last executing test programs:

1m54.688784604s ago: executing program 1 (id=2183):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e)
connect$pptp(r0, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='}m', 0x2}], 0x1)

1m53.913669124s ago: executing program 1 (id=2186):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="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", 0xfb}, {&(0x7f0000000340)="aaf44ce6b28c7f4f471250005b11cb328bb45a228a27ee79a2243dbb5f1becfd7845553ada502c20558a3f1b88703528f340d1b418272cd135672a268f9ca3c54ec4ab563b7e3825528a000000a568111bd8e357b2c7cfc84e74e865989fee2fcb95359c868f17269a1d09d22f3d1950731079eb0739fb65d4d1b787350590b89179e535f97411e00892", 0x8a}, {&(0x7f00000004c0)="0b9f4f5e5eb9548bdb900669d929ed911f5e628c79be2a1386e93d33029f51a9d1996d6e865cae1a325e1e89dcb89319628f34656705f39e3ff09918616dd551f706fcb9576063aff0d5f713fff44ad93c173799c007158672382d47f572561bd6a7481caad04a229214431d0bec1cf048a0d5f2b1e2b14078ce", 0x7a}, {&(0x7f0000001000)="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", 0xe9f}], 0x5, 0x0, 0x0, 0x880}], 0x1, 0xc0041)
recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001f40)=""/4102, 0x1006}, {&(0x7f0000002f80)=""/176, 0xb0}], 0x2}, 0x4}], 0x1, 0x40002020, 0x0)

1m53.623540013s ago: executing program 1 (id=2189):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd0a, 0x0)

1m53.396204827s ago: executing program 1 (id=2190):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000000c80)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv")
r0 = openat(0xffffffffffffff9c, &(0x7f00000224c0)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f0000022500)=[{&(0x7f0000022540)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
creat(&(0x7f00000225c0)='./bus\x00', 0x0)
mount(&(0x7f0000022600)=@loop={'/dev/loop', 0x0}, &(0x7f0000022640)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000022680)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000226c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1f, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737eb4b78c660e677df931905b9aafab4cfaaf755a3f68424978700", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x1000, 0xffffffffffffffff]})

1m52.212639979s ago: executing program 1 (id=2197):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1, 0x4}, @empty, @multicast2, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r0, &(0x7f0000000500)=ANY=[], 0x34)

1m51.462408056s ago: executing program 1 (id=2205):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@grpquota}]}, 0x1, 0xbbc, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='.\x00', 0x0, 0x6)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001140)={0xff9c, 0x8001})

1m51.13555526s ago: executing program 32 (id=2205):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@grpquota}]}, 0x1, 0xbbc, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='.\x00', 0x0, 0x6)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001140)={0xff9c, 0x8001})

5.05021813s ago: executing program 0 (id=2760):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x12, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800)

4.499664047s ago: executing program 2 (id=2767):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = signalfd4(r0, &(0x7f0000000540)={[0xc000000000000000]}, 0x8, 0x800)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x80)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
io_setup(0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000780), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000800), 0x10106, 0x2, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4)
bind$rds(r2, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1, &(0x7f0000000980)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000009c0)=0x3, 0xac5)
getrusage(0x1, &(0x7f0000000880))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_SE(r3, 0x0, 0x0)
setns(r1, 0x2000000)

4.098765618s ago: executing program 0 (id=2779):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040098)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f0000000380)='0', 0x1, 0x40000, 0x0, 0x0)

4.048801413s ago: executing program 2 (id=2770):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1003, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}}, 0x880)

2.764514526s ago: executing program 0 (id=2773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x16, 0xc, &(0x7f0000001e40)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff00000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(0xffffffffffffffff, &(0x7f0000002080)=[{&(0x7f00000020c0)}, {&(0x7f0000002100)="1100f8ae", 0x4}, {&(0x7f0000002140)="00050090b4", 0x5}, {&(0x7f0000002180)='#', 0x1}], 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001900)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000001980)=[{&(0x7f00000019c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c909", 0x60}, {0x0}, {&(0x7f0000001c00)}, {&(0x7f0000001cc0)}], 0x4}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001740)={'bridge0\x00'})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001580)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)

2.500720563s ago: executing program 2 (id=2775):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000009e40), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000009e80)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000009f80)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f000000a000)={&(0x7f000000a040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f000000a0c0), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f000000a100)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f000000a140)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f000000a180)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f000000a1c0)={0x0, 0x0, &(0x7f000000a200)={&(0x7f000000a240)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/de\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x8, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f000000a300), 0x56)
sendmsg$kcm(r5, &(0x7f000000a340)={&(0x7f000000a380)=@xdp={0x2c, 0x0, r7, 0x21}, 0x80, &(0x7f000000a400)=[{&(0x7f000000a440)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f000000a480)="9942d6af00007f8f", 0x8}], 0x2}, 0x0)

2.049134959s ago: executing program 3 (id=2778):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)='prev_comm', 0x9)

2.048650729s ago: executing program 4 (id=2780):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=@newtfilter={0x8b8, 0x2c, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x888, 0x2, [@TCA_BASIC_POLICE={0x884, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x5, 0x7, 0x10000, 0x9, 0x5, 0x8, 0x200, 0xfffffff9, 0xb, 0x3, 0x4, 0x2, 0xb, 0x7, 0xc, 0x5, 0x1, 0x100, 0x7, 0x10, 0xffffff81, 0x4, 0x7, 0xfffff800, 0x1, 0x0, 0x9, 0x400, 0x0, 0x4, 0x386, 0x4, 0x5614835b, 0x10001, 0x8, 0x8000002, 0x1, 0x4, 0x2, 0x8, 0x9, 0x1, 0x6, 0x3, 0x6, 0x80, 0x2, 0x8, 0x3, 0xfffffffb, 0xfd1a, 0x7ff, 0x2, 0x5, 0x8, 0x1000, 0x6, 0x19a3, 0x5ee9, 0x5, 0x7, 0x10, 0xa0f2fba, 0x533, 0x5, 0x20000002, 0x6, 0x7, 0x5, 0x9, 0x0, 0x0, 0x1, 0x0, 0x3, 0x8, 0x5, 0x3, 0xffffffad, 0x7fff, 0x6, 0xffffff81, 0x2, 0x6, 0x9, 0x401, 0x6, 0xffffff60, 0x0, 0x4, 0x1, 0x71, 0x7, 0x5, 0x80000000, 0xb2, 0xb, 0x80000000, 0x751, 0x5, 0x4, 0x3240, 0x20f, 0x3ff, 0x700, 0x40, 0x1, 0x1, 0x8, 0xbc2, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x401, 0xd4, 0xfffffffb, 0x2, 0x20000005, 0x28000, 0x6, 0x3ed0, 0x1, 0x17, 0x10, 0x4, 0x80000001, 0x8, 0x7, 0x100, 0x8, 0x0, 0x2, 0x7, 0xb, 0x2, 0x3, 0xfffffff9, 0x1, 0x2, 0xe, 0x1ff, 0x7, 0x9, 0x400000, 0x9a9e, 0x7, 0x0, 0xf0c, 0xfffffffe, 0x0, 0x1, 0x4, 0xf, 0x1, 0x2, 0x4, 0x2, 0x174, 0x1, 0x100, 0x3ff, 0x9, 0xf, 0xffffffff, 0x6, 0x9, 0x7, 0x60d, 0x8, 0x7dc, 0x4, 0x7, 0x1, 0xf, 0x354cc4d5, 0x2d87, 0x9, 0x4, 0xc, 0x725, 0xffff8ec7, 0xc, 0x8, 0x5, 0x14, 0x80, 0x5, 0x9, 0x4, 0x7fff, 0xe9b, 0x38, 0x40, 0x2, 0x8, 0x4, 0x5, 0x101, 0x7, 0x8930, 0x3, 0x8, 0x24, 0x548c, 0x80000000, 0x5, 0xb, 0x8, 0x3, 0x200, 0x2c000, 0x7fff, 0x2a8d3ea9, 0xffff, 0x2, 0x2, 0x7, 0x4, 0x2, 0x3, 0x9, 0x2, 0x145, 0xa7ca, 0x3, 0x1, 0x2, 0x9, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x7, 0x0, 0xe0d1, 0x800, 0x9, 0xe0a9, 0x6, 0xb0, 0xc, 0x8, 0x5, 0x6e1de56b, 0xffffff07, 0x32d, 0x3a, 0x1ff, 0x8, 0x6, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x401, 0xce61, 0xf, {0x9, 0x0, 0x100, 0x800, 0x6, 0x7}, {0x81, 0x0, 0x7d, 0x3, 0xd}, 0x10000, 0x9, 0x80000000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x8, 0x7, 0x9, 0x8, 0x0, 0x302, 0x3, 0xd, 0xfeb, 0x1, 0x400, 0x8000, 0x0, 0x9, 0xffffffff, 0x5, 0x100, 0x8, 0x9, 0xcb70, 0xfffff000, 0x5, 0x80000000, 0x2, 0xcb, 0x7, 0x4, 0xc577, 0x984, 0x2, 0x4, 0xd, 0x4, 0x10, 0xef, 0x3, 0x2, 0x5, 0x6, 0x401, 0xd, 0x1c, 0xffffbe29, 0x9, 0x6, 0x1, 0x5, 0x1, 0x5, 0x9, 0xe, 0x3, 0x2, 0x9, 0x7, 0x9, 0x0, 0x8001, 0x0, 0x80000000, 0x9, 0xf, 0x4, 0xfffffff8, 0x0, 0xc, 0x9, 0x36ec, 0x2, 0x4197fa5b, 0x2, 0x7fffffff, 0xff, 0x39, 0xff, 0x8001, 0x7, 0x9, 0x2, 0x1, 0x6, 0x3ff, 0x3057, 0x8001, 0x80000000, 0x5, 0x6, 0x8, 0xdb6, 0x8, 0x2, 0x6, 0x1, 0xf688, 0x1, 0x9986, 0x0, 0x8, 0x5, 0x5, 0xffff, 0x5, 0x100, 0x18000000, 0x3, 0x9, 0x0, 0xb8, 0x1, 0x3, 0x9cc0, 0x0, 0x10, 0x1, 0x0, 0x9, 0x200, 0x8, 0x476, 0x6, 0xa, 0x7fff, 0xffffffff, 0xd56, 0x2, 0x6, 0x4, 0x8, 0x4, 0x2, 0x3, 0x3, 0x4, 0xd, 0x0, 0x4080, 0x9, 0x1, 0x2, 0x9, 0xe, 0x8, 0x80000001, 0x2, 0x8, 0xfff, 0x3, 0x800, 0x145, 0x3, 0x51, 0x0, 0x4, 0xe0b, 0x200, 0xe8c, 0x2, 0x4, 0x2, 0x6, 0x5, 0x0, 0x3, 0x1, 0x7ff, 0x6, 0x5, 0x4, 0x3, 0x4, 0x101, 0x2, 0x44, 0x24, 0xebd, 0x6a4, 0x80000000, 0x7ff, 0x5, 0x0, 0x2, 0x6, 0x7, 0xb13, 0x100, 0x10, 0xeb, 0x2, 0x8, 0x7, 0x1f0, 0x90, 0x4, 0xfffffffe, 0xf, 0x3ff, 0x4, 0x8001, 0x8001, 0x3, 0x0, 0x1, 0xcf6, 0x5, 0x4, 0x1, 0x8, 0x7, 0x7f, 0x8, 0xfffffff7, 0x80000001, 0x89, 0x2, 0x1, 0x7, 0x3, 0xd4, 0x6, 0x2, 0x0, 0x0, 0x2, 0x5, 0x4, 0x4, 0x8, 0x81, 0x6, 0x6, 0x6, 0x800, 0x3, 0x22, 0x9, 0x80, 0x7, 0xfff, 0x3e, 0xb2, 0x5, 0xb1, 0x5, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, 0x9, 0x1, 0xd98, 0x8, 0x7, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x78, 0x5e3, 0x40, {0x2, 0x2, 0xb60b, 0x81, 0x100, 0x400}, {0x4, 0x1, 0x9, 0x5, 0x4, 0x2}, 0x100, 0x2, 0x10000}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x20004005}, 0x4004000)
write$cgroup_pid(r0, &(0x7f00000002c0), 0x12)

2.024955362s ago: executing program 5 (id=2781):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0xc, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000026c0)=[@code={0xa, 0x70, {"b805000000b9000000000f01d96467f3250000000066b811010f00d866b80e010f00d0460f0848b804000000000000000f23d00f21f8350000000c0f23f84281bc0800a00000907c0000c4e221936457e565650f1c860000c0fec401557623"}}], 0x70})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x5, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.898967855s ago: executing program 2 (id=2782):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00'})
r5 = socket(0x11, 0x2, 0x40)
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x20000000)
bind$802154_dgram(r2, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
pipe(&(0x7f0000000800)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f0000000840), 0x11000)
writev(r8, &(0x7f0000000880)=[{&(0x7f00000008c0)='^', 0x1}], 0x1)
pselect6(0x40, &(0x7f0000000900)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x54, r10, 0x8, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}]}]}, 0x54}}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xd, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
vmsplice(r7, &(0x7f0000000bc0)=[{&(0x7f0000000c00), 0x3528a9c0}], 0x1, 0x0)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x2000c045)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000170000005400068014000300706565725f6e6f0000000000000200003c00040067636d286165732900000000000000000000000000000000000000000000000014"], 0x68}}, 0x0)

1.867485428s ago: executing program 0 (id=2783):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x1, 0x8, &(0x7f0000002940)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.84456055s ago: executing program 4 (id=2784):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040098)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f0000000380)='0', 0x1, 0x40000, 0x0, 0x0)

1.709170524s ago: executing program 0 (id=2785):
syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000240)='./bus\x00', 0x18418, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000000440)="$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")
setrlimit(0x1, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000940)='./file1\x00', 0x20fdfffffe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x143441, 0x98)
write$FUSE_INIT(r0, &(0x7f00000009c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x56e, 0x10, 0x7, 0xa, 0x6, 0x0, 0x0, 0x0, 0x10, 0xe}}, 0x50)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
unshare(0x60040000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)

1.708993955s ago: executing program 3 (id=2786):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x0, 0x309, 0xfffffffe, 0x25dfdbff, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)

1.545676501s ago: executing program 5 (id=2787):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240003006d04000082c0000004000000000000000600ff0901a101851075dd950609018102090191028511750895130901810209019102c0"], 0x13c)
write$UHID_INPUT2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c000000070010ff08"], 0xd)

1.292594227s ago: executing program 5 (id=2788):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)={0x44, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1.27239966s ago: executing program 3 (id=2789):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x20004011)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x1, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00200428bd7000fbdbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0xffffffff, @rand_addr=' \x01\x00', 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4622, 0x7ffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000580), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000730000009500000000000000c1e6a0fb5d041ecf53"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x2, 0x5, 0x400, 0xb8, 0xd30048, r2})

1.217159535s ago: executing program 4 (id=2790):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r1}, 0xc)

1.052720452s ago: executing program 4 (id=2791):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000000340)={@val={0x70, 0x8864}, @void, @eth={@broadcast, @remote, @void, {@generic={0x8906}}}}, 0x12)

855.623672ms ago: executing program 3 (id=2792):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x880)
write(r1, &(0x7f0000000940)="443e4cd0", 0x4)

807.868617ms ago: executing program 2 (id=2793):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x6, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x16, 0xc, &(0x7f0000001e40)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff00000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(0xffffffffffffffff, &(0x7f0000002080)=[{&(0x7f00000020c0)}, {&(0x7f0000002100)="1100f8ae", 0x4}, {&(0x7f0000002140)="00050090b4", 0x5}, {&(0x7f0000002180)='#', 0x1}], 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001900)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000001980)=[{&(0x7f00000019c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c909", 0x60}, {0x0}, {&(0x7f0000001c00)}, {&(0x7f0000001cc0)}], 0x4}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x20004004)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001740)={'bridge0\x00'})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001580)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)

