  244.358777][ T7782]  loop4: p2 p3 p7
[  244.449898][ T4291] Bluetooth: hci2: command 0x0419 tx timeout
[  244.814815][ T6497] bond0 (unregistering): Released all slaves
[  244.925452][ T7772] netlink: 'syz.3.951': attribute type 3 has an invalid length.
[  245.002502][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.020038][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.130039][ T7585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.202031][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.240221][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.269321][ T7585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.291637][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  245.321548][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  245.347062][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  245.407032][ T7798] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  245.480035][ T4291] Bluetooth: hci3: command 0x0419 tx timeout
[  245.611584][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.658705][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.678099][ T7607] device bridge_slave_0 entered promiscuous mode
[  245.709741][ T7585] device hsr_slave_0 entered promiscuous mode
[  245.738036][ T7585] device hsr_slave_1 entered promiscuous mode
[  245.754833][ T7585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.775974][ T7585] Cannot create hsr debugfs directory
[  245.804540][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.815018][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.830825][ T7607] device bridge_slave_1 entered promiscuous mode
[  245.945010][ T7607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.018652][ T7607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.197109][ T7607] team0: Port device team_slave_0 added
[  246.258360][ T7607] team0: Port device team_slave_1 added
[  246.351871][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.385262][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.477481][ T7607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.504310][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.531505][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.625738][ T7607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.651445][ T7834] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  246.736890][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  246.753531][ T7839] loop4: detected capacity change from 0 to 256
[  246.763412][ T7840] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  246.817626][ T7834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.847360][ T7839] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  247.087101][ T6497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.272686][ T7846] loop4: detected capacity change from 0 to 4096
[  247.293454][ T6497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.340067][ T7607] device hsr_slave_0 entered promiscuous mode
[  247.363835][ T7607] device hsr_slave_1 entered promiscuous mode
[  247.388700][ T7852] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  247.403621][ T7607] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.439715][ T7607] Cannot create hsr debugfs directory
[  247.488217][   T14] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  247.548151][ T6497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.570761][ T4285] Bluetooth: hci0: command 0x0406 tx timeout
[  247.576225][ T7854] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  247.690419][   T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.706661][   T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.729454][   T14] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  247.747705][   T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.768148][   T14] usb 7-1: config 0 descriptor??
[  247.778979][ T6497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.230556][ T7585] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  248.272418][ T7585] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  248.328171][ T7585] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  248.358839][ T7585] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  248.624836][   T14] hid-led 0003:27B8:01ED.000C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0
[  248.690261][ T7607] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  248.723230][   T14] hid-led 0003:27B8:01ED.000C: ThingM blink(1) initialized
[  248.736492][ T7607] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  248.791212][ T7607] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  248.845570][ T4358] usb 7-1: USB disconnect, device number 6
[  249.045012][ T7874] fido_id[7874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  249.065865][ T7607] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  249.243919][ T7860] loop4: detected capacity change from 0 to 32768
[  249.331802][ T7860] XFS (loop4): Mounting V5 Filesystem
[  249.344435][ T7585] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.465035][ T7860] XFS (loop4): Ending clean mount
[  249.555824][ T7585] 8021q: adding VLAN 0 to HW filter on device team0
[  249.598118][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  249.628293][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  249.714806][ T6258] XFS (loop4): Unmounting Filesystem
[  249.901875][ T7878] loop3: detected capacity change from 0 to 40427
[  249.931256][ T7878] F2FS-fs (loop3): invalid crc value
[  249.978916][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  250.008490][ T7878] F2FS-fs (loop3): Found nat_bits in checkpoint
[  250.018051][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  250.070164][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.077344][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.143622][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  250.183932][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  250.244187][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.251595][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.260035][ T7878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  250.325880][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  250.356505][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  250.370678][ T7909] FAULT_INJECTION: forcing a failure.
[  250.370678][ T7909] name failslab, interval 1, probability 0, space 0, times 0
[  250.414674][ T7909] CPU: 0 PID: 7909 Comm: syz.4.986 Not tainted syzkaller #0
[  250.422066][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  250.432181][ T7909] Call Trace:
[  250.435507][ T7909]  <TASK>
[  250.438481][ T7909]  dump_stack_lvl+0x188/0x24e
[  250.443225][ T7909]  ? show_regs_print_info+0x12/0x12
[  250.448473][ T7909]  ? load_image+0x410/0x410
[  250.453016][ T7909]  ? __might_sleep+0xd0/0xd0
[  250.457641][ T7909]  ? __lock_acquire+0x7ea0/0x7ea0
[  250.462708][ T7909]  should_fail_ex+0x390/0x4c0
[  250.467448][ T7909]  should_failslab+0x5/0x20
[  250.472099][ T7909]  slab_pre_alloc_hook+0x59/0x300
[  250.477174][ T7909]  ? debugfs_file_get+0x114/0x460
[  250.482234][ T7909]  __kmem_cache_alloc_node+0x4f/0x270
[  250.487641][ T7909]  ? debugfs_file_get+0x114/0x460
[  250.492704][ T7909]  kmalloc_trace+0x26/0xe0
[  250.497157][ T7909]  debugfs_file_get+0x114/0x460
[  250.502060][ T7909]  ? debugfs_real_fops+0xa0/0xa0
[  250.507048][ T7909]  ? __rwlock_init+0x140/0x140
[  250.511844][ T7909]  ? do_raw_spin_lock+0x128/0x2f0
[  250.516925][ T7909]  open_proxy_open+0x46/0x4b0
[  250.521635][ T7909]  ? debugfs_file_put+0xb0/0xb0
[  250.526559][ T7909]  do_dentry_open+0x7dd/0x10b0
[  250.531462][ T7909]  path_openat+0x2674/0x2f10
[  250.536100][ T7909]  ? kasan_set_track+0x60/0x70
[  250.540902][ T7909]  ? verify_lock_unused+0x140/0x140
[  250.546140][ T7909]  ? do_sys_openat2+0xdd/0x4f0
[  250.550946][ T7909]  ? do_filp_open+0x420/0x420
[  250.555667][ T7909]  do_filp_open+0x1ee/0x420
[  250.560216][ T7909]  ? vfs_tmpfile+0x490/0x490
[  250.564864][ T7909]  ? _raw_spin_unlock+0x24/0x40
[  250.569750][ T7909]  ? alloc_fd+0x590/0x640
[  250.574298][ T7909]  do_sys_openat2+0x14b/0x4f0
[  250.579017][ T7909]  ? do_sys_open+0xe0/0xe0
[  250.583472][ T7909]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  250.589590][ T7909]  ? lock_chain_count+0x20/0x20
[  250.594583][ T7909]  __x64_sys_openat+0x135/0x160
[  250.599513][ T7909]  do_syscall_64+0x4c/0xa0
[  250.603975][ T7909]  ? clear_bhb_loop+0x60/0xb0
[  250.608774][ T7909]  ? clear_bhb_loop+0x60/0xb0
[  250.613503][ T7909]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  250.619467][ T7909] RIP: 0033:0x7fe5d63a94d9
[  250.623920][ T7909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.643647][ T7909] RSP: 002b:00007fe5d731c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  250.652134][ T7909] RAX: ffffffffffffffda RBX: 00007fe5d6625fa0 RCX: 00007fe5d63a94d9
[  250.660178][ T7909] RDX: 0000000000000002 RSI: 00002000000046c0 RDI: ffffffffffffff9c
[  250.668193][ T7909] RBP: 00007fe5d643804e R08: 0000000000000000 R09: 0000000000000000
[  250.676283][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.684283][ T7909] R13: 00007fe5d6626038 R14: 00007fe5d6625fa0 R15: 00007ffdd5a23668
[  250.692401][ T7909]  </TASK>
[  250.781004][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  250.803013][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  250.869894][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  250.893533][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  250.919712][ T7912] FAULT_INJECTION: forcing a failure.