638.190055ms ago: executing program 5 (id=2794):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=@newtfilter={0x8b8, 0x2c, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x888, 0x2, [@TCA_BASIC_POLICE={0x884, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x5, 0x7, 0x10000, 0x9, 0x5, 0x8, 0x200, 0xfffffff9, 0xb, 0x3, 0x4, 0x2, 0xb, 0x7, 0xc, 0x5, 0x1, 0x100, 0x7, 0x10, 0xffffff81, 0x4, 0x7, 0xfffff800, 0x1, 0x0, 0x9, 0x400, 0x0, 0x4, 0x386, 0x4, 0x5614835b, 0x10001, 0x8, 0x8000002, 0x1, 0x4, 0x2, 0x8, 0x9, 0x1, 0x6, 0x3, 0x6, 0x80, 0x2, 0x8, 0x3, 0xfffffffb, 0xfd1a, 0x7ff, 0x2, 0x5, 0x8, 0x1000, 0x6, 0x19a3, 0x5ee9, 0x5, 0x7, 0x10, 0xa0f2fba, 0x533, 0x5, 0x20000002, 0x6, 0x7, 0x5, 0x9, 0x0, 0x0, 0x1, 0x0, 0x3, 0x8, 0x5, 0x3, 0xffffffad, 0x7fff, 0x6, 0xffffff81, 0x2, 0x6, 0x9, 0x401, 0x6, 0xffffff60, 0x0, 0x4, 0x1, 0x71, 0x7, 0x5, 0x80000000, 0xb2, 0xb, 0x80000000, 0x751, 0x5, 0x4, 0x3240, 0x20f, 0x3ff, 0x700, 0x40, 0x1, 0x1, 0x8, 0xbc2, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x401, 0xd4, 0xfffffffb, 0x2, 0x20000005, 0x28000, 0x6, 0x3ed0, 0x1, 0x17, 0x10, 0x4, 0x80000001, 0x8, 0x7, 0x100, 0x8, 0x0, 0x2, 0x7, 0xb, 0x2, 0x3, 0xfffffff9, 0x1, 0x2, 0xe, 0x1ff, 0x7, 0x9, 0x400000, 0x9a9e, 0x7, 0x0, 0xf0c, 0xfffffffe, 0x0, 0x1, 0x4, 0xf, 0x1, 0x2, 0x4, 0x2, 0x174, 0x1, 0x100, 0x3ff, 0x9, 0xf, 0xffffffff, 0x6, 0x9, 0x7, 0x60d, 0x8, 0x7dc, 0x4, 0x7, 0x1, 0xf, 0x354cc4d5, 0x2d87, 0x9, 0x4, 0xc, 0x725, 0xffff8ec7, 0xc, 0x8, 0x5, 0x14, 0x80, 0x5, 0x9, 0x4, 0x7fff, 0xe9b, 0x38, 0x40, 0x2, 0x8, 0x4, 0x5, 0x101, 0x7, 0x8930, 0x3, 0x8, 0x24, 0x548c, 0x80000000, 0x5, 0xb, 0x8, 0x3, 0x200, 0x2c000, 0x7fff, 0x2a8d3ea9, 0xffff, 0x2, 0x2, 0x7, 0x4, 0x2, 0x3, 0x9, 0x2, 0x145, 0xa7ca, 0x3, 0x1, 0x2, 0x9, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x7, 0x0, 0xe0d1, 0x800, 0x9, 0xe0a9, 0x6, 0xb0, 0xc, 0x8, 0x5, 0x6e1de56b, 0xffffff07, 0x32d, 0x3a, 0x1ff, 0x8, 0x6, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0x401, 0xce61, 0xf, {0x9, 0x0, 0x100, 0x800, 0x6, 0x7}, {0x81, 0x0, 0x7d, 0x3, 0xd}, 0x10000, 0x9, 0x80000000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x8, 0x7, 0x9, 0x8, 0x0, 0x302, 0x3, 0xd, 0xfeb, 0x1, 0x400, 0x8000, 0x0, 0x9, 0xffffffff, 0x5, 0x100, 0x8, 0x9, 0xcb70, 0xfffff000, 0x5, 0x80000000, 0x2, 0xcb, 0x7, 0x4, 0xc577, 0x984, 0x2, 0x4, 0xd, 0x4, 0x10, 0xef, 0x3, 0x2, 0x5, 0x6, 0x401, 0xd, 0x1c, 0xffffbe29, 0x9, 0x6, 0x1, 0x5, 0x1, 0x5, 0x9, 0xe, 0x3, 0x2, 0x9, 0x7, 0x9, 0x0, 0x8001, 0x0, 0x80000000, 0x9, 0xf, 0x4, 0xfffffff8, 0x0, 0xc, 0x9, 0x36ec, 0x2, 0x4197fa5b, 0x2, 0x7fffffff, 0xff, 0x39, 0xff, 0x8001, 0x7, 0x9, 0x2, 0x1, 0x6, 0x3ff, 0x3057, 0x8001, 0x80000000, 0x5, 0x6, 0x8, 0xdb6, 0x8, 0x2, 0x6, 0x1, 0xf688, 0x1, 0x9986, 0x0, 0x8, 0x5, 0x5, 0xffff, 0x5, 0x100, 0x18000000, 0x3, 0x9, 0x0, 0xb8, 0x1, 0x3, 0x9cc0, 0x0, 0x10, 0x1, 0x0, 0x9, 0x200, 0x8, 0x476, 0x6, 0xa, 0x7fff, 0xffffffff, 0xd56, 0x2, 0x6, 0x4, 0x8, 0x4, 0x2, 0x3, 0x3, 0x4, 0xd, 0x0, 0x4080, 0x9, 0x1, 0x2, 0x9, 0xe, 0x8, 0x80000001, 0x2, 0x8, 0xfff, 0x3, 0x800, 0x145, 0x3, 0x51, 0x0, 0x4, 0xe0b, 0x200, 0xe8c, 0x2, 0x4, 0x2, 0x6, 0x5, 0x0, 0x3, 0x1, 0x7ff, 0x6, 0x5, 0x4, 0x3, 0x4, 0x101, 0x2, 0x44, 0x24, 0xebd, 0x6a4, 0x80000000, 0x7ff, 0x5, 0x0, 0x2, 0x6, 0x7, 0xb13, 0x100, 0x10, 0xeb, 0x2, 0x8, 0x7, 0x1f0, 0x90, 0x4, 0xfffffffe, 0xf, 0x3ff, 0x4, 0x8001, 0x8001, 0x3, 0x0, 0x1, 0xcf6, 0x5, 0x4, 0x1, 0x8, 0x7, 0x7f, 0x8, 0xfffffff7, 0x80000001, 0x89, 0x2, 0x1, 0x7, 0x3, 0xd4, 0x6, 0x2, 0x0, 0x0, 0x2, 0x5, 0x4, 0x4, 0x8, 0x81, 0x6, 0x6, 0x6, 0x800, 0x3, 0x22, 0x9, 0x80, 0x7, 0xfff, 0x3e, 0xb2, 0x5, 0xb1, 0x5, 0x7, 0x8, 0x2, 0x6, 0x0, 0x4, 0x9, 0x1, 0xd98, 0x8, 0x7, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x78, 0x5e3, 0x40, {0x2, 0x2, 0xb60b, 0x81, 0x100, 0x400}, {0x4, 0x1, 0x9, 0x5, 0x4, 0x2}, 0x100, 0x2, 0x10000}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x20004005}, 0x4004000)
write$cgroup_pid(r0, &(0x7f00000002c0), 0x12)

602.041309ms ago: executing program 4 (id=2795):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x1, 0x8, &(0x7f0000002940)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

433.369636ms ago: executing program 0 (id=2796):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000000c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000224c0)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f0000022500)=[{&(0x7f0000022540)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
creat(&(0x7f00000225c0)='./bus\x00', 0x0)
mount(&(0x7f0000022600)=@loop={'/dev/loop', 0x0}, &(0x7f0000022640)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000022680)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000226c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1f, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737eb4b78c660e677df931905b9aafab4cfaaf755a3f68424978700", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x1000, 0xffffffffffffffff]})

275.415052ms ago: executing program 4 (id=2797):
inotify_init()
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x8, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@norecovery}, {@dioread_nolock}, {@resgid}]}, 0x1, 0x502, &(0x7f0000001c40)="$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")
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x10000}, 0x28)
fchdir(r0)
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[], [{@pcr={'pcr', 0x3d, 0x34}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x3, 0x45f, &(0x7f0000000c80)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x800007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000001200)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001280), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001300)=0x6)
setns(0xc9, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000001340)=0x5a6, 0x4)
sendmmsg(r4, &(0x7f00000013c0), 0x800001d, 0x300)

263.211003ms ago: executing program 5 (id=2798):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)='prev_comm', 0x9)

237.749746ms ago: executing program 3 (id=2799):
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0xc, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000026c0)=[@code={0xa, 0x70, {"b805000000b9000000000f01d96467f3250000000066b811010f00d866b80e010f00d0460f0848b804000000000000000f23d00f21f8350000000c0f23f84281bc0800a00000907c0000c4e221936457e565650f1c860000c0fec401557623"}}], 0x70})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x5, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

144.853996ms ago: executing program 2 (id=2800):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040098)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f0000000380)='0', 0x1, 0x40000, 0x0, 0x0)

86.100022ms ago: executing program 5 (id=2801):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r1}, 0xc)

0s ago: executing program 3 (id=2802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x20004011)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x1, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00200428bd7000fbdbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0xffffffff, @rand_addr=' \x01\x00', 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4622, 0x7ffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000580), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000730000009500000000000000c1e6a0fb5d041ecf53"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x2, 0x5, 0x400, 0xb8, 0xd30048, r2})

kernel console output (not intermixed with test programs):