[  250.919712][ T7912] name failslab, interval 1, probability 0, space 0, times 0
[  250.935568][ T7912] CPU: 0 PID: 7912 Comm: syz.6.988 Not tainted syzkaller #0
[  250.942951][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  250.953062][ T7912] Call Trace:
[  250.956384][ T7912]  <TASK>
[  250.959359][ T7912]  dump_stack_lvl+0x188/0x24e
[  250.964191][ T7912]  ? show_regs_print_info+0x12/0x12
[  250.969478][ T7912]  ? load_image+0x410/0x410
[  250.974055][ T7912]  ? __might_sleep+0xd0/0xd0
[  250.978845][ T7912]  ? __lock_acquire+0x7ea0/0x7ea0
[  250.983969][ T7912]  should_fail_ex+0x390/0x4c0
[  250.988765][ T7912]  should_failslab+0x5/0x20
[  250.993345][ T7912]  slab_pre_alloc_hook+0x59/0x300
[  250.998439][ T7912]  ? sk_prot_alloc+0xe7/0x210
[  251.003175][ T7912]  __kmem_cache_alloc_node+0x4f/0x270
[  251.008626][ T7912]  ? sk_prot_alloc+0xe7/0x210
[  251.013375][ T7912]  __kmalloc+0xa3/0x240
[  251.017591][ T7912]  sk_prot_alloc+0xe7/0x210
[  251.022250][ T7912]  ? sk_alloc+0x20/0x330
[  251.026558][ T7912]  sk_alloc+0x36/0x330
[  251.030710][ T7912]  pptp_create+0x2e/0x2f0
[  251.035106][ T7912]  pppox_create+0x127/0x1a0
[  251.039797][ T7912]  __sock_create+0x49a/0x940
[  251.044463][ T7912]  __sys_socket+0xc4/0x190
[  251.048989][ T7912]  __x64_sys_socket+0x76/0x80
[  251.053739][ T7912]  do_syscall_64+0x4c/0xa0
[  251.058237][ T7912]  ? clear_bhb_loop+0x60/0xb0
[  251.062999][ T7912]  ? clear_bhb_loop+0x60/0xb0
[  251.067759][ T7912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  251.073749][ T7912] RIP: 0033:0x7fbd739a94d9
[  251.078245][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.098006][ T7912] RSP: 002b:00007fbd74916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  251.106486][ T7912] RAX: ffffffffffffffda RBX: 00007fbd73c25fa0 RCX: 00007fbd739a94d9
[  251.114713][ T7912] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018
[  251.122754][ T7912] RBP: 00007fbd73a3804e R08: 0000000000000000 R09: 0000000000000000
[  251.131052][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.139083][ T7912] R13: 00007fbd73c26038 R14: 00007fbd73c25fa0 R15: 00007ffe61c2b7a8
[  251.147168][ T7912]  </TASK>
[  251.245938][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  251.265479][ T4279] bio_check_eod: 561 callbacks suppressed
[  251.265497][ T4279] syz-executor: attempt to access beyond end of device
[  251.265497][ T4279] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  251.265807][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  251.316249][ T4279] syz-executor: attempt to access beyond end of device
[  251.316249][ T4279] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  251.460957][ T7607] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.475170][ T7915] IPVS: rr: UDP [::1]:8080 - no destination available
[  251.574376][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  251.583786][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  251.599327][ T4369] kworker/u4:6: attempt to access beyond end of device
[  251.599327][ T4369] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  251.623216][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  251.633629][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  251.700073][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  251.851576][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  251.861361][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  251.872279][ T7607] 8021q: adding VLAN 0 to HW filter on device team0
[  251.992538][ T7928] loop6: detected capacity change from 0 to 4096
[  252.094723][ T7928] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512)
[  252.103967][  T131] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  252.261328][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  252.296423][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  252.319409][  T131] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.356684][  T131] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  252.378298][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.385492][ T6490] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.411911][  T131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.446829][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  252.484544][  T131] as10x_usb: device has been detected
[  252.490537][  T131] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  252.546597][  T131] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  252.671822][  T131] as10x_usb: error during firmware upload part1
[  252.684158][  T131] Registered device Abilis Systems DVB-Titan
[  252.742184][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  252.779376][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  252.816145][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.823409][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.857048][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  253.054719][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  253.078037][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  253.109074][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  253.163063][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  253.173114][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  253.181099][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  253.190651][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  253.201239][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  253.220406][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  253.239036][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  253.277659][ T7585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.284899][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  253.309970][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  253.331281][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  253.557187][ T6497] device hsr_slave_0 left promiscuous mode
[  253.602112][ T6497] device hsr_slave_1 left promiscuous mode
[  253.620740][ T6497] device bridge_slave_1 left promiscuous mode
[  253.627091][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.657302][ T6497] device bridge_slave_0 left promiscuous mode
[  253.687926][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.790725][ T6497] device veth1_vlan left promiscuous mode
[  253.796857][ T6497] device veth0_vlan left promiscuous mode
[  253.939855][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.951884][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.962136][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.977975][   T14] usb 5-1: USB disconnect, device number 6
[  253.990541][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  254.001545][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  254.009646][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  254.056183][   T14] Unregistered device Abilis Systems DVB-Titan
[  254.063794][   T14] as10x_usb: device has been disconnected
[  255.063787][ T7985] loop4: detected capacity change from 0 to 33280
[  255.077003][ T7985] EXT4-fs: Ignoring removed bh option
[  255.147311][ T7985] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  255.183076][ T7985] EXT4-fs (loop4): 1 truncate cleaned up
[  255.203421][ T7985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  255.335646][ T6497] team0 (unregistering): Port device team_slave_1 removed
[  255.342146][ T6258] EXT4-fs (loop4): unmounting filesystem.
[  255.411295][ T6497] team0 (unregistering): Port device team_slave_0 removed
[  255.508345][ T6497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.618646][ T6497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.731618][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  255.738097][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  255.758093][ T7991] vcan0: tx drop: invalid da for name 0x0000000000000003
[  256.047940][ T4291] Bluetooth: hci1: command 0x0409 tx timeout
[  256.224028][ T6497] bond0 (unregistering): Released all slaves
[  256.325607][ T7977] Unknown status report in ack skb
[  256.397004][ T7960] rxe_eth0 speed is unknown, defaulting to 1000
[  256.581516][ T8002] overlayfs: failed to clone upperpath
[  256.889908][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.915245][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  257.001520][ T6482] rpcbind: server 127.0.0.1 not responding, timed out
[  257.096713][ T7607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.212779][ T8021] overlayfs: failed to clone lowerpath
[  257.357852][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  257.381459][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  257.498308][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  257.530389][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  257.585842][ T7585] device veth0_vlan entered promiscuous mode
[  257.605420][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  257.623979][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  257.774947][ T4369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.819893][ T7960] chnl_net:caif_netlink_parms(): no params data found
[  257.841171][ T7585] device veth1_vlan entered promiscuous mode
[  257.929727][ T4369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.972900][ T8018] loop4: detected capacity change from 0 to 32768
[  258.003170][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[  258.012880][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[  258.023628][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  258.053766][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  258.095488][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.117893][ T4291] Bluetooth: hci1: command 0x041b tx timeout
[  258.131160][ T8018] XFS (loop4): Mounting V5 Filesystem
[  258.158973][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.233419][ T7585] device veth0_macvtap entered promiscuous mode
[  258.251197][ T8018] XFS (loop4): Ending clean mount
[  258.324003][ T4369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.361670][ T7585] device veth1_macvtap entered promiscuous mode
[  258.431481][ T6258] XFS (loop4): Unmounting Filesystem
[  258.554227][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  258.570291][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  258.598822][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.606155][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.659131][ T7960] device bridge_slave_0 entered promiscuous mode
[  258.689991][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.697247][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.714811][ T7960] device bridge_slave_1 entered promiscuous mode
[  258.789924][ T4369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.849291][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.867628][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.889054][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.902078][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.915560][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.927912][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.941414][ T8061] overlayfs: failed to clone upperpath
[  258.957212][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.027652][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  259.039507][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  259.059010][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  259.078740][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  259.105628][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.121899][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.132963][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.143874][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.154447][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.165745][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.179904][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.206205][ T7960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.227125][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  259.254586][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  259.272382][ T7585] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.281736][ T7585] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.294118][ T7585] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.306071][ T7585] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.324151][ T7607] device veth0_vlan entered promiscuous mode
[  259.335479][ T7960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.353816][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  259.368462][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  259.383554][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  259.393070][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  259.440761][ T7607] device veth1_vlan entered promiscuous mode
[  259.470997][ T7960] team0: Port device team_slave_0 added
[  259.522354][ T7960] team0: Port device team_slave_1 added
[  259.571532][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  259.586970][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  259.728507][ T7960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.735529][ T7960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.780645][ T7960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.811207][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  259.878777][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  259.931969][ T7960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.944239][ T7960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.984770][ T7960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.025890][ T7607] device veth0_macvtap entered promiscuous mode
[  260.127700][ T7607] device veth1_macvtap entered promiscuous mode
[  260.190615][ T7960] device hsr_slave_0 entered promiscuous mode
[  260.221116][ T4291] Bluetooth: hci1: command 0x040f tx timeout
[  260.242413][ T7960] device hsr_slave_1 entered promiscuous mode
[  260.250047][ T7960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.258109][ T7960] Cannot create hsr debugfs directory
[  260.273066][ T4369] tipc: Disabling bearer <udp:syz0>
[  260.297560][ T4369] tipc: Left network mode
[  260.318143][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.326090][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.359330][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.378010][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.388824][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.401148][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.411708][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.423705][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.434160][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.445886][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.506279][ T7607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.571682][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  260.596635][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  260.621312][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.645421][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  260.664413][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  260.883672][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.884789][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.910077][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.942222][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.952082][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.976275][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.993196][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.004507][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.019934][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.031786][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.043826][ T7607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.062844][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  261.081062][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  261.095214][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  261.118664][ T7607] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.135303][ T7607] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.156162][ T7607] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.165530][ T7607] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.245925][ T8090] rxe_eth0 speed is unknown, defaulting to 1000
[  261.735266][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.758374][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.088036][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  262.264160][ T8118] fuse: Bad value for 'fd'
[  262.283172][ T4291] Bluetooth: hci1: command 0x0419 tx timeout
[  262.495433][ T8120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  262.601473][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.620000][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.815270][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  263.910308][ T7960] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  263.980929][ T8152] loop4: detected capacity change from 0 to 512
[  264.398962][   T26] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  264.599690][   T26] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  264.617882][   T26] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.654102][   T26] usb 10-1: config 0 descriptor??
[  264.670428][   T26] cp210x 10-1:0.0: cp210x converter detected
[  264.828624][ T4369] device hsr_slave_0 left promiscuous mode
[  264.856471][ T4369] device hsr_slave_1 left promiscuous mode
[  264.900689][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.941054][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.985236][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.023945][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.045225][ T4369] device bridge_slave_1 left promiscuous mode
[  265.085337][   T26] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32
[  265.098459][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.108300][ T4369] device bridge_slave_0 left promiscuous mode
[  265.114611][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.166374][   T26] usb 10-1: cp210x converter now attached to ttyUSB0
[  265.250561][ T4369] device veth1_macvtap left promiscuous mode
[  265.256820][ T4369] device veth0_macvtap left promiscuous mode
[  265.271629][ T4369] device veth1_vlan left promiscuous mode
[  265.281178][ T4369] device veth0_vlan left promiscuous mode
[  265.338862][   T22] usb 10-1: USB disconnect, device number 2
[  265.381552][   T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  265.403720][   T22] cp210x 10-1:0.0: device disconnected
[  266.560701][ T4369] team0 (unregistering): Port device team_slave_1 removed
[  266.630792][ T4369] team0 (unregistering): Port device team_slave_0 removed
[  266.699018][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.765827][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.270746][ T4369] bond0 (unregistering): Released all slaves
[  267.351888][ T7960] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  267.363967][ T8175] netlink: 'syz.8.1046': attribute type 4 has an invalid length.
[  267.435405][ T8177] netlink: 'syz.8.1046': attribute type 4 has an invalid length.
[  267.483469][ T7960] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  267.543541][ T7960] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  268.042264][ T7960] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.049491][ T8203] binder: 8202:8203 ioctl c0306201 200000000600 returned -14
[  268.104737][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  268.142964][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  268.171498][ T7960] 8021q: adding VLAN 0 to HW filter on device team0
[  268.196596][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  268.221280][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  268.244913][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.252183][ T6482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.344057][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  268.381215][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  268.416083][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  268.442508][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.449821][ T6482] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.483055][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  268.524658][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  268.553316][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  268.570194][    T7] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  268.593815][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  268.637006][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  268.674316][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  268.718126][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  268.747211][ T7960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  268.769148][    T7] usb 10-1: Using ep0 maxpacket: 32
[  268.784706][    T7] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[  268.787589][ T7960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  268.818286][    T7] usb 10-1: config 0 has no interface number 0
[  268.831295][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  268.840843][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  268.843139][    T7] usb 10-1: config 0 interface 12 has no altsetting 0
[  268.864830][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  268.884091][    T7] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  268.905592][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  268.907538][    T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.954319][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  268.957546][    T7] usb 10-1: Product: syz
[  268.965802][    T7] usb 10-1: Manufacturer: syz
[  268.997716][    T7] usb 10-1: SerialNumber: syz
[  269.009147][    T7] usb 10-1: config 0 descriptor??
[  269.744508][ T8235] netlink: 'syz.6.1064': attribute type 1 has an invalid length.
[  269.868603][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  269.876751][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  269.950776][ T7960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.053305][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  270.074886][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  270.175997][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  270.199633][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  270.230038][ T7960] device veth0_vlan entered promiscuous mode
[  270.239600][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  270.262070][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  270.282227][    T7] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  270.297551][    T7] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[  270.314265][ T7960] device veth1_vlan entered promiscuous mode
[  270.322101][    T7] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  270.340020][    T7] f81534: probe of 10-1:0.12 failed with error -71
[  270.379175][    T7] usb 10-1: USB disconnect, device number 3
[  270.483682][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[  270.503486][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[  270.525777][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  270.534350][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  270.548913][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  270.562968][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  270.594975][ T7960] device veth0_macvtap entered promiscuous mode
[  270.633861][ T7960] device veth1_macvtap entered promiscuous mode
[  270.709422][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.726569][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.770228][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.818247][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.887505][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.946117][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.024523][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.043412][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.064383][ T7960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.075190][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  271.109939][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  271.140916][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  271.160941][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  271.183316][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.265271][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.317918][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.353045][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.394483][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.418261][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.445533][ T7960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.494193][ T7960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.539739][ T7960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.577748][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  271.586703][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  271.658999][ T7960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.686235][ T7960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.727914][ T7960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.766274][ T7960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.033290][ T8288] loop4: detected capacity change from 0 to 256
[  272.128011][ T8283] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47
[  272.176617][ T8290] bridge0: port 3(syz_tun) entered blocking state
[  272.179095][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.220384][ T8290] bridge0: port 3(syz_tun) entered disabled state
[  272.232991][ T8288] FAT-fs (loop4): unable to read block(1074790400) for building NFS inode
[  272.255497][ T8290] device syz_tun entered promiscuous mode
[  272.262617][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.289168][ T8290] bridge0: port 3(syz_tun) entered blocking state
[  272.295924][ T8290] bridge0: port 3(syz_tun) entered forwarding state
[  273.595885][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  273.680886][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.727793][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.736691][ T6484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  273.968530][ T8315] fuse: Bad value for 'fd'
[  274.008907][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'.
[  274.301934][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'.
[  274.805996][ T8347] bridge0: port 3(syz_tun) entered blocking state
[  274.840861][ T8347] bridge0: port 3(syz_tun) entered disabled state
[  274.866518][ T8347] device syz_tun entered promiscuous mode
[  274.875142][ T8347] bridge0: port 3(syz_tun) entered blocking state
[  274.881829][ T8347] bridge0: port 3(syz_tun) entered forwarding state
[  274.943117][ T8356] ip_tables: iptables: counters copy to user failed while replacing table
[  275.221780][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1104'.
[  275.311093][ T8371] netlink: 'syz.9.1105': attribute type 25 has an invalid length.
[  275.339723][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1105'.
[  275.418558][ T8371] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.428309][ T8371] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.437209][ T8371] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.446324][ T8371] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  275.550912][ T8371] netlink: 'syz.9.1105': attribute type 25 has an invalid length.
[  275.606323][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1105'.
[  275.918431][ T8398] loop9: detected capacity change from 0 to 16
[  276.016310][ T8398] erofs: (device loop9): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[  276.045919][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'.
[  276.723135][ T8424] kAFS: No cell specified
[  277.978591][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1132'.
[  278.920622][ T8496] loop1: detected capacity change from 0 to 256
[  278.968329][ T8496] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  279.294242][ T8481] loop4: detected capacity change from 0 to 32768
[  279.307766][ T8509] "syz.1.1146" (8509) uses obsolete ecb(arc4) skcipher
[  279.428126][ T8481] XFS (loop4): Mounting V5 Filesystem
[  279.473103][ T8481] XFS (loop4): Ending clean mount
[  279.704756][ T6258] XFS (loop4): Unmounting Filesystem
[  280.024804][ T8531] loop9: detected capacity change from 0 to 36864
[  280.095770][ T8531] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  280.550152][ T7607] EXT4-fs (loop9): unmounting filesystem.
[  280.810035][ T8557] overlayfs: failed to verify origin (28/mydev, ino=175, err=-116)
[  280.863192][ T8557] overlayfs: failed to verify upper root origin
[  281.547195][   T22] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  281.566436][   T14] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  281.839954][  T131] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  281.846099][   T26] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  282.039794][ T8615] loop1: detected capacity change from 0 to 128
[  282.217668][ T8584] ceph: No mds server is up or the cluster is laggy
[  282.227533][ T8589] ceph: No mds server is up or the cluster is laggy
[  282.348172][  T131] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  282.370863][   T26] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  282.424649][ T8619] fuse: Bad value for 'fd'
[  284.155978][ T8673] loop1: detected capacity change from 0 to 256
[  284.183856][ T8673] exfat: Deprecated parameter 'utf8'
[  284.215717][ T8673] exfat: Deprecated parameter 'namecase'
[  284.247325][ T8673] exfat: Deprecated parameter 'namecase'
[  284.254926][ T8673] exfat: Deprecated parameter 'namecase'
[  284.302185][ T8673] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  284.395433][ T8673] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1194'.
[  284.942161][ T8695] loop1: detected capacity change from 0 to 128
[  285.026606][ T8695] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  285.046461][ T8696] relay: one or more items not logged [item size (56) > sub-buffer size (9)]
[  285.177067][   T27] audit: type=1326 audit(1794626566.383:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.8.1202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3afc9a94d9 code=0x0
[  285.200617][    C1] vkms_vblank_simulate: vblank timer overrun
[  285.248911][ T8703] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  285.426027][ T8709] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1204'.
[  286.187100][ T8741] hugetlbfs: syz.9.1214 (8741): Using mlock ulimits for SHM_HUGETLB is obsolete
[  288.081924][ T8791] FAULT_INJECTION: forcing a failure.