6098
[  228.960333][ T7307] RBP: 00007fa49fe26090 R08: 0000000000000000 R09: 0000000000000000
[  228.968352][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.976394][ T7307] R13: 00007fa49fe26128 R14: 00007ffe800dcbb0 R15: 00007ffe800dcc98
[  228.984438][ T7307]  </TASK>
[  229.174364][ T7314] netlink: 'syz.2.998': attribute type 4 has an invalid length.
[  229.182761][ T7314] netlink: 17 bytes leftover after parsing attributes in process `syz.2.998'.
[  229.467724][ T7331] netlink: 'syz.3.1005': attribute type 1 has an invalid length.
[  229.648812][ T7332] bond6: (slave veth0_to_bond): Releasing active interface
[  229.658964][ T7339] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1 (only 8 groups)
[  231.878311][ T7373] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  232.156408][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1025'.
[  234.516247][ T7421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1039'.
[  234.707838][ T7430] netlink: 'syz.4.1041': attribute type 1 has an invalid length.
[  234.785162][ T7430] 8021q: adding VLAN 0 to HW filter on device bond7
[  234.810800][ T7433] bond7: (slave veth0_to_bond): making interface the new active one
[  234.864128][ T7433] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  234.941812][ T6504] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  234.981130][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'.
[  236.321418][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'.
[  236.581926][ T7466] netlink: 'syz.1.1054': attribute type 1 has an invalid length.
[  236.674805][ T7466] 8021q: adding VLAN 0 to HW filter on device bond4
[  236.752868][ T7470] bond4: (slave veth0_to_bond): making interface the new active one
[  236.763525][ T7470] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  236.773117][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  236.907513][ T7477] loop3: detected capacity change from 0 to 128
[  236.939776][ T7477] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  236.960823][ T7478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1058'.
[  236.976971][ T7477] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  237.001143][ T7478] device ip6gre1 entered promiscuous mode
[  237.031744][   T27] audit: type=1800 audit(1793419930.439:21): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1057" name="bus" dev="loop3" ino=1048641 res=0 errno=0
[  237.184796][ T4653] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  237.543742][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'.
[  238.755546][ T7511] netlink: 'syz.1.1070': attribute type 1 has an invalid length.
[  238.906178][ T7511] 8021q: adding VLAN 0 to HW filter on device bond5
[  238.991100][ T7512] bond4: (slave veth0_to_bond): Releasing active interface
[  239.063082][ T7512] bond5: (slave veth0_to_bond): making interface the new active one
[  239.088038][ T7512] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  239.104135][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  239.155759][ T7523] loop0: detected capacity change from 0 to 128
[  239.190690][ T7523] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  239.252470][ T7523] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  239.315877][   T27] audit: type=1800 audit(1793419932.729:22): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1074" name="bus" dev="loop0" ino=1048642 res=0 errno=0
[  239.473711][   T41] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  239.650894][ T7537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1079'.
[  239.678650][ T7537] device ip6gre1 entered promiscuous mode
[  239.760380][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'.
[  239.964490][ T7551] netlink: 'syz.4.1086': attribute type 1 has an invalid length.
[  240.006873][ T7551] 8021q: adding VLAN 0 to HW filter on device bond8
[  240.060714][ T7551] bond7: (slave veth0_to_bond): Releasing active interface
[  240.115900][ T7551] bond8: (slave veth0_to_bond): making interface the new active one
[  240.169440][ T7551] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  240.197297][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
[  241.508664][ T7574] device vlan2 entered promiscuous mode
[  241.552548][ T7574] device bridge0 entered promiscuous mode
[  241.565573][ T7576] netlink: 'syz.1.1094': attribute type 4 has an invalid length.
[  241.578758][ T7576] netlink: 'syz.1.1094': attribute type 10 has an invalid length.
[  241.587276][ T7576] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1094'.
[  241.606219][ T7576] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  241.654380][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'.
[  241.906588][ T7590] netlink: 'syz.3.1099': attribute type 1 has an invalid length.
[  242.043844][ T7594] loop2: detected capacity change from 0 to 8192
[  242.074752][ T7590] 8021q: adding VLAN 0 to HW filter on device bond8
[  242.183347][ T7593] bond8: (slave veth0_to_bond): making interface the new active one
[  242.211061][ T7593] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  242.231821][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
[  242.283178][ T7597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1101'.
[  242.364684][ T4273] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[  242.401720][ T4273] FAT-fs (loop2): Filesystem has been set read-only
[  243.347650][ T7617] device vlan2 entered promiscuous mode
[  243.357710][ T7617] device bridge0 entered promiscuous mode
[  243.366304][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  243.914050][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'.
[  244.132065][ T7645] netlink: 'syz.4.1116': attribute type 1 has an invalid length.
[  244.166586][ T7647] tmpfs: Too few inodes for current use
[  244.297412][ T7645] 8021q: adding VLAN 0 to HW filter on device bond9
[  244.403873][ T7648] bond8: (slave veth0_to_bond): Releasing active interface
[  244.425914][ T7662] FAULT_INJECTION: forcing a failure.
[  244.425914][ T7662] name failslab, interval 1, probability 0, space 0, times 0
[  244.439024][ T7662] CPU: 0 PID: 7662 Comm: syz.1.1123 Not tainted syzkaller #0
[  244.446459][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  244.456564][ T7662] Call Trace:
[  244.459886][ T7662]  <TASK>
[  244.462874][ T7662]  dump_stack_lvl+0x188/0x24e
[  244.467634][ T7662]  ? show_regs_print_info+0x12/0x12
[  244.472895][ T7662]  ? load_image+0x410/0x410
[  244.477459][ T7662]  ? __might_sleep+0xd0/0xd0
[  244.482099][ T7662]  ? __lock_acquire+0x7ea0/0x7ea0
[  244.487189][ T7662]  should_fail_ex+0x390/0x4c0
[  244.491933][ T7662]  should_failslab+0x5/0x20
[  244.496485][ T7662]  slab_pre_alloc_hook+0x59/0x300
[  244.501565][ T7662]  ? legacy_init_fs_context+0x4d/0xb0
[  244.501813][ T7648] bond9: (slave veth0_to_bond): making interface the new active one
[  244.506975][ T7662]  __kmem_cache_alloc_node+0x4f/0x270
[  244.507009][ T7662]  ? legacy_init_fs_context+0x4d/0xb0
[  244.525823][ T7662]  kmalloc_trace+0x26/0xe0
[  244.530317][ T7662]  legacy_init_fs_context+0x4d/0xb0
[  244.535771][ T7662]  alloc_fs_context+0x628/0x7d0
[  244.540891][ T7662]  do_new_mount+0x10d/0xa50
[  244.545470][ T7662]  __se_sys_mount+0x2e3/0x3d0
[  244.550243][ T7662]  ? __x64_sys_mount+0xc0/0xc0
[  244.555068][ T7662]  ? lockdep_hardirqs_on+0x94/0x140
[  244.560303][ T7662]  ? __x64_sys_mount+0x1c/0xc0
[  244.565154][ T7662]  do_syscall_64+0x4c/0xa0
[  244.569625][ T7662]  ? clear_bhb_loop+0x60/0xb0
[  244.574367][ T7662]  ? clear_bhb_loop+0x60/0xb0
[  244.579095][ T7662]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.585029][ T7662] RIP: 0033:0x7fa49fb9f559
[  244.589571][ T7662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.609477][ T7662] RSP: 002b:00007fa4a0a42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  244.617923][ T7662] RAX: ffffffffffffffda RBX: 00007fa49fe25fa0 RCX: 00007fa49fb9f559
[  244.625921][ T7662] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000
[  244.633933][ T7662] RBP: 00007fa49fc36b20 R08: 0000000000000000 R09: 0000000000000000
[  244.641933][ T7662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.649942][ T7662] R13: 00007fa49fe26038 R14: 00007fa49fe25fa0 R15: 00007ffe800dcc98
[  244.657980][ T7662]  </TASK>
[  244.680697][ T7648] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  244.713812][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  244.753300][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1120'.
[  244.915355][ T7675] loop4: detected capacity change from 0 to 512
[  244.945986][ T7675] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  245.005578][ T7675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  245.031766][ T7675] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.060789][ T7683] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  245.129966][ T7683] bond5: (slave veth0_to_bond): Releasing active interface
[  245.150799][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  245.375943][ T7695] ip_tables: iptables: counters copy to user failed while replacing table
[  245.489977][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'.
[  245.699465][ T7709] netlink: 'syz.0.1138': attribute type 1 has an invalid length.
[  245.732085][ T7709] 8021q: adding VLAN 0 to HW filter on device bond4
[  245.765566][ T7711] bond1: (slave veth0_to_bond): Releasing backup interface
[  245.786581][ T7711] bond4: (slave veth0_to_bond): making interface the new active one
[  245.798535][ T7711] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  245.821809][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  246.912826][ T7728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1142'.
[  248.296378][ T7688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  248.463021][ T7734] netlink: 'syz.3.1143': attribute type 1 has an invalid length.
[  248.536413][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1143'.
[  248.587215][ T7740] loop2: detected capacity change from 0 to 512
[  248.638800][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'.
[  248.648328][ T7740] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.685840][ T7740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  248.695101][ T7740] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.833289][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  248.986512][ T7754] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  249.058019][ T7754] 8021q: adding VLAN 0 to HW filter on device bond5
[  249.137851][ T7759] bond4: (slave veth0_to_bond): Releasing active interface
[  249.160307][ T7759] bond5: (slave veth0_to_bond): making interface the new active one
[  249.230252][ T7759] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  249.297702][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  249.327799][ T7754] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1150'.
[  250.268195][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  250.399354][ T7786] netlink: 'syz.4.1158': attribute type 1 has an invalid length.
[  250.490011][ T7794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1158'.
[  251.418116][ T7809] netlink: 'syz.2.1165': attribute type 1 has an invalid length.
[  251.440611][ T7809] 8021q: adding VLAN 0 to HW filter on device bond4
[  251.456008][ T7809] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  251.468950][ T7809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1165'.
[  251.531206][ T7812] loop2: detected capacity change from 0 to 512
[  251.548410][ T7812] EXT4-fs error (device loop2): __ext4_fill_super:5473: inode #2: comm syz.2.1166: iget: checksum invalid
[  251.560960][ T7812] EXT4-fs (loop2): get root inode failed
[  251.569539][ T7812] EXT4-fs (loop2): mount failed
[  253.074188][ T7776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  253.347613][ T7827] netlink: 'syz.2.1171': attribute type 1 has an invalid length.
[  253.447653][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1171'.
[  253.644668][ T7844] netlink: 'syz.0.1176': attribute type 1 has an invalid length.
[  253.706240][ T7844] 8021q: adding VLAN 0 to HW filter on device bond6
[  253.760078][ T7847] bond5: (slave veth0_to_bond): Releasing active interface
[  253.849787][ T7847] bond6: (slave veth0_to_bond): making interface the new active one
[  253.868229][ T7847] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  253.891798][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  253.984480][ T7853] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1176'.
[  254.149652][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1179'.
[  255.784988][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  255.791410][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  255.995955][ T7887] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  256.105090][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1187'.
[  256.269829][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1195'.
[  256.347793][ T7906] netlink: 'syz.2.1193': attribute type 1 has an invalid length.
[  256.430884][ T7906] 8021q: adding VLAN 0 to HW filter on device bond6
[  256.496902][ T7914] bond4: (slave veth0_to_bond): Releasing active interface
[  256.540423][ T7914] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  256.576680][ T7909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1196'.
[  256.608570][ T7922] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1193'.
[  256.856346][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'.
[  256.887110][ T7935] serial 00:03: in use; can't configure
[  257.777693][ T7942] loop0: detected capacity change from 0 to 128
[  257.811067][ T7942] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  257.830060][ T7946] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  257.859855][ T7942] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  257.894207][ T7950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1205'.
[  258.002801][   T27] audit: type=1800 audit(1793419951.419:23): pid=7942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1202" name="bus" dev="loop0" ino=1048655 res=0 errno=0
[  258.071225][ T7954] loop1: detected capacity change from 0 to 512
[  258.191949][ T4653] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  258.382346][ T7963] netlink: 'syz.1.1211': attribute type 1 has an invalid length.
[  258.416182][ T7963] 8021q: adding VLAN 0 to HW filter on device bond7
[  258.460198][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1213'.
[  258.487529][ T7963] bond7: (slave veth0_to_bond): making interface the new active one
[  258.508300][ T7963] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  260.471183][   T67] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  260.482292][ T7963] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1211'.
[  260.739438][ T7990] netlink: 'syz.2.1219': attribute type 1 has an invalid length.
[  260.796793][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'.
[  260.833457][ T7995] loop1: detected capacity change from 0 to 128
[  260.862935][ T7995] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  260.930315][ T7995] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  261.039971][ T4653] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  261.298669][ T8008] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  261.340470][ T8008] 8021q: adding VLAN 0 to HW filter on device bond9
[  261.373159][ T8008] bond6: (slave veth0_to_bond): Releasing active interface
[  261.386884][ T8008] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  261.400108][ T8008] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1226'.
[  261.506222][ T7971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  263.706420][ T8028] netlink: 'syz.3.1231': attribute type 1 has an invalid length.
[  263.746151][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'.
[  263.903577][ T8036] loop0: detected capacity change from 0 to 128
[  263.963281][ T8036] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  263.995030][ T8036] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  264.075680][ T8037] loop2: detected capacity change from 0 to 1024
[  264.116888][ T5833] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  264.133548][ T7480] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  264.411812][ T8050] netlink: 'syz.2.1237': attribute type 1 has an invalid length.
[  264.466255][ T8050] 8021q: adding VLAN 0 to HW filter on device bond10
[  264.507951][ T8054] bond9: (slave veth0_to_bond): Releasing active interface
[  264.552552][ T8054] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  264.566676][ T8050] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1237'.
[  264.613146][ T8056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'.
[  264.697753][ T8017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.117018][ T8068] netlink: 'syz.0.1245': attribute type 1 has an invalid length.
[  265.166648][ T8071] loop4: detected capacity change from 0 to 128
[  265.175845][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'.
[  265.217614][ T8071] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  265.293972][ T8071] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  265.410838][ T8078] loop0: detected capacity change from 0 to 512
[  265.528147][ T5906] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  265.551575][ T8078] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  265.945916][ T8078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  266.042843][ T8078] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.406917][ T8086] netlink: 'syz.4.1251': attribute type 1 has an invalid length.
[  266.578921][ T8086] 8021q: adding VLAN 0 to HW filter on device bond11
[  266.584644][ T4287] EXT4-fs (loop0): unmounting filesystem.
[  266.626575][ T8091] bond9: (slave veth0_to_bond): Releasing active interface
[  266.672702][ T8091] bond11: (slave veth0_to_bond): making interface the new active one
[  266.686819][ T8091] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  266.699218][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready
[  266.719543][ T8086] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1251'.
[  267.047594][ T8114] netlink: 'syz.2.1259': attribute type 1 has an invalid length.
[  267.098584][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'.
[  267.136319][ T8117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1260'.
[  270.061612][ T8097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.401146][ T8146] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1268'.
[  270.671797][ T8152] netlink: 'syz.0.1271': attribute type 1 has an invalid length.
[  270.744451][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'.
[  271.662248][ T8183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1280'.
[  273.047003][ T8202] netlink: 'syz.1.1285': attribute type 1 has an invalid length.
[  273.069481][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'.
[  274.441280][ T8177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  274.980560][ T8231] netlink: 'syz.3.1296': attribute type 1 has an invalid length.
[  275.027619][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'.
[  275.439944][ T8245] loop0: detected capacity change from 0 to 512
[  275.502969][ T8247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1302'.
[  275.525809][ T8247] device ip6gre1 entered promiscuous mode
[  275.549808][ T8245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  275.567540][ T8245] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.681947][ T8256] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1303'.
[  275.691031][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1303'.
[  275.702061][ T4287] EXT4-fs (loop0): unmounting filesystem.
[  276.102269][ T8270] loop2: detected capacity change from 0 to 164
[  276.167346][ T8273] netlink: 'syz.0.1309': attribute type 1 has an invalid length.
[  276.187108][ T8274] loop4: detected capacity change from 0 to 2048
[  276.245111][ T8274] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  276.359977][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'.
[  276.510580][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  276.523834][   T67] bond6: (slave veth0_to_bond): link status definitely down, disabling slave
[  276.577747][   T67] bond6: now running without any active interface!
[  276.630062][ T8290] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1315'.
[  277.466627][ T8316] Cannot find del_set index 17 as target
[  277.475664][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'.
[  277.505546][ T8316] serial 00:03: in use; can't configure
[  278.202807][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1324'.
[  278.317391][ T8322] loop0: detected capacity change from 0 to 512
[  278.393601][ T8325] hub 5-0:1.0: USB hub found
[  278.399115][ T8325] hub 5-0:1.0: 1 port detected
[  278.704523][ T8322] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  279.270826][ T8322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  279.288063][ T8322] EXT4-fs (loop0): orphan cleanup on readonly fs
[  279.328733][ T8322] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.1326: bad orphan inode 267
[  279.354605][ T8333] netlink: 'syz.1.1328': attribute type 1 has an invalid length.
[  279.374501][ T8322] EXT4-fs (loop0): Remounting filesystem read-only
[  279.408743][ T8322] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  279.421959][ T8322] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1326: dx entry: limit 0 != root limit 125
[  279.434110][ T8322] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1326: Corrupt directory, running e2fsck is recommended
[  279.520661][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  279.540550][ T8340] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1329'.
[  279.574524][ T4287] EXT4-fs (loop0): unmounting filesystem.
[  279.618159][ T4316] bond7: (slave veth0_to_bond): link status definitely down, disabling slave
[  279.639773][ T4316] bond7: now running without any active interface!
[  279.966278][ T8358] Cannot find del_set index 17 as target
[  279.975020][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'.
[  280.006176][ T8358] serial 00:03: in use; can't configure
[  281.218563][ T8376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1342'.
[  281.311999][ T8381] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1344'.
[  281.368219][ T8385] netlink: 'syz.1.1345': attribute type 1 has an invalid length.
[  281.401531][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'.
[  281.819364][ T8406] Cannot find del_set index 17 as target
[  281.828373][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  281.857589][ T8406] serial 00:03: in use; can't configure
[  283.136264][ T8422] netlink: 'syz.0.1357': attribute type 1 has an invalid length.
[  283.526850][ T8429] loop0: detected capacity change from 0 to 256
[  283.557729][ T8429] FAT-fs (loop0): Directory bread(block 1285) failed
[  283.565268][ T8429] FAT-fs (loop0): Directory bread(block 1286) failed
[  283.572964][ T8429] FAT-fs (loop0): Directory bread(block 1287) failed
[  283.581318][ T8429] FAT-fs (loop0): Directory bread(block 1288) failed
[  283.598315][ T8429] FAT-fs (loop0): Directory bread(block 1285) failed
[  283.605865][ T8429] FAT-fs (loop0): Directory bread(block 1286) failed
[  283.613171][ T8429] FAT-fs (loop0): Directory bread(block 1287) failed
[  283.620194][ T8429] FAT-fs (loop0): Directory bread(block 1288) failed
[  283.628592][ T8429] FAT-fs (loop0): Directory bread(block 1285) failed
[  283.645393][ T8429] FAT-fs (loop0): Directory bread(block 1286) failed
[  283.959758][ T8435] Cannot find del_set index 17 as target
[  283.968860][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'.
[  283.998407][ T8435] serial 00:03: in use; can't configure
[  284.487231][ T8389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  285.164283][ T8450] netlink: 'syz.1.1368': attribute type 1 has an invalid length.
[  285.984044][ T8468] Cannot find del_set index 17 as target
[  285.993078][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'.
[  286.023074][ T8468] serial 00:03: in use; can't configure
[  286.863832][ T8470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1373'.
[  286.911822][ T8472] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1375'.
[  286.939446][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1375'.
[  287.520545][ T8495] netlink: 'syz.3.1380': attribute type 1 has an invalid length.
[  287.574276][ T4488] bond8: (slave veth0_to_bond): link status definitely down, disabling slave
[  287.586548][ T4488] bond8: now running without any active interface!
[  288.194385][ T8506] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1385'.
[  288.204574][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1385'.
[  288.214993][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1385'.
[  288.394163][ T8510] Cannot find del_set index 17 as target
[  288.403199][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'.
[  288.432197][ T8510] serial 00:03: in use; can't configure
[  289.942614][ T8476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  290.130291][ T8516] FAULT_INJECTION: forcing a failure.
[  290.130291][ T8516] name fail_futex, interval 1, probability 0, space 0, times 0
[  290.191655][ T8516] CPU: 1 PID: 8516 Comm: syz.2.1388 Not tainted syzkaller #0
[  290.199120][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  290.209237][ T8516] Call Trace:
[  290.212565][ T8516]  <TASK>
[  290.215539][ T8516]  dump_stack_lvl+0x188/0x24e
[  290.220279][ T8516]  ? verify_lock_unused+0x140/0x140
[  290.225538][ T8516]  ? show_regs_print_info+0x12/0x12
[  290.230840][ T8516]  ? load_image+0x410/0x410
[  290.235415][ T8516]  should_fail_ex+0x390/0x4c0
[  290.240415][ T8516]  get_futex_key+0x1a6/0xe70
[  290.245061][ T8516]  ? futex_setup_timer+0xc0/0xc0
[  290.250082][ T8516]  ? xsk_setsockopt+0x58e/0x800
[  290.255012][ T8516]  futex_wake+0x123/0x4f0
[  290.259391][ T8516]  ? __mutex_lock+0x1ab/0xb40
[  290.264104][ T8516]  ? futex_wake_mark+0x150/0x150
[  290.269093][ T8516]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  290.274759][ T8516]  ? mutex_unlock+0x10/0x10
[  290.279289][ T8516]  ? __fget_files+0x28/0x460
[  290.283914][ T8516]  do_futex+0x2e2/0x320
[  290.288112][ T8516]  ? __ia32_sys_get_robust_list+0x100/0x100
[  290.294134][ T8516]  ? xsk_setsockopt+0x58e/0x800
[  290.299035][ T8516]  __se_sys_futex+0x381/0x410
[  290.303750][ T8516]  ? __x64_sys_futex+0xf0/0xf0
[  290.308559][ T8516]  ? __x64_sys_futex+0x1d/0xf0
[  290.313351][ T8516]  do_syscall_64+0x4c/0xa0
[  290.317804][ T8516]  ? clear_bhb_loop+0x60/0xb0
[  290.322519][ T8516]  ? clear_bhb_loop+0x60/0xb0
[  290.327228][ T8516]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  290.333185][ T8516] RIP: 0033:0x7f290979f559
[  290.337630][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.357272][ T8516] RSP: 002b:00007f290a5f20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  290.365726][ T8516] RAX: ffffffffffffffda RBX: 00007f2909a25fa8 RCX: 00007f290979f559
[  290.373896][ T8516] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2909a25fac
[  290.381897][ T8516] RBP: 00007f2909a25fa0 R08: 000354fbbee135c0 R09: 0000000000000000
[  290.389917][ T8516] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  290.397918][ T8516] R13: 00007f2909a26038 R14: 00007fff4b2ec0c0 R15: 00007fff4b2ec1a8
[  290.406018][ T8516]  </TASK>
[  290.523209][ T8523] netlink: 'syz.1.1391': attribute type 1 has an invalid length.
[  292.148898][ T8554] FAULT_INJECTION: forcing a failure.
[  292.148898][ T8554] name failslab, interval 1, probability 0, space 0, times 0
[  292.178472][ T8554] CPU: 0 PID: 8554 Comm: syz.0.1401 Not tainted syzkaller #0
[  292.185971][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  292.196114][ T8554] Call Trace:
[  292.199438][ T8554]  <TASK>
[  292.202440][ T8554]  dump_stack_lvl+0x188/0x24e
[  292.207176][ T8554]  ? show_regs_print_info+0x12/0x12
[  292.212524][ T8554]  ? load_image+0x410/0x410
[  292.217075][ T8554]  ? __might_sleep+0xd0/0xd0
[  292.221707][ T8554]  ? __lock_acquire+0x7ea0/0x7ea0
[  292.226773][ T8554]  should_fail_ex+0x390/0x4c0
[  292.231669][ T8554]  should_failslab+0x5/0x20
[  292.236229][ T8554]  slab_pre_alloc_hook+0x59/0x300
[  292.241309][ T8554]  ? security_cred_alloc_blank+0x42/0x120
[  292.247063][ T8554]  __kmem_cache_alloc_node+0x4f/0x270
[  292.252477][ T8554]  ? security_cred_alloc_blank+0x42/0x120
[  292.258227][ T8554]  __kmalloc+0xa3/0x240
[  292.262419][ T8554]  security_cred_alloc_blank+0x42/0x120
[  292.268254][ T8554]  cred_alloc_blank+0x83/0xd0
[  292.272966][ T8554]  keyctl_session_to_parent+0x3e/0xa00
[  292.278466][ T8554]  __se_sys_keyctl+0x4f9/0x870
[  292.283260][ T8554]  ? __x64_sys_keyctl+0xc0/0xc0
[  292.288140][ T8554]  ? do_futex+0x2e2/0x320
[  292.292503][ T8554]  ? unshare_sighand+0x1a0/0x1a0
[  292.297559][ T8554]  ? __ia32_sys_get_robust_list+0x100/0x100
[  292.303485][ T8554]  ? key_fsgid_changed+0xb5/0xf0
[  292.308469][ T8554]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  292.314495][ T8554]  ? lock_chain_count+0x20/0x20
[  292.319389][ T8554]  ? lockdep_hardirqs_on+0x94/0x140
[  292.324621][ T8554]  ? __x64_sys_keyctl+0x1c/0xc0
[  292.329522][ T8554]  do_syscall_64+0x4c/0xa0
[  292.333975][ T8554]  ? clear_bhb_loop+0x60/0xb0
[  292.338691][ T8554]  ? clear_bhb_loop+0x60/0xb0
[  292.343408][ T8554]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  292.349340][ T8554] RIP: 0033:0x7f735cf9f559
[  292.353784][ T8554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.373512][ T8554] RSP: 002b:00007f735ddff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  292.381956][ T8554] RAX: ffffffffffffffda RBX: 00007f735d225fa0 RCX: 00007f735cf9f559
[  292.391203][ T8554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[  292.399207][ T8554] RBP: 00007f735d036b20 R08: 0000000000000000 R09: 0000000000000000
[  292.407211][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.415214][ T8554] R13: 00007f735d226038 R14: 00007f735d225fa0 R15: 00007ffcfb3abcb8
[  292.423250][ T8554]  </TASK>
[  293.010522][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1406'.
[  294.304369][ T8610] netlink: 'syz.1.1413': attribute type 1 has an invalid length.
[  295.213848][ T8628] Cannot find del_set index 17 as target
[  295.220480][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  295.252988][ T8628] serial 00:03: in use; can't configure
[  296.415735][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1420'.
[  296.820958][ T8645] device syzkaller0 entered promiscuous mode
[  297.040662][ T8668] netlink: 'syz.1.1427': attribute type 1 has an invalid length.
[  298.682410][ T8690] Cannot find del_set index 17 as target
[  298.689063][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'.
[  298.702550][ T8690] serial 00:03: in use; can't configure
[  299.583209][ T8650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  299.798233][ T8698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1437'.
[  299.854749][ T8700] device syzkaller0 entered promiscuous mode
[  299.957235][ T8703] netlink: 'syz.2.1439': attribute type 1 has an invalid length.
[  300.020960][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1439'.
[  301.080647][ T8745] Cannot find del_set index 17 as target
[  301.088300][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'.
[  301.104016][ T8745] serial 00:03: in use; can't configure
[  301.133350][ T8746] device syzkaller0 entered promiscuous mode
[  301.384843][ T8753] netlink: 'syz.4.1454': attribute type 1 has an invalid length.
[  301.470660][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1454'.
[  301.782373][ T8758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1455'.
[  303.881912][ T8733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  304.135697][ T8789] device syzkaller0 entered promiscuous mode
[  304.152777][ T8791] netlink: 'syz.1.1466': attribute type 1 has an invalid length.
[  304.198948][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1466'.
[  304.795023][ T8813] Cannot find del_set index 17 as target
[  304.802782][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'.
[  304.817894][ T8813] serial 00:03: in use; can't configure
[  305.315748][ T8830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1477'.
[  305.629535][ T8840] netlink: 'syz.0.1479': attribute type 1 has an invalid length.
[  305.722382][ T8843] device syzkaller0 entered promiscuous mode
[  308.131091][ T8822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  308.386101][ T8878] netlink: 'syz.1.1491': attribute type 1 has an invalid length.
[  309.095916][ T8896] Cannot find del_set index 17 as target
[  309.104186][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'.
[  309.117755][ T8896] serial 00:03: in use; can't configure
[  310.061122][ T8925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1503'.
[  310.316091][ T8932] netlink: 'syz.0.1505': attribute type 1 has an invalid length.
[  312.409575][   T11] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  312.787243][ T9000] netlink: 'syz.1.1520': attribute type 1 has an invalid length.
[  313.068508][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1523'.
[  313.107450][ T9018] Cannot find del_set index 17 as target
[  313.114438][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'.
[  313.127749][ T9018] serial 00:03: in use; can't configure
[  314.641368][ T9042] device syzkaller0 entered promiscuous mode
[  315.104357][ T9053] netlink: 'syz.0.1535': attribute type 1 has an invalid length.
[  315.447584][ T9068] Cannot find del_set index 17 as target
[  315.454655][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'.
[  315.468230][ T9068] serial 00:03: in use; can't configure
[  315.721285][ T9074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1540'.
[  317.220639][ T9095] device syzkaller0 entered promiscuous mode
[  317.230395][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.237698][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  317.306142][ T9097] netlink: 'syz.3.1548': attribute type 1 has an invalid length.
[  318.038765][ T9128] Cannot find del_set index 17 as target
[  318.045564][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'.
[  318.059024][ T9128] serial 00:03: in use; can't configure
[  318.238460][ T9132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1558'.
[  319.826485][ T9159] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1565'.
[  319.876069][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1565'.
[  320.301854][ T9179] netlink: 'syz.0.1567': attribute type 1 has an invalid length.
[  320.491561][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'.
[  320.572839][ T9169] device syzkaller0 entered promiscuous mode
[  321.180547][ T9205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1575'.
[  322.545256][ T9226] Cannot find del_set index 17 as target
[  322.552016][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'.
[  322.565583][ T9226] serial 00:03: in use; can't configure
[  322.880077][ T9231] netlink: 'syz.0.1582': attribute type 1 has an invalid length.
[  322.998623][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1582'.
[  324.220013][ T9266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1589'.
[  324.799638][ T9285] netlink: 'syz.0.1593': attribute type 1 has an invalid length.
[  324.874809][ T9289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1593'.
[  325.248670][ T9306] Cannot find del_set index 17 as target
[  325.255852][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'.
[  325.270149][ T9306] serial 00:03: in use; can't configure
[  325.650397][ T9309] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1600'.
[  327.368519][ T9340] netlink: 'syz.4.1608': attribute type 1 has an invalid length.
[  327.548971][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1608'.
[  327.602833][ T9347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1609'.
[  327.869116][ T9362] Cannot find del_set index 17 as target
[  327.875994][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'.
[  327.891194][ T9362] serial 00:03: in use; can't configure
[  328.020433][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1615'.
[  328.030187][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1615'.
[  328.039994][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'.
[  328.654487][ T9379] device syzkaller0 entered promiscuous mode
[  329.653948][ T9391] netlink: 'syz.2.1624': attribute type 1 has an invalid length.
[  329.780787][ T9391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1624'.
[  329.803915][ T9399] Cannot find del_set index 17 as target
[  329.810477][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'.
[  329.824964][ T9399] serial 00:03: in use; can't configure
[  329.936791][ T9405] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1628'.
[  330.708845][ T9431] device syzkaller0 entered promiscuous mode
[  331.248538][ T9444] loop4: detected capacity change from 0 to 512
[  331.261390][ T9445] netlink: 'syz.3.1640': attribute type 1 has an invalid length.
[  331.272739][ T9447] Cannot find del_set index 17 as target
[  331.279167][ T9447] __nla_validate_parse: 1 callbacks suppressed
[  331.279179][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'.
[  331.298616][ T9447] serial 00:03: in use; can't configure
[  331.375923][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'.
[  332.809790][ T9480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1648'.
[  332.848893][ T9486] device syzkaller0 entered promiscuous mode
[  333.255461][ T9492] netlink: 'syz.1.1655': attribute type 1 has an invalid length.
[  333.308559][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1655'.
[  333.484470][ T9499] Cannot find del_set index 17 as target
[  333.512458][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'.
[  333.564682][ T9499] serial 00:03: in use; can't configure
[  333.789532][ T9505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1657'.
[  335.528666][ T9532] device syzkaller0 entered promiscuous mode
[  335.540269][ T9537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1666'.
[  335.618825][ T9543] netlink: 'syz.4.1667': attribute type 1 has an invalid length.
[  335.690153][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1667'.
[  337.819245][ T9586] netlink: 'syz.1.1680': attribute type 1 has an invalid length.
[  337.836099][ T9588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'.
[  337.878204][ T9594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1681'.
[  337.936102][ T9595] device syzkaller0 entered promiscuous mode
[  338.434618][ T9616] Cannot find del_set index 17 as target
[  338.461612][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'.
[  338.654295][ T9616] serial 00:03: in use; can't configure
[  339.346602][ T9635] netlink: 'syz.4.1694': attribute type 1 has an invalid length.
[  339.478494][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1694'.
[  339.590603][ T9644] device syzkaller0 entered promiscuous mode