[  288.081924][ T8791] name failslab, interval 1, probability 0, space 0, times 0
[  288.110958][ T8791] CPU: 0 PID: 8791 Comm: syz.4.1230 Not tainted syzkaller #0
[  288.118533][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  288.128641][ T8791] Call Trace:
[  288.131965][ T8791]  <TASK>
[  288.134935][ T8791]  dump_stack_lvl+0x188/0x24e
[  288.139718][ T8791]  ? show_regs_print_info+0x12/0x12
[  288.144989][ T8791]  ? load_image+0x410/0x410
[  288.149538][ T8791]  ? __lock_acquire+0x7ea0/0x7ea0
[  288.154711][ T8791]  should_fail_ex+0x390/0x4c0
[  288.159539][ T8791]  should_failslab+0x5/0x20
[  288.164091][ T8791]  slab_pre_alloc_hook+0x59/0x300
[  288.169152][ T8791]  ? io_alloc_hash_table+0x2d/0xb0
[  288.174306][ T8791]  __kmem_cache_alloc_node+0x4f/0x270
[  288.179721][ T8791]  ? io_alloc_hash_table+0x2d/0xb0
[  288.184872][ T8791]  __kmalloc+0xa3/0x240
[  288.189152][ T8791]  io_alloc_hash_table+0x2d/0xb0
[  288.194125][ T8791]  io_ring_ctx_alloc+0x130/0xc85
[  288.199103][ T8791]  io_uring_create+0x29f/0xd6c
[  288.203902][ T8791]  ? __might_fault+0xc2/0x120
[  288.208616][ T8791]  ? __might_fault+0xa6/0x120
[  288.213366][ T8791]  __x64_sys_io_uring_setup+0x21b/0x230
[  288.218961][ T8791]  ? __ia32_sys_io_uring_enter+0xf0/0xf0
[  288.224651][ T8791]  ? lockdep_hardirqs_on+0x94/0x140
[  288.229881][ T8791]  do_syscall_64+0x4c/0xa0
[  288.234331][ T8791]  ? clear_bhb_loop+0x60/0xb0
[  288.239048][ T8791]  ? clear_bhb_loop+0x60/0xb0
[  288.243766][ T8791]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  288.249701][ T8791] RIP: 0033:0x7fe5d63a94d9
[  288.254147][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.274052][ T8791] RSP: 002b:00007fe5d731bfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  288.282509][ T8791] RAX: ffffffffffffffda RBX: 00002000000001c0 RCX: 00007fe5d63a94d9
[  288.290508][ T8791] RDX: 0000200000000280 RSI: 00002000000001c0 RDI: 0000000000000021
[  288.298508][ T8791] RBP: 00007fe5d643804e R08: 0000000000000000 R09: 0000000000000000
[  288.306509][ T8791] R10: 00002000000002c0 R11: 0000000000000206 R12: 0000200000000280
[  288.314506][ T8791] R13: 00002000000002c0 R14: 0000200000000240 R15: 00007ffdd5a23668
[  288.322519][ T8791]  </TASK>
[  288.584523][ T8805] loop1: detected capacity change from 0 to 32896
[  288.593595][ T8805] EXT4-fs: Ignoring removed mblk_io_submit option
[  288.639937][ T8805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  288.676119][ T8805] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  288.718784][ T8810] netlink: 'syz.8.1237': attribute type 1 has an invalid length.
[  288.749001][ T8810] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1237'.
[  288.905013][ T8805] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 33: comm syz.1.1236: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  289.019415][ T8805] EXT4-fs error (device loop1) in do_split:2097: Corrupt filesystem
[  289.060625][ T8817] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 33: comm syz.1.1236: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  289.111509][ T8817] EXT4-fs error (device loop1) in do_split:2097: Corrupt filesystem
[  289.293346][ T8828] loop4: detected capacity change from 0 to 33280
[  289.311554][ T7960] EXT4-fs (loop1): unmounting filesystem.
[  289.339102][ T8828] EXT4-fs: Ignoring removed i_version option
[  289.387565][ T8828] EXT4-fs: Ignoring removed nobh option
[  289.418695][ T8828] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  289.520266][ T8828] EXT4-fs (loop4): 1 truncate cleaned up
[  289.526979][ T8828] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  289.676552][ T6258] EXT4-fs (loop4): unmounting filesystem.
[  290.596448][ T8844] loop1: detected capacity change from 0 to 32768
[  290.634131][   T27] audit: type=1326 audit(1794626571.843:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  290.716735][   T27] audit: type=1326 audit(1794626571.843:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  290.741929][   T27] audit: type=1326 audit(1794626571.913:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  290.767079][   T27] audit: type=1326 audit(1794626571.913:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  290.792413][   T27] audit: type=1326 audit(1794626571.913:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  290.818156][ T8844] XFS (loop1): Mounting V5 Filesystem
[  290.843524][   T27] audit: type=1326 audit(1794626571.913:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  290.925603][ T8844] XFS (loop1): Ending clean mount
[  291.059066][   T27] audit: type=1326 audit(1794626571.913:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  291.157316][   T27] audit: type=1326 audit(1794626571.913:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  291.254670][   T27] audit: type=1326 audit(1794626571.923:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  291.317442][ T4285] Bluetooth: hci0: command 0x0406 tx timeout
[  291.407519][   T27] audit: type=1326 audit(1794626571.923:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.8.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afc9a94d9 code=0x7ffc0000
[  291.514541][ T7960] XFS (loop1): Unmounting Filesystem
[  291.660804][ T8902] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1258'.
[  292.457695][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  292.589454][ T8922] FAULT_INJECTION: forcing a failure.
[  292.589454][ T8922] name failslab, interval 1, probability 0, space 0, times 0
[  292.637615][ T8922] CPU: 1 PID: 8922 Comm: syz.1.1259 Not tainted syzkaller #0
[  292.645094][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  292.655208][ T8922] Call Trace:
[  292.658517][ T8922]  <TASK>
[  292.661479][ T8922]  dump_stack_lvl+0x188/0x24e
[  292.666208][ T8922]  ? show_regs_print_info+0x12/0x12
[  292.671448][ T8922]  ? load_image+0x410/0x410
[  292.675990][ T8922]  ? __lock_acquire+0x7ea0/0x7ea0
[  292.681065][ T8922]  should_fail_ex+0x390/0x4c0
[  292.685796][ T8922]  should_failslab+0x5/0x20
[  292.690350][ T8922]  slab_pre_alloc_hook+0x59/0x300
[  292.695407][ T8922]  ? seq_printf+0x1df/0x280
[  292.699959][ T8922]  ? cgroup_show_path+0xa4/0x590
[  292.704947][ T8922]  __kmem_cache_alloc_node+0x4f/0x270
[  292.710370][ T8922]  ? cgroup_show_path+0xa4/0x590
[  292.715353][ T8922]  kmalloc_trace+0x26/0xe0
[  292.719841][ T8922]  cgroup_show_path+0xa4/0x590
[  292.724668][ T8922]  ? kernfs_sop_show_path+0xf9/0x140
[  292.729997][ T8922]  ? kernfs_sop_show_options+0x120/0x120
[  292.735665][ T8922]  show_mountinfo+0x23b/0x8b0
[  292.740372][ T8922]  ? __lock_acquire+0x7ea0/0x7ea0
[  292.745433][ T8922]  ? __rwlock_init+0x140/0x140
[  292.750225][ T8922]  ? show_mnt_opts+0x340/0x340
[  292.755038][ T8922]  ? _raw_spin_unlock+0x24/0x40
[  292.759933][ T8922]  seq_read_iter+0x8af/0xc50
[  292.764783][ T8922]  vfs_read+0x471/0x960
[  292.768975][ T8922]  ? kernel_read+0x1e0/0x1e0
[  292.773601][ T8922]  ? __fget_files+0x3fc/0x460
[  292.778323][ T8922]  ? __fdget_pos+0x2ae/0x360
[  292.783043][ T8922]  ? ksys_read+0x70/0x260
[  292.787410][ T8922]  ksys_read+0x14d/0x260
[  292.791710][ T8922]  ? vfs_write+0x9a0/0x9a0
[  292.796163][ T8922]  ? lockdep_hardirqs_on+0x94/0x140
[  292.801400][ T8922]  do_syscall_64+0x4c/0xa0
[  292.805857][ T8922]  ? clear_bhb_loop+0x60/0xb0
[  292.810603][ T8922]  ? clear_bhb_loop+0x60/0xb0
[  292.815349][ T8922]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  292.821301][ T8922] RIP: 0033:0x7f7ffa1a94d9
[  292.825747][ T8922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.845386][ T8922] RSP: 002b:00007f7ffb0a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  292.853838][ T8922] RAX: ffffffffffffffda RBX: 00007f7ffa425fa0 RCX: 00007f7ffa1a94d9
[  292.861872][ T8922] RDX: 0000000000002020 RSI: 0000200000000fc0 RDI: 0000000000000003
[  292.869877][ T8922] RBP: 00007f7ffa23804e R08: 0000000000000000 R09: 0000000000000000
[  292.877877][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.885884][ T8922] R13: 00007f7ffa426038 R14: 00007f7ffa425fa0 R15: 00007ffef6e0cf88
[  292.893903][ T8922]  </TASK>
[  292.897119][    T7] usb 5-1: Using ep0 maxpacket: 8
[  292.924087][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  292.988558][    T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  293.028453][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.085989][    T7] usb 5-1: config 0 descriptor??