[  340.032144][ T9656] FAULT_INJECTION: forcing a failure.
[  340.032144][ T9656] name failslab, interval 1, probability 0, space 0, times 0
[  340.093374][ T9656] CPU: 1 PID: 9656 Comm: syz.2.1700 Not tainted syzkaller #0
[  340.100852][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  340.110987][ T9656] Call Trace:
[  340.114327][ T9656]  <TASK>
[  340.117312][ T9656]  dump_stack_lvl+0x188/0x24e
[  340.122157][ T9656]  ? show_regs_print_info+0x12/0x12
[  340.127441][ T9656]  ? load_image+0x410/0x410
[  340.132040][ T9656]  ? __might_sleep+0xd0/0xd0
[  340.136713][ T9656]  ? __lock_acquire+0x7ea0/0x7ea0
[  340.141827][ T9656]  ? do_futex+0x310/0x320
[  340.146237][ T9656]  should_fail_ex+0x390/0x4c0
[  340.151044][ T9656]  should_failslab+0x5/0x20
[  340.155631][ T9656]  slab_pre_alloc_hook+0x59/0x300
[  340.160748][ T9656]  kmem_cache_alloc+0x56/0x2f0
[  340.165597][ T9656]  ? getname_flags+0xb7/0x500
[  340.170328][ T9656]  getname_flags+0xb7/0x500
[  340.174965][ T9656]  __se_sys_acct+0x3b/0x800
[  340.179515][ T9656]  ? lockdep_hardirqs_on+0x94/0x140
[  340.184803][ T9656]  do_syscall_64+0x4c/0xa0
[  340.189313][ T9656]  ? clear_bhb_loop+0x60/0xb0
[  340.194051][ T9656]  ? clear_bhb_loop+0x60/0xb0
[  340.198863][ T9656]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  340.204814][ T9656] RIP: 0033:0x7f290979f559
[  340.209288][ T9656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.229215][ T9656] RSP: 002b:00007f290a5f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  340.237713][ T9656] RAX: ffffffffffffffda RBX: 00007f2909a25fa0 RCX: 00007f290979f559
[  340.245746][ T9656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  340.253766][ T9656] RBP: 00007f2909836b20 R08: 0000000000000000 R09: 0000000000000000
[  340.261807][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.270088][ T9656] R13: 00007f2909a26038 R14: 00007f2909a25fa0 R15: 00007fff4b2ec1a8
[  340.278141][ T9656]  </TASK>
[  340.417787][ T9663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1703'.
[  341.730585][ T9685] netlink: 'syz.3.1708': attribute type 1 has an invalid length.
[  341.793953][ T9685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1708'.
[  341.828274][ T9691] device syzkaller0 entered promiscuous mode
[  342.711380][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1719'.
[  342.831857][ T9720] Cannot find del_set index 17 as target
[  342.929451][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'.
[  342.993426][ T9725] serial 00:03: in use; can't configure
[  343.417144][ T9734] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  343.477928][ T9733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1722'.
[  343.709755][ T9741] device syzkaller0 entered promiscuous mode
[  344.909019][ T9770] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  345.033816][ T9775] bond8: (slave veth0_to_bond): Releasing active interface
[  345.048244][ T9775] bond16: (slave veth0_to_bond): making interface the new active one
[  345.058933][ T9775] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  345.212779][ T9780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1735'.
[  345.684811][ T9789] device syzkaller0 entered promiscuous mode
[  347.331401][ T9753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  347.765922][ T9809] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1 (only 8 groups)
[  348.278781][ T9818] netlink: 'syz.1.1746': attribute type 1 has an invalid length.
[  348.350801][ T9818] bond7: (slave veth0_to_bond): Releasing active interface
[  348.393268][ T9818] bond19: (slave veth0_to_bond): making interface the new active one
[  348.454780][ T9818] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  348.959394][ T9838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1750'.
[  348.987285][ T9829] device syzkaller0 entered promiscuous mode
[  350.574795][ T9870] netlink: 'syz.3.1760': attribute type 1 has an invalid length.
[  350.665523][ T9873] bond16: (slave veth0_to_bond): Releasing active interface
[  350.679403][ T9873] bond17: (slave veth0_to_bond): making interface the new active one
[  350.689899][ T9873] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  351.813742][ T9892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1766'.
[  352.176862][ T9847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  352.201989][ T9900] Cannot find del_set index 17 as target
[  352.220612][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'.
[  352.322907][ T9900] serial 00:03: in use; can't configure
[  352.884321][ T9916] netlink: 'syz.0.1773': attribute type 1 has an invalid length.
[  353.165562][ T9922] bond6: (slave veth0_to_bond): Releasing active interface
[  353.198027][ T9922] bond18: (slave veth0_to_bond): making interface the new active one
[  353.273076][ T9922] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  354.541326][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1786'.
[  355.406552][ T9968] netlink: 'syz.4.1789': attribute type 1 has an invalid length.
[  355.433656][ T9968] bond11: (slave veth0_to_bond): Releasing active interface
[  355.447282][ T9968] bond16: (slave veth0_to_bond): making interface the new active one
[  355.457365][ T9968] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  356.944467][ T9938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  357.659655][ T9998] Cannot find del_set index 17 as target
[  357.697476][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'.
[  357.720296][T10003] netlink: 'syz.2.1800': attribute type 1 has an invalid length.
[  357.739162][ T9998] serial 00:03: in use; can't configure
[  357.802299][T10003] bond10: (slave veth0_to_bond): Releasing active interface
[  357.855403][T10003] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  359.184792][T10026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1806'.
[  359.623065][T10044] netlink: 'syz.3.1812': attribute type 1 has an invalid length.
[  359.686033][T10044] bond17: (slave veth0_to_bond): Releasing active interface
[  359.712753][T10044] bond18: (slave veth0_to_bond): making interface the new active one
[  359.735314][T10044] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  361.761025][T10087] Cannot find del_set index 17 as target
[  361.780463][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'.
[  361.837321][T10087] serial 00:03: in use; can't configure
[  362.088184][T10093] netlink: 'syz.1.1826': attribute type 1 has an invalid length.
[  362.138779][T10093] bond19: (slave veth0_to_bond): Releasing active interface
[  362.156196][T10093] bond20: (slave veth0_to_bond): making interface the new active one
[  362.169537][T10093] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  362.824628][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1829'.
[  363.169669][T10057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  363.930161][T10123] netlink: 'syz.1.1837': attribute type 1 has an invalid length.
[  363.987447][T10123] bond20: (slave veth0_to_bond): Releasing active interface
[  364.024851][T10123] bond21: (slave veth0_to_bond): making interface the new active one
[  364.036258][T10123] bond21: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  364.346244][T10134] Cannot find del_set index 17 as target
[  364.352787][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'.
[  364.368373][T10134] serial 00:03: in use; can't configure
[  365.631314][T10151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1845'.
[  366.447845][T10170] netlink: 'syz.2.1850': attribute type 1 has an invalid length.
[  366.525051][T10173] bond14: (slave veth0_to_bond): Releasing active interface
[  366.546182][T10173] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  368.470894][T10137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  368.805912][T10196] Cannot find del_set index 17 as target
[  368.814191][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'.
[  368.842170][T10196] serial 00:03: in use; can't configure
[  369.916296][T10204] netlink: 'syz.3.1862': attribute type 1 has an invalid length.
[  370.038326][T10209] bond18: (slave veth0_to_bond): Releasing active interface
[  370.059169][T10209] bond19: (slave veth0_to_bond): making interface the new active one
[  370.097007][T10209] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  370.420832][T10228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1868'.
[  371.195225][T10242] Cannot find del_set index 17 as target
[  371.201960][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'.
[  371.215728][T10242] serial 00:03: in use; can't configure
[  372.295887][T10260] netlink: 'syz.2.1876': attribute type 1 has an invalid length.
[  372.332881][T10264] bond15: (slave veth0_to_bond): Releasing active interface
[  372.363370][T10264] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  374.749121][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1886'.
[  375.013636][T10255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.350886][T10315] Cannot find del_set index 17 as target
[  375.357804][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'.
[  375.372098][T10315] serial 00:03: in use; can't configure
[  377.049569][T10358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1904'.
[  378.208377][T10380] Cannot find del_set index 17 as target
[  378.215205][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'.
[  378.229164][T10380] serial 00:03: in use; can't configure
[  378.665148][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  378.673770][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  379.455922][T10336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  380.068860][T10411] Cannot find del_set index 17 as target
[  380.075581][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'.
[  380.089433][T10411] serial 00:03: in use; can't configure
[  380.903375][T10429] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1926'.
[  383.975512][T10432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  384.329435][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'.
[  384.413730][T10477] serial 00:03: in use; can't configure
[  384.426843][T10472] Cannot find del_set index 17 as target
[  385.368553][T10503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1948'.
[  385.403235][T10510] loop3: detected capacity change from 0 to 512
[  385.474094][T10510] EXT4-fs error (device loop3): __ext4_fill_super:5473: inode #2: comm syz.3.1950: iget: checksum invalid
[  385.505963][T10510] EXT4-fs (loop3): get root inode failed
[  385.517651][T10510] EXT4-fs (loop3): mount failed
[  387.427896][T10541] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  387.984856][T10551] Cannot find del_set index 17 as target
[  388.003220][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'.
[  388.028441][T10551] serial 00:03: in use; can't configure
[  388.217013][T10502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  389.378082][T10587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1978'.
[  389.531999][T10566] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  390.056457][T10611] Cannot find del_set index 17 as target
[  390.083965][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'.
[  390.127460][T10611] serial 00:03: in use; can't configure
[  391.662192][T10648] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1999'.
[  392.292072][T10662] FAULT_INJECTION: forcing a failure.
[  392.292072][T10662] name fail_futex, interval 1, probability 0, space 0, times 0
[  392.307720][T10662] CPU: 1 PID: 10662 Comm: syz.2.2002 Not tainted syzkaller #0
[  392.315293][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  392.325408][T10662] Call Trace:
[  392.328886][T10662]  <TASK>
[  392.331910][T10662]  dump_stack_lvl+0x188/0x24e
[  392.336797][T10662]  ? show_regs_print_info+0x12/0x12
[  392.342106][T10662]  ? load_image+0x410/0x410
[  392.347114][T10662]  ? release_firmware_map_entry+0x187/0x187
[  392.353227][T10662]  ? plist_add+0x3d7/0x490
[  392.357741][T10662]  should_fail_ex+0x390/0x4c0
[  392.362547][T10662]  get_futex_key+0x1a6/0xe70
[  392.367249][T10662]  ? futex_unqueue+0xc7/0xf0
[  392.371889][T10662]  ? futex_setup_timer+0xc0/0xc0
[  392.376872][T10662]  futex_wake+0x123/0x4f0
[  392.381239][T10662]  ? futex_wake_mark+0x150/0x150
[  392.386216][T10662]  ? file_end_write+0x156/0x250
[  392.391318][T10662]  ? vfs_write+0x777/0x9a0
[  392.395794][T10662]  do_futex+0x2e2/0x320
[  392.400026][T10662]  ? __ia32_sys_get_robust_list+0x100/0x100
[  392.405990][T10662]  __se_sys_futex+0x381/0x410
[  392.410708][T10662]  ? __x64_sys_futex+0xf0/0xf0
[  392.415513][T10662]  ? __x64_sys_futex+0x1d/0xf0
[  392.420315][T10662]  do_syscall_64+0x4c/0xa0
[  392.424781][T10662]  ? clear_bhb_loop+0x60/0xb0
[  392.429574][T10662]  ? clear_bhb_loop+0x60/0xb0
[  392.434297][T10662]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  392.440251][T10662] RIP: 0033:0x7f290979f559
[  392.444762][T10662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.464453][T10662] RSP: 002b:00007f290a5f20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  392.472969][T10662] RAX: ffffffffffffffda RBX: 00007f2909a25fa8 RCX: 00007f290979f559
[  392.480979][T10662] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2909a25fac
[  392.488977][T10662] RBP: 00007f2909a25fa0 R08: 000d7701a2362ef6 R09: 0000000000000000
[  392.496981][T10662] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  392.504985][T10662] R13: 00007f2909a26038 R14: 00007fff4b2ec0c0 R15: 00007fff4b2ec1a8
[  392.513179][T10662]  </TASK>
[  392.824148][T10672] Cannot find del_set index 17 as target
[  392.831366][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'.
[  392.848588][T10672] serial 00:03: in use; can't configure
[  393.486373][T10623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  393.940571][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2013'.
[  393.982443][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2013'.
[  393.992555][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'.
[  394.053407][T10692] FAULT_INJECTION: forcing a failure.
[  394.053407][T10692] name fail_futex, interval 1, probability 0, space 0, times 0
[  394.101606][T10692] CPU: 0 PID: 10692 Comm: syz.2.2015 Not tainted syzkaller #0
[  394.109189][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  394.119302][T10692] Call Trace:
[  394.122628][T10692]  <TASK>
[  394.125605][T10692]  dump_stack_lvl+0x188/0x24e
[  394.130352][T10692]  ? show_regs_print_info+0x12/0x12
[  394.135620][T10692]  ? load_image+0x410/0x410
[  394.140191][T10692]  ? release_firmware_map_entry+0x187/0x187
[  394.146151][T10692]  ? plist_add+0x3d7/0x490
[  394.150671][T10692]  should_fail_ex+0x390/0x4c0
[  394.155409][T10692]  get_futex_key+0x1a6/0xe70
[  394.160053][T10692]  ? futex_unqueue+0xc7/0xf0
[  394.164706][T10692]  ? futex_setup_timer+0xc0/0xc0
[  394.169702][T10692]  futex_wake+0x123/0x4f0
[  394.174094][T10692]  ? futex_wake_mark+0x150/0x150
[  394.179101][T10692]  ? file_end_write+0x156/0x250
[  394.184008][T10692]  ? vfs_write+0x777/0x9a0
[  394.188505][T10692]  do_futex+0x2e2/0x320
[  394.192755][T10692]  ? __ia32_sys_get_robust_list+0x100/0x100
[  394.198725][T10692]  __se_sys_futex+0x381/0x410
[  394.203460][T10692]  ? __x64_sys_futex+0xf0/0xf0
[  394.208284][T10692]  ? __x64_sys_futex+0x1d/0xf0
[  394.213118][T10692]  do_syscall_64+0x4c/0xa0
[  394.217591][T10692]  ? clear_bhb_loop+0x60/0xb0
[  394.222344][T10692]  ? clear_bhb_loop+0x60/0xb0
[  394.227113][T10692]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  394.233093][T10692] RIP: 0033:0x7f290979f559
[  394.237666][T10692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.257426][T10692] RSP: 002b:00007f290a5f20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  394.265904][T10692] RAX: ffffffffffffffda RBX: 00007f2909a25fa8 RCX: 00007f290979f559
[  394.273943][T10692] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2909a25fac
[  394.282077][T10692] RBP: 00007f2909a25fa0 R08: 003ac3afc2cac716 R09: 0000000000000000
[  394.290123][T10692] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  394.298166][T10692] R13: 00007f2909a26038 R14: 00007fff4b2ec0c0 R15: 00007fff4b2ec1a8
[  394.306310][T10692]  </TASK>
[  394.738261][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2020'.
[  394.918837][T10715] Cannot find del_set index 17 as target
[  394.973900][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'.
[  395.152177][T10715] serial 00:03: in use; can't configure
[  395.407463][T10731] FAULT_INJECTION: forcing a failure.
[  395.407463][T10731] name fail_futex, interval 1, probability 0, space 0, times 0
[  395.437166][T10731] CPU: 0 PID: 10731 Comm: syz.3.2027 Not tainted syzkaller #0
[  395.444716][T10731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  395.454824][T10731] Call Trace:
[  395.458142][T10731]  <TASK>
[  395.461118][T10731]  dump_stack_lvl+0x188/0x24e
[  395.465867][T10731]  ? show_regs_print_info+0x12/0x12
[  395.471152][T10731]  ? load_image+0x410/0x410
[  395.475716][T10731]  ? release_firmware_map_entry+0x187/0x187
[  395.481670][T10731]  ? plist_add+0x3d7/0x490
[  395.486196][T10731]  should_fail_ex+0x390/0x4c0
[  395.490958][T10731]  get_futex_key+0x1a6/0xe70
[  395.495605][T10731]  ? futex_unqueue+0xc7/0xf0
[  395.500259][T10731]  ? futex_setup_timer+0xc0/0xc0
[  395.505266][T10731]  futex_wake+0x123/0x4f0
[  395.509655][T10731]  ? futex_wake_mark+0x150/0x150
[  395.514647][T10731]  ? file_end_write+0x156/0x250
[  395.519544][T10731]  ? vfs_write+0x777/0x9a0
[  395.524010][T10731]  do_futex+0x2e2/0x320
[  395.528226][T10731]  ? __ia32_sys_get_robust_list+0x100/0x100
[  395.534210][T10731]  __se_sys_futex+0x381/0x410
[  395.539031][T10731]  ? __x64_sys_futex+0xf0/0xf0
[  395.543946][T10731]  ? __x64_sys_futex+0x1d/0xf0
[  395.548763][T10731]  do_syscall_64+0x4c/0xa0
[  395.553265][T10731]  ? clear_bhb_loop+0x60/0xb0
[  395.558000][T10731]  ? clear_bhb_loop+0x60/0xb0
[  395.562736][T10731]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.568681][T10731] RIP: 0033:0x7f5c8699f559
[  395.573145][T10731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.592804][T10731] RSP: 002b:00007f5c878480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  395.601289][T10731] RAX: ffffffffffffffda RBX: 00007f5c86c25fa8 RCX: 00007f5c8699f559
[  395.609305][T10731] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c86c25fac
[  395.617330][T10731] RBP: 00007f5c86c25fa0 R08: 001405795bc86480 R09: 0000000000000000
[  395.625352][T10731] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  395.633402][T10731] R13: 00007f5c86c26038 R14: 00007ffd39a388d0 R15: 00007ffd39a389b8
[  395.641437][T10731]  </TASK>
[  397.648442][T10767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2039'.
[  398.015837][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'.
[  398.068310][T10789] Cannot find del_set index 17 as target
[  398.087962][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'.
[  398.136889][T10789] serial 00:03: in use; can't configure
[  398.335044][T10791] loop1: detected capacity change from 0 to 512
[  398.369537][T10791] FAT-fs (loop1): Unrecognized mount option "˙˙˙˙˙0177777777777777777777718446744073709551615" or missing value
[  399.088560][T10743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  399.513293][T10815] loop1: detected capacity change from 0 to 512
[  399.539323][T10815] FAT-fs (loop1): Unrecognized mount option "˙˙˙˙˙0177777777777777777777718446744073709551615" or missing value
[  399.821974][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2065'.
[  399.923246][T10832] Cannot find del_set index 17 as target
[  399.945600][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'.
[  400.037697][T10832] serial 00:03: in use; can't configure
[  400.860570][T10855] loop0: detected capacity change from 0 to 512
[  400.896940][T10855] FAT-fs (loop0): Unrecognized mount option "˙˙˙˙˙0177777777777777777777718446744073709551615" or missing value
[  401.918910][T10880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2084'.
[  402.100024][T10885] loop1: detected capacity change from 0 to 512
[  402.641915][T10910] loop3: detected capacity change from 0 to 1024
[  402.656901][T10910] EXT4-fs: Ignoring removed bh option
[  402.676615][T10910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  402.724543][T10916] loop1: detected capacity change from 0 to 512
[  402.758752][T10907] loop0: detected capacity change from 0 to 8192
[  402.795063][T10916] EXT4-fs (loop1): orphan cleanup on readonly fs
[  402.802953][T10916] EXT4-fs warning (device loop1): ext4_enable_quotas:7100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  402.828916][T10916] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  402.836468][T10916] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.2098: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  402.856708][T10916] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.2098: couldn't read orphan inode 13 (err -117)
[  402.897758][T10916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  402.983585][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  402.989894][T10919] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[  403.043589][T10919] FAT-fs (loop0): Filesystem has been set read-only
[  403.093084][ T4282] EXT4-fs (loop1): unmounting filesystem.
[  403.241083][T10926] loop1: detected capacity change from 0 to 512
[  403.274979][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2100'.
[  403.571108][T10928] device veth1_macvtap left promiscuous mode
[  403.586859][T10928] device macsec0 entered promiscuous mode
[  403.945849][T10942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2109'.
[  404.095578][T10949] loop4: detected capacity change from 0 to 1024
[  404.130636][T10953] loop3: detected capacity change from 0 to 512
[  404.144891][T10949] EXT4-fs: Ignoring removed bh option
[  404.207333][T10949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  404.225426][T10953] EXT4-fs (loop3): orphan cleanup on readonly fs
[  404.251348][T10953] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  404.305789][T10953] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  404.314409][T10953] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.2113: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048)
[  404.336490][T10953] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.2113: couldn't read orphan inode 13 (err -117)
[  404.349919][T10953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  404.454941][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  404.493941][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  404.567726][T10962] loop2: detected capacity change from 0 to 512
[  404.920064][T10973] loop2: detected capacity change from 0 to 512
[  404.987516][T10973] EXT4-fs: Ignoring removed oldalloc option
[  405.004751][T10973] ext4: Unknown parameter 'fsname'
[  405.078136][T10979] device syzkaller0 entered promiscuous mode
[  405.125393][T10979] simple: /de_1
[  405.527086][T11000] loop3: detected capacity change from 0 to 512
[  405.882358][T11005] loop3: detected capacity change from 0 to 1024
[  405.914447][T11005] EXT4-fs: Ignoring removed bh option
[  405.994501][T11005] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  406.075763][T11012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2131'.
[  406.135286][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  406.637433][T11033] loop2: detected capacity change from 0 to 512
[  407.178847][T11048] loop1: detected capacity change from 0 to 8192
[  407.366150][T11057] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[  407.401577][T11057] FAT-fs (loop1): Filesystem has been set read-only
[  407.739164][T11072] loop3: detected capacity change from 0 to 512
[  408.099375][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2154'.
[  408.187141][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  408.226756][T11078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  408.450305][T11092] loop3: detected capacity change from 0 to 1024
[  408.470882][T11092] EXT4-fs: Ignoring removed bh option
[  408.520873][T11092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  408.701186][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  409.076926][T11110] FAT-fs (loop0): "posix" option is obsolete, not supported now
[  409.337221][T11116] set_capacity_and_notify: 1 callbacks suppressed
[  409.337269][T11116] loop2: detected capacity change from 0 to 512
[  409.676935][   T27] audit: type=1804 audit(1793420103.089:24): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2170" name="/newroot/433/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=27613 res=1 errno=0
[  409.765488][T11125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2172'.
[  410.822459][T11154] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2181'.
[  412.471132][T11176] loop1: detected capacity change from 0 to 8192
[  412.631966][T11184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2193'.
[  412.692477][T11185] loop1: detected capacity change from 8192 to 0
[  412.714725][T11176] syz.1.2190: attempt to access beyond end of device
[  412.714725][T11176] loop1: rw=2049, sector=33, nr_sectors = 1 limit=0
[  412.770906][T11176] Buffer I/O error on dev loop1, logical block 33, lost sync page write
[  412.801670][T11176] syz.1.2190: attempt to access beyond end of device
[  412.801670][T11176] loop1: rw=1, sector=1, nr_sectors = 1 limit=0
[  412.861134][T11176] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  412.892772][T11176] syz.1.2190: attempt to access beyond end of device
[  412.892772][T11176] loop1: rw=0, sector=65, nr_sectors = 1 limit=0
[  412.932224][T11176] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044)
[  412.940747][T11176] syz.1.2190: attempt to access beyond end of device
[  412.940747][T11176] loop1: rw=2049, sector=77, nr_sectors = 1 limit=0
[  412.975931][T11176] Buffer I/O error on dev loop1, logical block 77, lost async page write
[  413.016199][T11176] syz.1.2190: attempt to access beyond end of device
[  413.016199][T11176] loop1: rw=2049, sector=97, nr_sectors = 1 limit=0
[  413.031235][T11176] Buffer I/O error on dev loop1, logical block 97, lost async page write
[  413.061877][T11176] syz.1.2190: attempt to access beyond end of device
[  413.061877][T11176] loop1: rw=2049, sector=98, nr_sectors = 1 limit=0
[  413.091587][T11176] Buffer I/O error on dev loop1, logical block 98, lost async page write
[  413.100415][T11176] syz.1.2190: attempt to access beyond end of device
[  413.100415][T11176] loop1: rw=2049, sector=99, nr_sectors = 1 limit=0
[  413.142822][T11176] Buffer I/O error on dev loop1, logical block 99, lost async page write
[  413.165657][T11176] syz.1.2190: attempt to access beyond end of device
[  413.165657][T11176] loop1: rw=2049, sector=100, nr_sectors = 1 limit=0
[  413.191541][T11176] Buffer I/O error on dev loop1, logical block 100, lost async page write
[  413.210816][T11176] syz.1.2190: attempt to access beyond end of device
[  413.210816][T11176] loop1: rw=2049, sector=101, nr_sectors = 1 limit=0
[  413.241613][T11176] Buffer I/O error on dev loop1, logical block 101, lost async page write
[  413.250277][T11176] syz.1.2190: attempt to access beyond end of device
[  413.250277][T11176] loop1: rw=2049, sector=102, nr_sectors = 1 limit=0
[  413.291511][T11176] Buffer I/O error on dev loop1, logical block 102, lost async page write
[  413.300200][T11176] Buffer I/O error on dev loop1, logical block 103, lost async page write
[  413.362690][ T4282] FAT-fs (loop1): Directory bread(block 65) failed
[  413.389358][ T4282] FAT-fs (loop1): Directory bread(block 66) failed
[  413.412554][ T4282] FAT-fs (loop1): Directory bread(block 67) failed
[  413.419471][ T4282] FAT-fs (loop1): Directory bread(block 68) failed
[  413.446422][ T4282] FAT-fs (loop1): Directory bread(block 69) failed
[  413.466897][ T4282] FAT-fs (loop1): Directory bread(block 70) failed
[  413.486422][ T4282] FAT-fs (loop1): Directory bread(block 71) failed
[  413.618546][ T8951] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044)
[  413.647715][ T5159] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044)
[  413.657510][ T5159] FAT-fs (loop1): unable to read inode block for updating (i_pos 1044)
[  413.667278][ T5159] FAT-fs (loop1): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[  413.909907][T11207] device bridge_slave_1 left promiscuous mode
[  413.926045][T11207] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.953551][T11207] device bridge_slave_0 left promiscuous mode
[  413.987901][T11207] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.188173][T11210] loop0: detected capacity change from 0 to 4096
[  414.221529][T11210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  414.278438][T11210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  414.398689][T11217] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2206'.
[  414.566292][ T4287] EXT4-fs (loop0): unmounting filesystem.
[  414.595920][ T4653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.825537][T11228] Cannot find del_set index 17 as target
[  414.854132][ T4653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.912659][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'.
[  415.054053][T11228] serial 00:03: in use; can't configure
[  415.182978][ T4653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.376358][ T4653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.349850][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  417.363618][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  417.373385][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  417.383887][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  417.392415][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  417.399914][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  417.777225][T11252] rxe_eth0 speed is unknown, defaulting to 1000
[  418.909568][T11298] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10)
[  418.949409][T11271] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  419.461746][ T4284] Bluetooth: hci3: command 0x0409 tx timeout
[  419.834438][T11252] chnl_net:caif_netlink_parms(): no params data found
[  420.710049][ T4653] device hsr_slave_0 left promiscuous mode
[  420.772348][ T4653] device hsr_slave_1 left promiscuous mode
[  420.811205][ T4653] batman_adv: batadv0: Interface deactivated: veth0
[  420.856346][ T4653] batman_adv: batadv0: Removing interface: veth0
[  420.903656][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  420.948866][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.989815][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.015891][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.028287][ T4653] device bridge_slave_1 left promiscuous mode
[  421.058418][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.128215][ T4653] device bridge_slave_0 left promiscuous mode
[  421.159562][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.316549][ T4653] device veth1_macvtap left promiscuous mode
[  421.336818][ T4653] device veth0_macvtap left promiscuous mode
[  421.343141][ T4653] device veth1_vlan left promiscuous mode
[  421.369701][ T4653] device veth0_vlan left promiscuous mode
[  421.621987][ T4293] Bluetooth: hci3: command 0x041b tx timeout
[  421.660356][ T4653] bond21 (unregistering): (slave veth0_to_bond): Releasing active interface
[  421.671268][ T4653] bond21 (unregistering): Released all slaves
[  421.688197][ T4653] bond20 (unregistering): Released all slaves
[  421.707118][ T4653] bond19 (unregistering): Released all slaves
[  421.722627][ T4653] bond18 (unregistering): Released all slaves
[  421.738940][ T4653] bond17 (unregistering): Released all slaves
[  421.767705][ T4653] bond16 (unregistering): Released all slaves
[  421.786599][ T4653] bond15 (unregistering): Released all slaves
[  421.809882][ T4653] bond14 (unregistering): Released all slaves
[  421.830445][ T4653] bond13 (unregistering): Released all slaves
[  421.856119][ T4653] bond12 (unregistering): Released all slaves
[  421.870463][ T4653] bond11 (unregistering): Released all slaves
[  421.886582][ T4653] bond10 (unregistering): Released all slaves
[  421.907784][ T4653] bond9 (unregistering): Released all slaves
[  421.928180][ T4653] bond8 (unregistering): Released all slaves
[  422.200290][ T4653] bond7 (unregistering): Released all slaves
[  422.222130][ T4653] bond6 (unregistering): Released all slaves
[  422.426967][ T4653] bond5 (unregistering): Released all slaves
[  422.658247][ T4653] bond4 (unregistering): Released all slaves
[  422.672617][ T4653] bond3 (unregistering): Released all slaves
[  422.685375][ T4653] bond2 (unregistering): Released all slaves
[  422.796910][T11349] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  422.852384][ T4653] bond1 (unregistering): Released all slaves
[  422.890863][T11364] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(10)
[  423.751603][ T4293] Bluetooth: hci3: command 0x040f tx timeout
[  424.213534][ T4653] team0 (unregistering): Port device team_slave_1 removed
[  424.272690][ T4653] team0 (unregistering): Port device team_slave_0 removed
[  424.322442][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.369551][ T4653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.650117][ T4653] bond0 (unregistering): Released all slaves
[  424.920169][T11252] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.976121][T11252] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.043482][T11252] device bridge_slave_0 entered promiscuous mode
[  425.074537][T11252] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.091139][T11252] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.143870][T11252] device bridge_slave_1 entered promiscuous mode
[  425.298784][T11252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.339339][T11252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.529346][T11252] team0: Port device team_slave_0 added
[  425.589687][T11252] team0: Port device team_slave_1 added
[  425.778878][T11252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.786727][ T4293] Bluetooth: hci3: command 0x0419 tx timeout
[  425.884552][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  425.920037][T11252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.017379][T11252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.041717][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  426.155512][T11252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.547702][T11404] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  426.686497][T11252] device hsr_slave_0 entered promiscuous mode
[  426.726998][T11252] device hsr_slave_1 entered promiscuous mode
[  426.756326][T11252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  426.778912][T11252] Cannot create hsr debugfs directory
[  427.069621][ T5905] nci: nci_rsp_packet: unknown rsp opcode 0xa
[  427.666685][T11451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2261'.
[  427.677787][T11451] device bridge_slave_0 left promiscuous mode
[  427.684554][T11451] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.755996][T11453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2262'.
[  429.977665][T11427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  429.993865][T11252] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  430.054487][T11252] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  430.077126][T11252] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  430.106251][T11252] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  430.493182][T11252] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.538607][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  430.586591][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  430.824257][T11252] 8021q: adding VLAN 0 to HW filter on device team0
[  430.882708][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  430.899917][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  430.910679][ T4653] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.917962][ T4653] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.958424][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  431.000365][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  431.020921][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  431.065297][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.073205][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.149454][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  431.189079][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  431.225817][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  431.272470][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  431.316291][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  431.348352][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  431.397294][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  431.436551][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  431.505415][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  431.567653][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  431.617654][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  431.664607][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  431.845523][T11508] FAULT_INJECTION: forcing a failure.
[  431.845523][T11508] name failslab, interval 1, probability 0, space 0, times 0
[  431.950162][T11508] CPU: 0 PID: 11508 Comm: syz.3.2272 Not tainted syzkaller #0
[  431.957827][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  431.968388][T11508] Call Trace:
[  431.972178][T11508]  <TASK>
[  431.975184][T11508]  dump_stack_lvl+0x188/0x24e
[  431.980173][T11508]  ? show_regs_print_info+0x12/0x12
[  431.985718][T11508]  ? load_image+0x410/0x410
[  431.990298][T11508]  ? __might_sleep+0xd0/0xd0
[  431.995052][T11508]  ? __lock_acquire+0x7ea0/0x7ea0
[  432.000292][T11508]  should_fail_ex+0x390/0x4c0
[  432.005080][T11508]  should_failslab+0x5/0x20
[  432.009725][T11508]  slab_pre_alloc_hook+0x59/0x300
[  432.014993][T11508]  ? __lock_acquire+0x7ea0/0x7ea0
[  432.020192][T11508]  ? security_prepare_creds+0x47/0x130
[  432.025807][T11508]  __kmem_cache_alloc_node+0x4f/0x270
[  432.031267][T11508]  ? security_prepare_creds+0x47/0x130
[  432.037049][T11508]  __kmalloc+0xa3/0x240
[  432.041279][T11508]  security_prepare_creds+0x47/0x130
[  432.047692][T11508]  prepare_creds+0x450/0x610
[  432.053666][T11508]  lookup_user_key+0x3b0/0x1120
[  432.058657][T11508]  ? schedule+0xd0/0x180
[  432.062987][T11508]  ? lookup_user_key_possessed+0x40/0x40
[  432.068700][T11508]  ? futex_wait+0x525/0x640
[  432.073277][T11508]  ? search_process_keyrings_rcu+0x360/0x360
[  432.079435][T11508]  keyctl_session_to_parent+0x24/0xa00
[  432.084988][T11508]  __se_sys_keyctl+0x4f9/0x870
[  432.089869][T11508]  ? __x64_sys_keyctl+0xc0/0xc0
[  432.095036][T11508]  ? do_futex+0x310/0x320
[  432.099427][T11508]  ? unshare_sighand+0x1a0/0x1a0
[  432.104446][T11508]  ? __ia32_sys_get_robust_list+0x100/0x100
[  432.110420][T11508]  ? key_fsgid_changed+0xb5/0xf0
[  432.115956][T11508]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  432.122014][T11508]  ? lock_chain_count+0x20/0x20