[  293.302446][ T8935] binder: 8931:8935 ioctl 4018620d 0 returned -22
[  293.325213][    T7] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  293.373687][ T4285] Bluetooth: hci3: Malformed LE Event: 0x1d
[  293.558234][    T7] usb 5-1: USB disconnect, device number 7
[  295.812013][ T9015] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  295.886503][ T9019] loop1: detected capacity change from 0 to 256
[  296.651449][ T9040] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  297.012990][ T9053] loop4: detected capacity change from 0 to 33280
[  297.114382][ T9053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  297.483709][ T6258] EXT4-fs (loop4): unmounting filesystem.
[  298.645961][ T9098] "syz.6.1313" (9098) uses obsolete ecb(arc4) skcipher
[  299.307626][ T9117] device bond1 entered promiscuous mode
[  299.320608][ T9117] 8021q: adding VLAN 0 to HW filter on device bond1
[  299.328254][   T14] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  299.576801][   T14] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  299.604234][   T14] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  299.637157][   T14] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  299.667174][   T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.687763][   T14] usb 10-1: Product: syz
[  299.692099][   T14] usb 10-1: Manufacturer: syz
[  299.717317][   T14] usb 10-1: SerialNumber: syz
[  300.317292][ T9129] loop1: detected capacity change from 0 to 32768
[  300.377624][ T9129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1323 (9129)
[  300.408364][ T9147] loop4: detected capacity change from 0 to 32896
[  300.437100][ T9147] EXT4-fs: Ignoring removed mblk_io_submit option
[  300.484823][ T9147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  300.587303][ T9147] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  300.641966][ T9129] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  300.728453][ T9147] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 33: comm syz.4.1329: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  300.738565][ T9129] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  300.786116][ T6484] usb 10-1: failed to submit out-urb: -90
[  300.801875][ T6484] greybus greybus1: 0/0:0: failed to send response 0 for type 0x01: -90
[  300.822354][ T9147] EXT4-fs error (device loop4) in do_split:2097: Corrupt filesystem
[  300.857150][ T9151] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 33: comm syz.4.1329: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  300.912809][ T9129] BTRFS warning (device loop1): excessive commit interval 3581
[  300.923655][ T9151] EXT4-fs error (device loop4) in do_split:2097: Corrupt filesystem
[  300.957812][ T9129] BTRFS info (device loop1): force zlib compression, level 3
[  300.993574][ T9129] BTRFS info (device loop1): metadata ratio 107050
[  301.025048][   T14] usb 10-1: USB disconnect, device number 4
[  301.028590][ T9129] BTRFS info (device loop1): turning on flush-on-commit
[  301.031345][    C0] usb 10-1: failed to resubmit arpc in-urb: -19
[  301.044430][    C0] usb 10-1: failed to resubmit arpc in-urb: -19
[  301.050771][    C0] usb 10-1: failed to resubmit in-urb: -19
[  301.056779][    C0] usb 10-1: failed to resubmit in-urb: -19
[  301.062772][    C0] usb 10-1: failed to resubmit in-urb: -19
[  301.068674][    C0] usb 10-1: failed to resubmit in-urb: -19
[  301.087437][   T14] usb 10-1: failed to send ARPC request 4: -19
[  301.096342][   T14] usb 10-1: failed to execute ARPC: -19
[  301.105530][   T14] usb 10-1: failed to flush cport 0: -19
[  301.109905][ T9129] BTRFS info (device loop1): max_inline at 4096
[  301.114926][   T14] greybus greybus1: 0/0:0: failed to flush host cport: -19
[  301.125877][   T14] usb 10-1: failed to send ARPC request 2: -19
[  301.167662][   T14] usb 10-1: failed to execute ARPC: -19
[  301.177930][ T9129] BTRFS info (device loop1): using free space tree
[  301.190546][   T14] usb 10-1: failed to quiesce cport 0: -19 (0)
[  301.221028][   T14] greybus greybus1: 0/0:0: failed to quiesce host cport: -19
[  301.243362][ T6258] EXT4-fs (loop4): unmounting filesystem.
[  301.277287][   T14] usb 10-1: failed to send ARPC request 3: -19
[  301.317636][   T14] usb 10-1: failed to execute ARPC: -19
[  301.325817][   T14] usb 10-1: failed to clear cport 0: -19
[  301.372664][   T14] greybus greybus1: 0/0:0: failed to clear host cport: -19
[  301.557774][ T9129] BTRFS info (device loop1): enabling ssd optimizations
[  301.712646][ T9179] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1333'.
[  302.258084][ T7960] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  302.777342][ T9217] FAULT_INJECTION: forcing a failure.
[  302.777342][ T9217] name failslab, interval 1, probability 0, space 0, times 0
[  302.894115][ T9217] CPU: 1 PID: 9217 Comm: syz.9.1343 Not tainted syzkaller #0
[  302.901599][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  302.911747][ T9217] Call Trace:
[  302.915075][ T9217]  <TASK>
[  302.918089][ T9217]  dump_stack_lvl+0x188/0x24e
[  302.922835][ T9217]  ? __sctp_connect+0x5b3/0xd80
[  302.927755][ T9217]  ? __sys_setsockopt+0x2bf/0x3d0
[  302.932839][ T9217]  ? show_regs_print_info+0x12/0x12
[  302.938194][ T9217]  ? load_image+0x410/0x410
[  302.942783][ T9217]  should_fail_ex+0x390/0x4c0
[  302.947541][ T9217]  should_failslab+0x5/0x20
[  302.952113][ T9217]  slab_pre_alloc_hook+0x59/0x300
[  302.957205][ T9217]  ? sctp_add_bind_addr+0x89/0x350
[  302.962429][ T9217]  __kmem_cache_alloc_node+0x4f/0x270
[  302.967900][ T9217]  ? sctp_add_bind_addr+0x89/0x350
[  302.973090][ T9217]  kmalloc_trace+0x26/0xe0
[  302.977574][ T9217]  sctp_add_bind_addr+0x89/0x350
[  302.982585][ T9217]  sctp_copy_local_addr_list+0x317/0x4d0
[  302.988289][ T9217]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[  302.994081][ T9217]  ? sctp_do_8_2_transport_strike+0x900/0x900
[  303.000223][ T9217]  ? sctp_v4_is_any+0x31/0x50
[  303.004971][ T9217]  ? sctp_copy_one_addr+0x93/0x660
[  303.010166][ T9217]  sctp_bind_addr_copy+0xaf/0x3c0
[  303.015267][ T9217]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  303.021664][ T9217]  sctp_connect_new_asoc+0x2f5/0x6a0
[  303.027071][ T9217]  ? __sctp_connect+0xd80/0xd80
[  303.032042][ T9217]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  303.038094][ T9217]  ? sctp_endpoint_lookup_assoc+0xcd/0x260
[  303.044068][ T9217]  __sctp_connect+0x5b3/0xd80
[  303.049173][ T9217]  ? sctp_send_asconf+0x170/0x170
[  303.054271][ T9217]  ? security_sctp_bind_connect+0x85/0xb0
[  303.060056][ T9217]  ? sctp_setsockopt_connectx_old+0xbc/0x150
[  303.066120][ T9217]  sctp_setsockopt+0x813/0xf90
[  303.070953][ T9217]  ? sock_common_recvmsg+0x190/0x190
[  303.076302][ T9217]  __sys_setsockopt+0x2bf/0x3d0
[  303.081267][ T9217]  __x64_sys_setsockopt+0xb1/0xc0
[  303.086965][ T9217]  do_syscall_64+0x4c/0xa0
[  303.091491][ T9217]  ? clear_bhb_loop+0x60/0xb0
[  303.096236][ T9217]  ? clear_bhb_loop+0x60/0xb0
[  303.100981][ T9217]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  303.106987][ T9217] RIP: 0033:0x7f19033a94d9
[  303.111452][ T9217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.131115][ T9217] RSP: 002b:00007f19042ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  303.139591][ T9217] RAX: ffffffffffffffda RBX: 00007f1903625fa0 RCX: 00007f19033a94d9
[  303.147610][ T9217] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000004
[  303.155644][ T9217] RBP: 00007f190343804e R08: 0000000000000010 R09: 0000000000000000
[  303.163763][ T9217] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  303.171881][ T9217] R13: 00007f1903626038 R14: 00007f1903625fa0 R15: 00007ffc970ae5b8
[  303.179964][ T9217]  </TASK>
[  303.877947][ T4285] Bluetooth: hci4: command 0x0406 tx timeout
[  303.887515][   T22] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  303.939211][ T9251] tmpfs: Too small a size for current use
[  304.078831][   T22] usb 2-1: not running at top speed; connect to a high speed hub
[  304.094012][   T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.137499][   T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  304.159328][   T22] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  304.221574][   T22] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  304.251262][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.271607][   T22] usb 2-1: Product: syz
[  304.275863][   T22] usb 2-1: Manufacturer: syz
[  304.283199][ T9261] binder: 9257:9261 unknown command 1074553619
[  304.297444][   T22] usb 2-1: SerialNumber: syz
[  304.313747][ T9261] binder: 9257:9261 ioctl c0306201 200000000200 returned -22
[  304.335067][   T22] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected
[  304.361127][   T22] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  304.372786][   T22] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  304.386776][   T22] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  304.406599][   T22] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  304.430625][ T9260] device bond2 entered promiscuous mode
[  304.438107][   T22] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  304.447521][ T9260] 8021q: adding VLAN 0 to HW filter on device bond2
[  304.525444][ T9266] overlayfs: failed to clone upperpath
[  304.781134][ T9270] netlink: 'syz.6.1357': attribute type 1 has an invalid length.