[  432.126935][T11508]  ? lockdep_hardirqs_on+0x94/0x140
[  432.132220][T11508]  ? __x64_sys_keyctl+0x1c/0xc0
[  432.137315][T11508]  do_syscall_64+0x4c/0xa0
[  432.141831][T11508]  ? clear_bhb_loop+0x60/0xb0
[  432.146598][T11508]  ? clear_bhb_loop+0x60/0xb0
[  432.151352][T11508]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  432.157405][T11508] RIP: 0033:0x7f5c8699f559
[  432.161883][T11508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.182250][T11508] RSP: 002b:00007f5c87848028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  432.190904][T11508] RAX: ffffffffffffffda RBX: 00007f5c86c25fa0 RCX: 00007f5c8699f559
[  432.199200][T11508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[  432.207879][T11508] RBP: 00007f5c86a36b20 R08: 0000000000000000 R09: 0000000000000000
[  432.216436][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.224733][T11508] R13: 00007f5c86c26038 R14: 00007f5c86c25fa0 R15: 00007ffd39a389b8
[  432.232782][T11508]  </TASK>
[  432.513757][T11517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2274'.
[  432.643799][ T4653] nci: nci_rsp_packet: unknown rsp opcode 0xa
[  432.717240][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  432.730191][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  432.747963][T11252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.646347][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  433.658495][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  433.685837][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  433.695477][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  433.708656][T11252] device veth0_vlan entered promiscuous mode
[  433.716758][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  433.725653][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  433.740493][T11252] device veth1_vlan entered promiscuous mode
[  433.775022][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  433.789837][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  433.823873][T11252] device veth0_macvtap entered promiscuous mode
[  433.842671][T11252] device veth1_macvtap entered promiscuous mode
[  433.902302][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.917383][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.929518][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  433.940841][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.953788][T11252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.972443][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  433.982064][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  433.990966][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  434.010823][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  434.026355][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.038612][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.054895][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.066044][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.079044][T11252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.087643][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  434.097645][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  434.117141][T11252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.128863][T11252] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.139678][T11252] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.153789][T11252] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.498725][T11519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.652472][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.665410][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.707161][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  435.761595][ T8582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.769518][ T8582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.808432][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  436.018461][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'.
[  436.900925][T11621] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2298'.
[  438.560245][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2306'.
[  439.661260][T11698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2317'.
[  440.105705][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  440.112577][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  440.953941][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'.
[  442.086746][T11774] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2335'.
[  442.469130][T11789] loop2: detected capacity change from 0 to 1024
[  442.656829][T11789] hfsplus: bad catalog entry type
[  442.793939][ T7252] hfsplus: b-tree write err: -5, ino 25
[  442.833475][ T7252] hfsplus: b-tree write err: -5, ino 4
[  442.839625][ T7252] hfsplus: b-tree write err: -5, ino 2
[  442.885573][ T7252] hfsplus: b-tree write err: -5, ino 26
[  444.591479][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  444.981482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  444.991468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  445.001454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  445.011452][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  445.091416][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  445.521469][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  445.531467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  445.541448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  445.561448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  446.203598][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2358'.
[  446.662629][T11868] device veth0 entered promiscuous mode
[  446.697459][T11868] device veth0 left promiscuous mode
[  446.912973][T11880] loop4: detected capacity change from 0 to 512
[  446.926637][T11880] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0)
[  446.979491][T11881] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  447.249434][T11883] xt_TPROXY: Can be used only with -p tcp or -p udp
[  448.961046][T11891] loop3: detected capacity change from 0 to 256
[  450.630460][T11916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2382'.
[  451.210533][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'.
[  454.976369][T12018] device vlan2 entered promiscuous mode
[  455.015157][T12018] device bridge0 entered promiscuous mode
[  455.101671][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'.
[  455.121298][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'.
[  455.175899][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'.
[  457.296109][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2428'.
[  457.341843][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2428'.
[  457.381635][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'.
[  457.703691][T12089] loop4: detected capacity change from 0 to 128
[  459.629142][T12124] device veth1_macvtap left promiscuous mode
[  459.671534][T12124] device macsec0 entered promiscuous mode
[  459.877225][T12132] loop4: detected capacity change from 0 to 512
[  459.919507][T12132] EXT4-fs: Ignoring removed orlov option
[  459.979494][T12132] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  460.044737][T12132] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3877: comm syz.4.2449: Allocating blocks 41-42 which overlap fs metadata
[  460.077659][T12132] Quota error (device loop4): write_blk: dquota write failed
[  460.117062][T12132] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  460.176706][T12132] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  460.236205][T12132] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2449: Failed to acquire dquot type 1
[  460.288817][T12132] EXT4-fs error (device loop4): mb_free_blocks:1853: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  460.311641][T12132] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.2449: corrupted inode contents
[  460.357162][T12132] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #12: comm syz.4.2449: mark_inode_dirty error
[  460.406334][T12132] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.2449: corrupted inode contents
[  460.478464][T12132] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.2449: mark_inode_dirty error
[  460.553832][T12132] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.2449: corrupted inode contents
[  460.611856][T12132] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  460.742905][T12132] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #12: comm syz.4.2449: corrupted inode contents
[  460.767128][T12132] EXT4-fs error (device loop4): ext4_truncate:4328: inode #12: comm syz.4.2449: mark_inode_dirty error
[  460.816271][T12162] Cannot find del_set index 17 as target
[  460.842119][T12132] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  460.878096][T12132] EXT4-fs (loop4): 1 truncate cleaned up
[  460.884972][T12132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  460.911316][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'.
[  461.734959][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  462.035052][T12185] loop2: detected capacity change from 0 to 256
[  462.123604][T12187] loop5: detected capacity change from 0 to 512
[  462.142150][T12185] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  462.197964][T12187] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  462.268105][T12187] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.2465: invalid indirect mapped block 32768 (level 2)
[  462.372265][T12187] EXT4-fs (loop5): 1 orphan inode deleted
[  462.378168][T12187] EXT4-fs (loop5): 1 truncate cleaned up
[  462.422735][T12187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  462.494019][   T27] audit: type=1800 audit(1793420155.909:25): pid=12187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2465" name="file2" dev="loop5" ino=16 res=0 errno=0
[  462.629219][T11252] EXT4-fs (loop5): unmounting filesystem.
[  462.780553][T12202] syz.4.2470 (12202): /proc/12199/oom_adj is deprecated, please use /proc/12199/oom_score_adj instead.
[  462.851331][T12204] device-mapper: ioctl: Invalid ioctl structure: name m, dev 1b00
[  463.069536][T12209] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2473'.
[  463.190484][T12213] Cannot find del_set index 17 as target
[  463.225785][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'.
[  463.281198][T12213] serial 00:03: in use; can't configure
[  463.457430][T12221] netem: incorrect gi model size
[  463.480843][T12221] netem: change failed
[  464.513123][T12250] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2489'.
[  465.050424][T12270] loop0: detected capacity change from 0 to 1024
[  465.151245][T12270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  465.187235][T12270] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.442027][T12273] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  465.706764][ T4287] EXT4-fs (loop0): unmounting filesystem.
[  465.855472][T12283] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2502'.
[  466.237678][T12297] Cannot find add_set index 0 as target
[  466.283881][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2503'.
[  466.405105][T12300] serial 00:03: in use; can't configure
[  466.502351][T12302] loop0: detected capacity change from 0 to 512
[  466.659448][T12302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  466.726788][T12302] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  467.054109][ T4287] EXT4-fs (loop0): unmounting filesystem.
[  467.147789][T12320] loop3: detected capacity change from 0 to 8
[  467.227069][T12320] squashfs image failed sanity check
[  467.276844][T12322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2513'.
[  468.781167][T12347] loop4: detected capacity change from 0 to 256
[  468.837976][T12347] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  469.042799][T12351] input: syz0 as /devices/virtual/input/input5
[  469.386422][T12361] loop3: detected capacity change from 0 to 512
[  469.440884][T12361] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  469.538988][T12361] EXT4-fs (loop3): 1 truncate cleaned up
[  469.578649][T12361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  469.786681][   T27] audit: type=1326 audit(1793420163.029:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.2530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796c59f559 code=0x7ffc0000
[  470.611276][   T27] audit: type=1326 audit(1793420163.029:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.2530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796c59f559 code=0x7ffc0000
[  470.651859][   T27] audit: type=1326 audit(1793420163.029:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.2530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796c59f559 code=0x7ffc0000
[  470.939617][   T27] audit: type=1326 audit(1793420163.029:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.2530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f796c59f559 code=0x7ffc0000
[  471.111616][   T27] audit: type=1326 audit(1793420163.029:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.2530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f796c59f559 code=0x7ffc0000
[  471.207973][T12394] Cannot find del_set index 17 as target
[  471.222508][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2534'.
[  471.321111][   T27] audit: type=1326 audit(1793420163.029:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.2530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f796c59f559 code=0x7ffc0000
[  471.436700][T12394] serial 00:03: in use; can't configure
[  471.460233][   T27] audit: type=1326 audit(1793420163.029:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12373 comm="syz.4.2530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f796c59f559 code=0x7ffc0000
[  471.613024][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  471.833821][T12407] zonefs (nullb0) ERROR: Not a zoned block device
[  471.875656][T12411] loop0: detected capacity change from 0 to 128
[  471.931259][T12411] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  473.011706][   T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  473.245274][   T14] usb 6-1: Using ep0 maxpacket: 32
[  473.262432][   T14] usb 6-1: unable to get BOS descriptor or descriptor too short
[  473.295370][   T14] usb 6-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40
[  473.340597][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.359526][   T14] usb 6-1: Product: syz
[  473.372743][   T14] usb 6-1: Manufacturer: syz
[  473.377884][   T14] usb 6-1: SerialNumber: syz
[  474.689663][T12436] ip_tables: iptables: counters copy to user failed while replacing table
[  475.288491][   T14] usb 6-1: MIDIStreaming interface descriptor not found
[  475.573569][   T14] usb 6-1: USB disconnect, device number 2
[  476.283385][T12462] loop5: detected capacity change from 0 to 4096
[  476.302163][T12462] EXT4-fs: quotafile must be on filesystem root
[  476.330207][T12467] loop0: detected capacity change from 0 to 512
[  476.401286][T12467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  476.497502][T12467] EXT4-fs (loop0): 1 truncate cleaned up
[  476.521175][T12475] Cannot find del_set index 17 as target
[  476.545530][T12467] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  476.592811][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'.
[  476.781188][T12475] serial 00:03: in use; can't configure
[  477.273403][T12482] loop3: detected capacity change from 0 to 256
[  477.352422][T12482] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  477.707785][T12498] loop5: detected capacity change from 0 to 128
[  479.476156][T12510] loop5: detected capacity change from 0 to 1024
[  479.508202][T12510] EXT4-fs: Ignoring removed orlov option
[  479.596073][T12510] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  479.770486][ T4287] EXT4-fs (loop0): unmounting filesystem.
[  480.014898][T11252] EXT4-fs (loop5): unmounting filesystem.
[  480.230184][T12532] Cannot find del_set index 17 as target
[  480.253283][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2568'.
[  480.306566][T12532] serial 00:03: in use; can't configure
[  481.611750][ T4362] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  481.803883][T12558] loop2: detected capacity change from 0 to 2048
[  482.001285][T12558] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  482.127515][ T4362] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  482.271623][ T4362] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024
[  482.348294][ T4362] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  482.418702][ T4362] usb 6-1: config 0 interface 0 has no altsetting 0
[  482.447141][ T4362] usb 6-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00
[  482.466987][ T4362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.499745][ T4362] usb 6-1: config 0 descriptor??
[  482.537812][T12550] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  483.029902][ T4362] input: HID 1430:474c as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1430:474C.0001/input/input6
[  483.321355][ T4362] sony 0003:1430:474C.0001: input,hidraw0: USB HID v0.10 Joystick [HID 1430:474c] on usb-dummy_hcd.5-1/input0
[  483.417634][ T4362] usb 6-1: USB disconnect, device number 3
[  483.891063][T12579] fido_id[12579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  484.131867][ T2124] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  484.321531][ T2124] usb 4-1: Using ep0 maxpacket: 32
[  485.290845][T12605] ip_tables: iptables: counters copy to user failed while replacing table
[  485.841512][ T2124] usb 4-1: unable to get BOS descriptor or descriptor too short
[  485.851194][ T2124] usb 4-1: unable to read config index 0 descriptor/start: -71
[  485.861703][ T2124] usb 4-1: can't read configurations, error -71
[  486.253367][T12614] Cannot find del_set index 17 as target
[  486.324734][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'.
[  486.592624][T12619] serial 00:03: in use; can't configure
[  487.296384][T12623] Illegal XDP return value 4294967274 on prog  (id 114) dev N/A, expect packet loss!
[  487.460079][T12625] loop4: detected capacity change from 0 to 2048
[  487.520427][T12625] UDF-fs: bad mount option "˙˙000000000000000000000030xffffffffffffffff˙˙˙˙" or missing value
[  488.139047][T12631] loop2: detected capacity change from 0 to 512
[  489.610589][T12666] Bluetooth: MGMT ver 1.22
[  489.852540][T12670] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  490.122998][T12677] Cannot find del_set index 17 as target
[  490.140907][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'.
[  490.211253][T12677] serial 00:03: in use; can't configure
[  490.538155][T12683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2601'.
[  491.479626][T12708] loop5: detected capacity change from 0 to 512
[  491.487159][T12708] EXT4-fs: Ignoring removed nobh option
[  491.505781][T12708] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  491.526006][T12697] loop2: detected capacity change from 0 to 512
[  492.332298][T12708] EXT4-fs (loop5): 1 truncate cleaned up
[  492.339139][T12708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  492.355331][T12708] EXT4-fs (loop5): re-mounted. Quota mode: none.
[  492.363462][T12708] EXT4-fs (loop5): re-mounted. Quota mode: none.
[  492.397939][T12697] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0)
[  492.698455][T11252] EXT4-fs (loop5): unmounting filesystem.
[  494.915043][T12722] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2608'.