[  304.811942][ T9241] Set syz1 is full, maxelem 6117 reached
[  304.819079][ T9270] netlink: 'syz.6.1357': attribute type 2 has an invalid length.
[  304.932290][    T7] usb 2-1: USB disconnect, device number 4
[  304.952265][    T7] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  304.996452][    T7] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  305.038993][    T7] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  305.097991][    T7] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  305.141867][    T7] keyspan 2-1:1.0: device disconnected
[  305.185326][ T9278] loop4: detected capacity change from 0 to 33280
[  305.294604][ T9278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  305.320261][ T9278] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.402013][ T6258] EXT4-fs (loop4): unmounting filesystem.
[  305.487611][  T131] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  305.692250][  T131] usb 10-1: Using ep0 maxpacket: 16
[  305.704638][  T131] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.736946][  T131] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.768332][  T131] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  305.787475][  T131] usb 10-1: config 0 interface 0 has no altsetting 0
[  305.810560][  T131] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  305.830759][  T131] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.852581][  T131] usb 10-1: config 0 descriptor??
[  306.009027][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1376'.
[  306.042767][ T9305] device ip6gre1 entered promiscuous mode
[  306.065312][ T9306] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  306.078605][    T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  306.119790][    T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  306.141301][ T4355] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  306.281452][  T131] hid (null): report_id 24797 is invalid
[  306.483872][ T4364] usb 10-1: USB disconnect, device number 5
[  306.634284][ T9324] ecryptfs_parse_options: eCryptfs: unrecognized option [eccipher=aes]
[  306.707688][ T4355] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  306.984149][ T9324] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [255]
[  307.016223][ T9324] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  307.086937][ T9324] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  307.116324][ T9304] loop4: detected capacity change from 0 to 32768
[  307.117708][ T9324] One or more global auth toks could not properly register; rc = [-22]
[  307.157921][ T4355] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  307.205437][ T9324] Error parsing options; rc = [-22]
[  307.277006][ T9304] XFS (loop4): Mounting V5 Filesystem
[  307.402014][ T9304] XFS (loop4): Ending clean mount
[  307.604562][ T6258] XFS (loop4): Unmounting Filesystem
[  308.047620][ T9344] loop9: detected capacity change from 0 to 40427
[  308.073979][ T9344] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  308.105077][ T9344] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  308.136945][ T9344] F2FS-fs (loop9): invalid crc value
[  308.175329][ T9344] F2FS-fs (loop9): Found nat_bits in checkpoint
[  308.387068][ T9344] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  308.408990][ T9344] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  309.589604][ T9379] loop1: detected capacity change from 0 to 32768
[  309.622877][ T9410] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  309.778468][ T9379] XFS (loop1): Mounting V5 Filesystem
[  309.985466][ T9379] XFS (loop1): Ending clean mount
[  310.035128][ T9379] XFS (loop1): Quotacheck needed: Please wait.
[  310.163287][ T9379] XFS (loop1): Quotacheck: Done.
[  310.383178][ T9440] 9pnet: p9_errstr2errno: server reported unknown error ��n$�[
[  310.383178][ T9440] Q&|x�6
[  310.437568][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  310.568814][ T7960] XFS (loop1): Unmounting Filesystem
[  310.909867][ T9445] ceph: No mds server is up or the cluster is laggy
[  310.958972][ T9454] FAULT_INJECTION: forcing a failure.
[  310.958972][ T9454] name failslab, interval 1, probability 0, space 0, times 0
[  311.017722][ T9454] CPU: 0 PID: 9454 Comm: syz.4.1407 Not tainted syzkaller #0
[  311.025200][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  311.035316][ T9454] Call Trace:
[  311.038654][ T9454]  <TASK>
[  311.041664][ T9454]  dump_stack_lvl+0x188/0x24e
[  311.046463][ T9454]  ? show_regs_print_info+0x12/0x12
[  311.051760][ T9454]  ? load_image+0x410/0x410
[  311.056346][ T9454]  ? __might_sleep+0xd0/0xd0
[  311.061035][ T9454]  ? __lock_acquire+0x7ea0/0x7ea0
[  311.066154][ T9454]  should_fail_ex+0x390/0x4c0
[  311.070993][ T9454]  should_failslab+0x5/0x20
[  311.075557][ T9454]  slab_pre_alloc_hook+0x59/0x300
[  311.080651][ T9454]  ? memcg_list_lru_alloc+0x331/0xb00
[  311.086087][ T9454]  __kmem_cache_alloc_node+0x4f/0x270
[  311.091518][ T9454]  ? memcg_list_lru_alloc+0x331/0xb00
[  311.096962][ T9454]  __kmalloc+0xa3/0x240
[  311.101176][ T9454]  memcg_list_lru_alloc+0x331/0xb00
[  311.106449][ T9454]  ? slab_pre_alloc_hook+0xb1/0x300
[  311.111718][ T9454]  ? memcg_reparent_list_lrus+0x850/0x850
[  311.117519][ T9454]  ? get_obj_cgroup_from_current+0xd0/0x280
[  311.123568][ T9454]  slab_pre_alloc_hook+0x2ad/0x300
[  311.128738][ T9454]  ? slab_pre_alloc_hook+0xb1/0x300
[  311.133997][ T9454]  kmem_cache_alloc_lru+0x49/0x2e0
[  311.139144][ T9454]  ? new_inode_pseudo+0x7e/0x1c0
[  311.144127][ T9454]  new_inode_pseudo+0x7e/0x1c0
[  311.148958][ T9454]  new_inode+0x25/0x1d0
[  311.153160][ T9454]  simple_fill_super+0xca/0x5e0
[  311.158041][ T9454]  ? net_generic+0x1e/0x240
[  311.162598][ T9454]  nfsd_fill_super+0x80/0x110
[  311.167311][ T9454]  ? nfsd_fs_get_tree+0xc0/0xc0
[  311.172209][ T9454]  get_tree_keyed+0xd8/0x190
[  311.176846][ T9454]  vfs_get_tree+0x88/0x270
[  311.181297][ T9454]  do_new_mount+0x247/0xa50
[  311.185842][ T9454]  __se_sys_mount+0x2e3/0x3d0
[  311.190556][ T9454]  ? __x64_sys_mount+0xc0/0xc0
[  311.195352][ T9454]  ? lockdep_hardirqs_on+0x94/0x140
[  311.200578][ T9454]  ? __x64_sys_mount+0x1c/0xc0
[  311.205381][ T9454]  do_syscall_64+0x4c/0xa0
[  311.209862][ T9454]  ? clear_bhb_loop+0x60/0xb0
[  311.214596][ T9454]  ? clear_bhb_loop+0x60/0xb0
[  311.219324][ T9454]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  311.225263][ T9454] RIP: 0033:0x7fe5d63a94d9
[  311.229716][ T9454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.249448][ T9454] RSP: 002b:00007fe5d731c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  311.257906][ T9454] RAX: ffffffffffffffda RBX: 00007fe5d6625fa0 RCX: 00007fe5d63a94d9
[  311.265934][ T9454] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000
[  311.274218][ T9454] RBP: 00007fe5d643804e R08: 0000000000000000 R09: 0000000000000000
[  311.282217][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.290216][ T9454] R13: 00007fe5d6626038 R14: 00007fe5d6625fa0 R15: 00007ffdd5a23668
[  311.298249][ T9454]  </TASK>
[  312.017651][ T3605] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  312.056529][ T9490] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  312.121237][ T9479] page:ffffea0001401000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50040
[  312.149878][ T9479] head:ffffea0001401000 order:3 compound_mapcount:0 compound_pincount:0
[  312.171337][ T9479] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  312.190008][ T9479] raw: 00fff00000010200 ffffea0001f44200 dead000000000002 ffff888018442140
[  312.210299][ T9479] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  312.220900][ T3605] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  312.236488][ T9479] page dumped because: unmovable page
[  312.243093][ T3605] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  312.250472][ T9479] page_owner tracks the page as allocated
[  312.274493][ T9479] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6479, tgid 6479 (kworker/u4:15), ts 228432230323, free_ts 225743741032
[  312.282308][ T3605] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  312.336702][ T9479]  post_alloc_hook+0x173/0x1a0
[  312.342521][ T4364] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  312.351261][ T9479]  get_page_from_freelist+0x206b/0x2180
[  312.360674][ T3605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  312.364553][ T9479]  __alloc_pages+0x1ec/0x4f0
[  312.382744][ T9479]  alloc_slab_page+0x5d/0x180
[  312.392066][ T3605] usb 5-1: Product: syz
[  312.393899][ T9479]  new_slab+0x87/0x2d0
[  312.406562][ T3605] usb 5-1: Manufacturer: syz
[  312.407786][ T9479]  ___slab_alloc+0xbc5/0x1240
[  312.421896][ T9479]  __kmem_cache_alloc_node+0x126/0x270
[  312.434608][ T9479]  __kmalloc_node_track_caller+0xa0/0x240
[  312.451520][ T9479]  __alloc_skb+0x226/0x7d0
[  312.456166][ T3605] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  312.469188][ T9479]  nsim_dev_trap_report_work+0x24f/0xa80
[  312.483753][ T9479]  process_one_work+0x8ab/0x1160
[  312.495887][ T9479]  worker_thread+0xaf5/0x12a0
[  312.505649][ T9479]  kthread+0x29d/0x330
[  312.515826][ T9479]  ret_from_fork+0x1f/0x30
[  312.526404][ T9479] page last free stack trace:
[  312.537561][ T9479]  free_unref_page_prepare+0x8e5/0x9e0
[  312.550388][ T9479]  free_unref_page+0x2e/0x3f0
[  312.578343][ T9479]  __unfreeze_partials+0x188/0x1e0
[  312.586133][ T9479]  put_cpu_partial+0x17c/0x250
[  312.596950][ T9479]  qlist_free_all+0x76/0xe0
[  312.607751][ T9479]  kasan_quarantine_reduce+0x144/0x160
[  312.621448][ T9479]  __kasan_slab_alloc+0x1e/0x80
[  312.633459][ T9479]  slab_post_alloc_hook+0x4b/0x490
[  312.646074][ T9479]  kmem_cache_alloc+0x18b/0x2f0
[  312.657723][ T9479]  vm_area_dup+0x23/0x1a0
[  312.692061][ T9479]  __split_vma+0xb9/0x4f0
[  312.713734][ T9479]  do_mas_align_munmap+0x399/0x12d0
[  312.738297][ T9479]  do_mas_munmap+0x240/0x2b0
[  312.761538][ T9479]  __vm_munmap+0x1aa/0x2d0
[  312.783126][ T9479]  __x64_sys_munmap+0x5c/0x70
[  312.806277][ T9479]  do_syscall_64+0x4c/0xa0
[  312.852104][ T4364] usb 2-1: unable to get BOS descriptor or descriptor too short
[  312.884329][ T4364] usb 2-1: unable to read config index 0 descriptor/start: -71
[  312.903135][ T4364] usb 2-1: can't read configurations, error -71
[  313.576345][ T9513] loop1: detected capacity change from 0 to 512
[  313.595298][ T9513] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  313.680266][ T3605] mos7840: probe of ttyUSB0 failed with error -71
[  313.703953][ T3605] usb 5-1: USB disconnect, device number 8
[  313.741635][ T3605] mos7840 5-1:1.0: device disconnected
[  315.707724][ T4355] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  315.717086][ T9579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  315.786192][ T9579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  315.810270][ T9579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  315.910085][ T4355] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  315.946114][ T4355] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.985677][ T4355] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.039416][ T4355] usb 10-1: config 0 interface 0 has no altsetting 0
[  316.068853][ T4355] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  316.114951][ T4355] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.174247][ T4355] usb 10-1: config 0 descriptor??
[  316.390971][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'.
[  316.631023][ T4355] input: HID 17ef:6047 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:17EF:6047.000E/input/input18
[  316.765196][ T4355] lenovo 0003:17EF:6047.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0
[  317.042077][ T9618] bonding: no command found in bonding_masters - use +ifname or -ifname
[  317.165584][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  317.172034][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  317.874381][ T9617] loop4: detected capacity change from 0 to 32768
[  317.929677][ T9617] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1454 (9617)
[  318.013279][ T9617] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  318.047500][ T9617] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  318.083832][   T27] kauditd_printk_skb: 69 callbacks suppressed
[  318.083847][   T27] audit: type=1326 audit(1794626599.293:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9644 comm="syz.1.1460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ffa1a94d9 code=0x0
[  318.088454][ T9617] BTRFS info (device loop4): use zlib compression, level 3
[  318.227626][ T9617] BTRFS info (device loop4): using free space tree
[  318.520067][    T7] usb 10-1: USB disconnect, device number 6
[  318.580351][ T9617] BTRFS info (device loop4): enabling ssd optimizations
[  319.178045][ T9692] overlayfs: failed to clone lowerpath
[  319.188870][ T6258] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  319.727520][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  319.852291][ T9721] loop1: detected capacity change from 0 to 33280
[  319.993119][ T9721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  320.061113][ T9726] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  320.126763][ T9721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  320.236122][ T9721] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.590107][ T9743] ip_tables: iptables: counters copy to user failed while replacing table
[  320.719765][ T9744] loop4: detected capacity change from 0 to 4096
[  320.837223][ T7960] EXT4-fs (loop1): unmounting filesystem.
[  320.844863][ T9744] ntfs3: loop4: ino=9, mi_enum_attr
[  320.864907][ T9744] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  320.889048][ T9744] ntfs3: loop4: ino=9, mi_enum_attr
[  320.894497][ T9744] ntfs3: loop4: ino=b, mi_enum_attr
[  320.933730][ T9744] ntfs3: loop4: Failed to load $Extend.
[  321.178730][ T6258] ntfs3: loop4: ino=5, mi_enum_attr
[  321.184068][ T6258] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  321.914833][ T9767] fuse: Bad value for 'fd'
[  322.159246][ T9749] overlayfs: failed to resolve './file0': -2
[  322.288312][ T9771] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1490'.
[  322.708837][ T9785] ip_tables: iptables: counters copy to user failed while replacing table
[  322.917041][ T9790] 9pnet_fd: Insufficient options for proto=fd
[  322.989883][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1497'.
[  323.389268][ T9807] IPv6: sit2: Disabled Multicast RS
[  323.468511][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1504'.
[  323.584881][ T9815] device bridge_slave_0 left promiscuous mode
[  323.660329][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.998708][ T9834] gadgetfs: bound to dummy_udc driver
[  324.125270][ T9836] input: syz1 as /devices/virtual/input/input19
[  324.298114][ T4355] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  324.311429][    C0] gadgetfs: connected
[  324.319902][ T9833] gadgetfs: suspended from state 3
[  324.325790][ T9833] gadgetfs: disconnected
[  324.817904][ T9857] Invalid ELF header magic: != ELF
[  325.759330][ T9889] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  326.862814][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1536'.
[  328.161486][ T9956] ip_tables: iptables: counters copy to user failed while replacing table
[  328.785027][ T9946] loop4: detected capacity change from 0 to 32768
[  328.916365][ T9946] XFS (loop4): Mounting V5 Filesystem
[  329.016058][ T9946] XFS (loop4): Ending clean mount
[  329.294948][ T9986] loop9: detected capacity change from 0 to 2048
[  329.306964][ T6258] XFS (loop4): Unmounting Filesystem
[  329.414246][ T9986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.698524][ T9990] fuse: Bad value for 'fd'
[  330.406977][ T9983] loop1: detected capacity change from 0 to 32768
[  330.607330][ T9983] XFS (loop1): Mounting V5 Filesystem
[  330.798784][ T9983] XFS (loop1): Ending clean mount
[  330.864902][ T9983] XFS (loop1): Quotacheck needed: Please wait.
[  331.042132][ T9983] XFS (loop1): Quotacheck: Done.
[  331.391141][ T7960] XFS (loop1): Unmounting Filesystem
[  331.921673][T10036] loop9: detected capacity change from 0 to 49152
[  332.050039][T10025] loop4: detected capacity change from 0 to 32768
[  332.066571][T10036] EXT4-fs (loop9): mounted filesystem with ordered data mode. Quota mode: none.
[  332.198131][T10025] XFS (loop4): Mounting V5 Filesystem
[  332.412371][T10025] XFS (loop4): Ending clean mount
[  332.452607][ T7607] EXT4-fs (loop9): unmounting filesystem.
[  332.923313][T10025] overlayfs: conflicting lowerdir path
[  332.972702][T10069] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  333.005049][ T9871] Set syz1 is full, maxelem 65536 reached
[  333.141199][ T6258] XFS (loop4): Unmounting Filesystem
[  334.076880][T10097] loop4: detected capacity change from 0 to 33280
[  334.215101][T10097] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  334.517170][T10079] loop9: detected capacity change from 0 to 40427
[  334.582084][ T6258] EXT4-fs (loop4): unmounting filesystem.
[  334.599027][T10079] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  334.656913][T10079] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  334.704742][T10079] F2FS-fs (loop9): invalid crc value
[  334.760388][T10079] F2FS-fs (loop9): Found nat_bits in checkpoint
[  334.990855][T10079] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  335.028438][T10079] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  336.569056][T10166] loop4: detected capacity change from 0 to 4096
[  336.655536][T10171] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  336.767302][T10166] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  336.997521][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  337.514974][T10197] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96
[  338.077934][  T131] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  338.165138][T10187] loop1: detected capacity change from 0 to 40427
[  338.209658][T10187] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  338.234800][T10187] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  338.280543][  T131] usb 10-1: config 1 has an invalid interface number: 40 but max is 0
[  338.299592][T10187] F2FS-fs (loop1): invalid crc value
[  338.300303][  T131] usb 10-1: config 1 has no interface number 0
[  338.346996][T10187] F2FS-fs (loop1): Found nat_bits in checkpoint
[  338.365339][  T131] usb 10-1: config 1 interface 40 has no altsetting 0
[  338.406603][  T131] usb 10-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=ee.46
[  338.452667][  T131] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.491555][  T131] usb 10-1: Product: syz
[  338.495943][  T131] usb 10-1: Manufacturer: syz
[  338.527758][  T131] usb 10-1: SerialNumber: syz
[  338.590355][T10187] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  338.608926][T10187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  338.795606][  T131] usb 10-1: bad CDC descriptors
[  338.810880][  T131] usb 10-1: bad CDC descriptors
[  338.836896][  T131] cdc_acm 10-1:1.40: Zero length descriptor references
[  338.856809][  T131] cdc_acm: probe of 10-1:1.40 failed with error -22
[  338.893955][  T131] usb 10-1: USB disconnect, device number 7
[  339.895312][ T4353] ------------[ cut here ]------------
[  339.901519][ T4353] sysfs group 'byte_queue_limits' not found for kobject 'tx-0'
[  339.928166][ T4353] WARNING: CPU: 0 PID: 4353 at fs/sysfs/group.c:280 sysfs_remove_group+0x177/0x290
[  339.937975][ T4353] Modules linked in:
[  339.942115][ T4353] CPU: 0 PID: 4353 Comm: kworker/0:4 Not tainted syzkaller #0
[  339.949915][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  339.960234][ T4353] Workqueue: events delete_netdev
[  339.965322][ T4353] RIP: 0010:sysfs_remove_group+0x177/0x290
[  339.971268][ T4353] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 db f3 ca ff 49 8b 17 48 c7 c7 a0 7c bc 8a 48 89 de e8 b9 f1 44 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e3 8f 79 ff
[  339.991187][ T4353] RSP: 0018:ffffc900043c78e0 EFLAGS: 00010246
[  339.997324][ T4353] RAX: 5ddb90e828882d00 RBX: ffffffff8bac6b60 RCX: ffff88802c4f9e00
[  340.005435][ T4353] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  340.013523][ T4353] RBP: 000000000000009a R08: ffffc900043c7567 R09: 1ffff92000878eac
[  340.022199][ T4353] R10: dffffc0000000000 R11: fffff52000878ead R12: 1ffffffff1758c80
[  340.030444][ T4353] R13: dffffc0000000000 R14: ffff8880575b8cb0 R15: ffff888027fc1c20
[  340.038519][ T4353] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  340.048668][ T4353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  340.055502][ T4353] CR2: 0000001b2f420ff8 CR3: 0000000058065000 CR4: 00000000003506f0
[  340.063668][ T4353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  340.071779][ T4353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  340.079842][ T4353] Call Trace:
[  340.083199][ T4353]  <TASK>
[  340.086185][ T4353]  ? netdev_queue_update_kobjects+0x3a2/0x480
[  340.092360][ T4353]  netdev_queue_update_kobjects+0x3dd/0x480
[  340.098353][ T4353]  netdev_unregister_kobject+0x104/0x250
[  340.104050][ T4353]  unregister_netdevice_many_notify+0x14b6/0x1990
[  340.110610][ T4353]  ? unregister_netdevice_many+0x20/0x20
[  340.116316][ T4353]  ? __mutex_lock+0x1ab/0xb40
[  340.121103][ T4353]  unregister_netdevice_queue+0x2e5/0x330
[  340.126897][ T4353]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  340.132992][ T4353]  ? list_netdevice+0x640/0x640
[  340.137939][ T4353]  ? read_lock_is_recursive+0x10/0x10
[  340.143371][ T4353]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  340.149386][ T4353]  ? _raw_spin_unlock+0x40/0x40
[  340.154302][ T4353]  ? process_one_work+0x7b4/0x1160
[  340.159556][ T4353]  ? process_one_work+0x7b4/0x1160
[  340.164750][ T4353]  lowpan_unregister_netdev+0x18/0x20
[  340.170256][ T4353]  unregister_dev+0x70/0x1a0
[  340.174940][ T4353]  ? process_one_work+0x7b4/0x1160
[  340.180147][ T4353]  process_one_work+0x8ab/0x1160
[  340.185181][ T4353]  ? worker_detach_from_pool+0x240/0x240
[  340.190941][ T4353]  ? _raw_spin_lock_irq+0xb7/0xf0
[  340.196206][ T4353]  ? _raw_spin_lock_irqsave+0x100/0x100
[  340.201860][ T4353]  ? wq_worker_running+0x97/0x190
[  340.206987][ T4353]  worker_thread+0xaf5/0x12a0
[  340.211793][ T4353]  kthread+0x29d/0x330
[  340.215922][ T4353]  ? worker_clr_flags+0x1a0/0x1a0
[  340.221041][ T4353]  ? kthread_blkcg+0xd0/0xd0
[  340.225715][ T4353]  ret_from_fork+0x1f/0x30
[  340.230254][ T4353]  </TASK>
[  340.233328][ T4353] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  340.240690][ T4353] CPU: 0 PID: 4353 Comm: kworker/0:4 Not tainted syzkaller #0
[  340.248200][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  340.258304][ T4353] Workqueue: events delete_netdev
[  340.263400][ T4353] Call Trace:
[  340.266725][ T4353]  <TASK>
[  340.269678][ T4353]  dump_stack_lvl+0x188/0x24e
[  340.274414][ T4353]  ? memcpy+0x3c/0x60
[  340.278448][ T4353]  ? show_regs_print_info+0x12/0x12
[  340.283680][ T4353]  ? load_image+0x410/0x410
[  340.288230][ T4353]  panic+0x2d3/0x710
[  340.292333][ T4353]  ? bpf_jit_dump+0xd0/0xd0
[  340.296872][ T4353]  ? ret_from_fork+0x1f/0x30
[  340.301510][ T4353]  __warn+0x2f8/0x4f0
[  340.305521][ T4353]  ? sysfs_remove_group+0x177/0x290
[  340.310757][ T4353]  ? sysfs_remove_group+0x177/0x290
[  340.315987][ T4353]  report_bug+0x2ba/0x4f0
[  340.320350][ T4353]  ? sysfs_remove_group+0x177/0x290
[  340.325595][ T4353]  handle_bug+0x3a/0x70
[  340.329805][ T4353]  exc_invalid_op+0x16/0x40
[  340.334422][ T4353]  asm_exc_invalid_op+0x16/0x20
[  340.339305][ T4353] RIP: 0010:sysfs_remove_group+0x177/0x290
[  340.345158][ T4353] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 db f3 ca ff 49 8b 17 48 c7 c7 a0 7c bc 8a 48 89 de e8 b9 f1 44 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e3 8f 79 ff
[  340.364816][ T4353] RSP: 0018:ffffc900043c78e0 EFLAGS: 00010246
[  340.370934][ T4353] RAX: 5ddb90e828882d00 RBX: ffffffff8bac6b60 RCX: ffff88802c4f9e00
[  340.378959][ T4353] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  340.386974][ T4353] RBP: 000000000000009a R08: ffffc900043c7567 R09: 1ffff92000878eac
[  340.394973][ T4353] R10: dffffc0000000000 R11: fffff52000878ead R12: 1ffffffff1758c80
[  340.402973][ T4353] R13: dffffc0000000000 R14: ffff8880575b8cb0 R15: ffff888027fc1c20
[  340.410990][ T4353]  ? netdev_queue_update_kobjects+0x3a2/0x480
[  340.417098][ T4353]  netdev_queue_update_kobjects+0x3dd/0x480
[  340.423035][ T4353]  netdev_unregister_kobject+0x104/0x250
[  340.428699][ T4353]  unregister_netdevice_many_notify+0x14b6/0x1990
[  340.435265][ T4353]  ? unregister_netdevice_many+0x20/0x20
[  340.440937][ T4353]  ? __mutex_lock+0x1ab/0xb40
[  340.445781][ T4353]  unregister_netdevice_queue+0x2e5/0x330
[  340.451539][ T4353]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  340.457562][ T4353]  ? list_netdevice+0x640/0x640
[  340.462452][ T4353]  ? read_lock_is_recursive+0x10/0x10
[  340.467853][ T4353]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  340.473782][ T4353]  ? _raw_spin_unlock+0x40/0x40
[  340.478676][ T4353]  ? process_one_work+0x7b4/0x1160
[  340.483818][ T4353]  ? process_one_work+0x7b4/0x1160
[  340.488959][ T4353]  lowpan_unregister_netdev+0x18/0x20
[  340.494364][ T4353]  unregister_dev+0x70/0x1a0
[  340.498992][ T4353]  ? process_one_work+0x7b4/0x1160
[  340.504138][ T4353]  process_one_work+0x8ab/0x1160
[  340.509168][ T4353]  ? worker_detach_from_pool+0x240/0x240
[  340.514834][ T4353]  ? _raw_spin_lock_irq+0xb7/0xf0
[  340.519891][ T4353]  ? _raw_spin_lock_irqsave+0x100/0x100
[  340.525471][ T4353]  ? wq_worker_running+0x97/0x190
[  340.530553][ T4353]  worker_thread+0xaf5/0x12a0
[  340.535291][ T4353]  kthread+0x29d/0x330
[  340.539408][ T4353]  ? worker_clr_flags+0x1a0/0x1a0
[  340.544486][ T4353]  ? kthread_blkcg+0xd0/0xd0
[  340.549137][ T4353]  ret_from_fork+0x1f/0x30
[  340.553626][ T4353]  </TASK>
[  340.557269][ T4353] Kernel Offset: disabled
[  340.561767][ T4353] Rebooting in 86400 seconds..