[  494.973917][T12722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  495.021335][T12722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  495.072445][T12722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  495.080207][T12726] input: syz0 as /devices/virtual/input/input7
[  495.214933][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2608'.
[  496.217970][T12725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  496.286190][T12725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  496.331839][T12725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  496.859374][T12749] loop5: detected capacity change from 0 to 2048
[  496.869368][T12751] Cannot find del_set index 17 as target
[  496.906216][T12753] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2616'.
[  496.916577][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'.
[  496.929257][T12749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  496.975941][T12751] serial 00:03: in use; can't configure
[  497.425207][T12763] loop5: detected capacity change from 0 to 128
[  497.515435][T12763] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  497.525333][T12763] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  497.750387][T11252] EXT4-fs (loop5): unmounting filesystem.
[  499.306190][T12807] Cannot find del_set index 17 as target
[  499.316258][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'.
[  499.371836][T12807] serial 00:03: in use; can't configure
[  500.094570][T12819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2633'.
[  500.364669][T12827] loop4: detected capacity change from 0 to 512
[  500.455472][T12827] EXT4-fs (loop4): 1 truncate cleaned up
[  500.474673][T12827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  500.736389][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  501.182880][T12848] binder: 12847:12848 ioctl c0306201 200000000280 returned -14
[  501.219532][T12848] binder: 12847:12848 ioctl c0306201 2000000003c0 returned -14
[  501.281095][T12855] xt_SECMARK: invalid mode: 2
[  501.344764][T12850] loop0: detected capacity change from 0 to 2048
[  501.416150][T12850] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  501.545680][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  501.552223][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  501.629013][T12863] loop3: detected capacity change from 0 to 512
[  501.733115][T12863] bio_check_eod: 13 callbacks suppressed
[  501.733192][T12863] syz.3.2648: attempt to access beyond end of device
[  501.733192][T12863] loop3: rw=524288, sector=17179852706, nr_sectors = 16 limit=512
[  501.892892][T12863] syz.3.2648: attempt to access beyond end of device
[  501.892892][T12863] loop3: rw=0, sector=17179852706, nr_sectors = 8 limit=512
[  501.999590][   T27] audit: type=1800 audit(1793420707.407:33): pid=12863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2648" name="file2" dev="loop3" ino=1048687 res=0 errno=0
[  502.200208][T12879] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2652'.
[  502.242443][T12879] device ip6gre1 entered promiscuous mode
[  502.533710][T12886] fuse: Bad value for 'fd'
[  503.363353][T12912] loop5: detected capacity change from 0 to 128
[  504.086948][T12912] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  504.141085][T12912] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  504.834800][T12936] loop2: detected capacity change from 0 to 2048
[  504.924241][T12936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  504.993761][T11252] EXT4-fs (loop5): unmounting filesystem.
[  505.004927][T12936] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  505.062245][T12936] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  505.259476][T12936] EXT4-fs (loop2): This should not happen!! Data will be lost
[  505.259476][T12936] 
[  505.280950][T12936] EXT4-fs (loop2): Total free blocks count 0
[  505.307685][T12936] EXT4-fs (loop2): Free/Dirty block details
[  505.327411][T12936] EXT4-fs (loop2): free_blocks=2415919504
[  505.337549][T12936] EXT4-fs (loop2): dirty_blocks=16
[  505.351584][T12936] EXT4-fs (loop2): Block reservation details
[  505.357704][T12936] EXT4-fs (loop2): i_reserved_data_blocks=1
[  505.395789][T12944] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  506.025002][T12964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2671'.
[  506.635600][T12979] loop4: detected capacity change from 0 to 164
[  506.675641][T12979] ISOFS: unable to read i-node block
[  506.681249][T12979] isofs_fill_super: get root inode failed
[  507.474201][T12983] loop2: detected capacity change from 0 to 256
[  507.536801][T12983] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  507.569972][T12983] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  507.659566][T12983] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  507.678636][T12988] loop0: detected capacity change from 0 to 2048
[  507.718655][T12990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2693'.
[  507.737062][T12983] exFAT-fs (loop2): failed to load alloc-bitmap
[  507.773087][T12983] exFAT-fs (loop2): failed to recognize exfat type
[  507.778992][T12988] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  507.822300][T12995] device syzkaller0 entered promiscuous mode
[  507.832055][T12996] loop4: detected capacity change from 0 to 512
[  507.850981][T12988] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  507.881529][T12988] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  507.895411][T12996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  507.913132][T12988] EXT4-fs (loop0): This should not happen!! Data will be lost
[  507.913132][T12988] 
[  507.956203][T12988] EXT4-fs (loop0): Total free blocks count 0
[  507.987870][T12988] EXT4-fs (loop0): Free/Dirty block details
[  508.009052][T12996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  508.019353][T12988] EXT4-fs (loop0): free_blocks=2415919504
[  508.031810][T12988] EXT4-fs (loop0): dirty_blocks=16
[  508.037072][T12988] EXT4-fs (loop0): Block reservation details
[  508.045803][T12988] EXT4-fs (loop0): i_reserved_data_blocks=1
[  508.062972][T12996] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  508.074324][T12999] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[  508.786841][T13018] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[  510.424471][ T4274] EXT4-fs (loop4): unmounting filesystem.
[  511.896032][T13071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2701'.
[  513.093109][T13106] rxe_eth0 speed is unknown, defaulting to 1000
[  514.447677][T13130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2725'.
[  514.710419][T13136] FAULT_INJECTION: forcing a failure.
[  514.710419][T13136] name failslab, interval 1, probability 0, space 0, times 0
[  514.811680][T13136] CPU: 1 PID: 13136 Comm: syz.0.2717 Not tainted syzkaller #0
[  514.819239][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  514.829539][T13136] Call Trace:
[  514.832869][T13136]  <TASK>
[  514.835842][T13136]  dump_stack_lvl+0x188/0x24e
[  514.840592][T13136]  ? show_regs_print_info+0x12/0x12
[  514.845865][T13136]  ? load_image+0x410/0x410
[  514.850433][T13136]  ? __might_sleep+0xd0/0xd0
[  514.855104][T13136]  ? __lock_acquire+0x7ea0/0x7ea0
[  514.860202][T13136]  should_fail_ex+0x390/0x4c0
[  514.864946][T13136]  should_failslab+0x5/0x20
[  514.869500][T13136]  slab_pre_alloc_hook+0x59/0x300
[  514.874606][T13136]  ? ops_init+0x8a/0x5e0
[  514.878935][T13136]  __kmem_cache_alloc_node+0x4f/0x270
[  514.884367][T13136]  ? ops_init+0x8a/0x5e0
[  514.888662][T13136]  __kmalloc+0xa3/0x240
[  514.892867][T13136]  ? xt_init_net+0x156/0x190
[  514.897586][T13136]  ops_init+0x8a/0x5e0
[  514.901727][T13136]  setup_net+0x4f2/0xbd0
[  514.906079][T13136]  ? copy_net_ns+0x5b0/0x5b0
[  514.910728][T13136]  ? copy_net_ns+0x324/0x5b0
[  514.915386][T13136]  ? down_read_killable+0x1cc/0x340
[  514.920718][T13136]  copy_net_ns+0x33e/0x5b0
[  514.925189][T13136]  create_new_namespaces+0x3ce/0x700
[  514.930528][T13136]  unshare_nsproxy_namespaces+0x116/0x160
[  514.936379][T13136]  ksys_unshare+0x4f6/0x8e0
[  514.940997][T13136]  ? sighand_ctor+0x40/0x40
[  514.945526][T13136]  ? lock_chain_count+0x20/0x20
[  514.950414][T13136]  ? syscall_enter_from_user_mode+0x21/0x80
[  514.956536][T13136]  __x64_sys_unshare+0x34/0x40
[  514.961455][T13136]  do_syscall_64+0x4c/0xa0
[  514.965974][T13136]  ? clear_bhb_loop+0x60/0xb0
[  514.970730][T13136]  ? clear_bhb_loop+0x60/0xb0
[  514.975476][T13136]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.981414][T13136] RIP: 0033:0x7f735cf9f559
[  514.985864][T13136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.005513][T13136] RSP: 002b:00007f735ddff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  515.013963][T13136] RAX: ffffffffffffffda RBX: 00007f735d225fa0 RCX: 00007f735cf9f559
[  515.021976][T13136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  515.030010][T13136] RBP: 00007f735d036b20 R08: 0000000000000000 R09: 0000000000000000
[  515.038103][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  515.046104][T13136] R13: 00007f735d226038 R14: 00007f735d225fa0 R15: 00007ffcfb3abcb8
[  515.054139][T13136]  </TASK>
[  516.094608][T13157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2720'.
[  516.570621][T13173] loop4: detected capacity change from 0 to 2048
[  516.626132][T13173] UDF-fs: bad mount option "˙˙˙˙˙˙" or missing value
[  517.214251][T13186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2729'.
[  517.239500][T13186] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.803474][T13198] FAULT_INJECTION: forcing a failure.
[  517.803474][T13198] name failslab, interval 1, probability 0, space 0, times 0
[  517.956134][T13198] CPU: 0 PID: 13198 Comm: syz.2.2734 Not tainted syzkaller #0
[  517.963685][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  517.973791][T13198] Call Trace:
[  517.977113][T13198]  <TASK>
[  517.980126][T13198]  dump_stack_lvl+0x188/0x24e
[  517.984874][T13198]  ? show_regs_print_info+0x12/0x12
[  517.990221][T13198]  ? load_image+0x410/0x410
[  517.994775][T13198]  ? __might_sleep+0xd0/0xd0
[  517.999491][T13198]  ? __lock_acquire+0x7ea0/0x7ea0
[  518.004580][T13198]  should_fail_ex+0x390/0x4c0
[  518.009318][T13198]  should_failslab+0x5/0x20
[  518.013863][T13198]  slab_pre_alloc_hook+0x59/0x300
[  518.018946][T13198]  ? ops_init+0x8a/0x5e0
[  518.023231][T13198]  __kmem_cache_alloc_node+0x4f/0x270
[  518.028645][T13198]  ? ops_init+0x8a/0x5e0
[  518.032926][T13198]  __kmalloc+0xa3/0x240
[  518.037210][T13198]  ? sample_init_net+0x156/0x190
[  518.042492][T13198]  ops_init+0x8a/0x5e0
[  518.046615][T13198]  setup_net+0x4f2/0xbd0
[  518.050919][T13198]  ? copy_net_ns+0x5b0/0x5b0
[  518.055556][T13198]  ? copy_net_ns+0x324/0x5b0
[  518.060197][T13198]  ? down_read_killable+0x1cc/0x340
[  518.065439][T13198]  copy_net_ns+0x33e/0x5b0
[  518.069906][T13198]  create_new_namespaces+0x3ce/0x700
[  518.075240][T13198]  unshare_nsproxy_namespaces+0x116/0x160
[  518.080994][T13198]  ksys_unshare+0x4f6/0x8e0
[  518.085551][T13198]  ? sighand_ctor+0x40/0x40
[  518.090102][T13198]  ? lock_chain_count+0x20/0x20
[  518.095003][T13198]  ? syscall_enter_from_user_mode+0x21/0x80
[  518.100936][T13198]  __x64_sys_unshare+0x34/0x40
[  518.105732][T13198]  do_syscall_64+0x4c/0xa0
[  518.110187][T13198]  ? clear_bhb_loop+0x60/0xb0
[  518.114896][T13198]  ? clear_bhb_loop+0x60/0xb0
[  518.119610][T13198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  518.125535][T13198] RIP: 0033:0x7f290979f559
[  518.129995][T13198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.149640][T13198] RSP: 002b:00007f290a5f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  518.158213][T13198] RAX: ffffffffffffffda RBX: 00007f2909a25fa0 RCX: 00007f290979f559
[  518.166227][T13198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  518.174231][T13198] RBP: 00007f2909836b20 R08: 0000000000000000 R09: 0000000000000000
[  518.182252][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  518.190249][T13198] R13: 00007f2909a26038 R14: 00007f2909a25fa0 R15: 00007fff4b2ec1a8
[  518.198277][T13198]  </TASK>
[  518.876252][T13222] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2739'.
[  520.821077][T13289] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2763'.
[  521.356818][T13303] device syzkaller0 entered promiscuous mode
[  521.599720][T13306] device syzkaller0 entered promiscuous mode
[  522.099237][T13320] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2769'.
[  522.389428][T13318] loop5: detected capacity change from 0 to 512
[  522.861933][T13318] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  523.021302][T13318] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  523.041591][T13318] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.371568][T13334] device syzkaller0 entered promiscuous mode
[  523.406763][T13334] simple: /de_1
[  523.597261][T11252] EXT4-fs (loop5): unmounting filesystem.
[  523.822435][T13346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2782'.
[  523.928320][T13350] device syzkaller0 entered promiscuous mode
[  523.937283][T13355] loop0: detected capacity change from 0 to 128
[  523.949226][T13353] device bridge_slave_1 left promiscuous mode
[  523.957401][T13353] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.971684][T13355] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  523.982279][T13353] device bridge_slave_0 left promiscuous mode
[  523.988680][T13353] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.080542][T13355] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  524.196314][T13355] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  524.218245][ T4362] logitech-hidpp-device 0003:046D:C082.0002: Device not connected
[  524.264807][T13358] rxe_eth0 speed is unknown, defaulting to 1000
[  525.425906][T13393] loop4: detected capacity change from 0 to 512
[  525.500810][T13391] loop0: detected capacity change from 0 to 8192
[  525.539105][T13393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  525.623138][T13400] device syzkaller0 entered promiscuous mode
[  525.635376][T13393] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  525.678963][T13393] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  525.704469][T13402] loop0: detected capacity change from 8192 to 0
[  525.746027][T13391] syz.0.2796: attempt to access beyond end of device
[  525.746027][T13391] loop0: rw=1, sector=1, nr_sectors = 1 limit=0
[  525.800333][T13391] buffer_io_error: 1 callbacks suppressed
[  525.800352][T13391] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  525.838203][T13391] ------------[ cut here ]------------
[  525.844256][T13391] WARNING: CPU: 1 PID: 13391 at fs/buffer.c:1081 mark_buffer_dirty+0x383/0x7a0
[  525.853511][T13391] Modules linked in:
[  525.857455][T13391] CPU: 1 PID: 13391 Comm: syz.0.2796 Not tainted syzkaller #0
[  525.865046][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  525.875216][T13391] RIP: 0010:mark_buffer_dirty+0x383/0x7a0
[  525.881014][T13391] Code: 13 45 e2 ff 49 8b 3f be 04 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ec a5 fc ff e8 27 e1 90 ff e9 43 ff ff ff e8 1d e1 90 ff <0f> 0b e9 ba fc ff ff e8 11 e1 90 ff 0f 0b e9 00 fd ff ff e8 05 e1
[  525.900802][T13391] RSP: 0018:ffffc90005fff2f0 EFLAGS: 00010283
[  525.907206][T13391] RAX: ffffffff81f18783 RBX: ffff8880520ab570 RCX: 0000000000080000
[  525.915315][T13391] RDX: ffffc90005b31000 RSI: 0000000000012c6d RDI: 0000000000012c6e
[  525.923475][T13391] RBP: ffff8880255e3f01 R08: ffff8880520ab577 R09: 1ffff1100a4156ae
[  525.931590][T13391] R10: dffffc0000000000 R11: ffffed100a4156af R12: dffffc0000000000
[  525.939664][T13391] R13: ffff8880544a9ca8 R14: ffffea0002256258 R15: 000000000fffffff
[  525.947979][T13391] FS:  00007f735ddff6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  525.957135][T13391] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  525.963829][T13391] CR2: 000055f476e75a30 CR3: 0000000076519000 CR4: 00000000003506e0
[  525.972025][T13391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  525.980062][T13391] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  525.988155][T13391] Call Trace:
[  525.991518][T13391]  <TASK>
[  525.994496][T13391]  mark_buffer_dirty_inode+0x82/0x2c0
[  525.999936][T13391]  ? fat_sync_bhs+0x1a2/0x1c0
[  526.004862][T13391]  fat_ent_write+0xae/0x180
[  526.009455][T13391]  fat_chain_add+0x3e5/0x880
[  526.014184][T13391]  ? fat_clusters_flush+0x410/0x410
[  526.019463][T13391]  ? fat_bmap+0x483/0x590
[  526.024021][T13391]  fat_get_block+0x761/0xae0
[  526.028686][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.034390][T13391]  ? create_page_buffers+0x24f/0x4a0
[  526.039758][T13391]  __block_write_begin_int+0x577/0x1ab0
[  526.045489][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.051009][T13391]  ? page_zero_new_buffers+0x650/0x650
[  526.056601][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.062249][T13391]  block_write_begin+0x96/0x1e0
[  526.067167][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.072789][T13391]  cont_write_begin+0x5f9/0x800
[  526.077709][T13391]  ? generic_cont_expand_simple+0x200/0x200
[  526.083715][T13391]  ? fault_in_readable+0x139/0x1f0
[  526.088975][T13391]  ? fault_in_readable+0x13e/0x1f0
[  526.094209][T13391]  fat_write_begin+0x93/0x160
[  526.098949][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.104522][T13391]  generic_perform_write+0x2fa/0x5c0
[  526.109981][T13391]  ? generic_file_direct_write+0x330/0x330
[  526.115923][T13391]  ? __file_remove_privs+0x5f0/0x5f0
[  526.121301][T13391]  ? rwsem_write_trylock+0x135/0x1c0
[  526.126708][T13391]  ? clear_nonspinnable+0x60/0x60
[  526.131859][T13391]  ? generic_write_checks_count+0x363/0x440
[  526.137824][T13391]  __generic_file_write_iter+0x148/0x2a0
[  526.143583][T13391]  generic_file_write_iter+0xab/0x2e0
[  526.149030][T13391]  do_iter_write+0x638/0xb10
[  526.153750][T13391]  ? vfs_iter_write+0xa0/0xa0
[  526.158479][T13391]  ? rcu_read_lock_any_held+0xb0/0x130
[  526.164183][T13391]  do_pwritev+0x23e/0x3a0
[  526.168595][T13391]  ? do_preadv+0x390/0x390
[  526.173141][T13391]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  526.179209][T13391]  ? lock_chain_count+0x20/0x20
[  526.185967][T13391]  ? lockdep_hardirqs_on+0x94/0x140
[  526.191242][T13391]  ? __x64_sys_pwritev2+0xba/0x100
[  526.196498][T13391]  do_syscall_64+0x4c/0xa0
[  526.200981][T13391]  ? clear_bhb_loop+0x60/0xb0
[  526.205874][T13391]  ? clear_bhb_loop+0x60/0xb0
[  526.210740][T13391]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.216857][T13391] RIP: 0033:0x7f735cf9f559
[  526.221338][T13391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.241992][T13391] RSP: 002b:00007f735ddff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  526.250478][T13391] RAX: ffffffffffffffda RBX: 00007f735d225fa0 RCX: 00007f735cf9f559
[  526.258577][T13391] RDX: 0000000000000001 RSI: 0000200000022500 RDI: 0000000000000004
[  526.266669][T13391] RBP: 00007f735d036b20 R08: 0000000000000000 R09: 0000000000000000
[  526.274794][T13391] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[  526.282971][T13391] R13: 00007f735d226038 R14: 00007f735d225fa0 R15: 00007ffcfb3abcb8
[  526.291205][T13391]  </TASK>
[  526.294372][T13391] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  526.301700][T13391] CPU: 1 PID: 13391 Comm: syz.0.2796 Not tainted syzkaller #0
[  526.309671][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  526.321344][T13391] Call Trace:
[  526.324814][T13391]  <TASK>
[  526.327839][T13391]  dump_stack_lvl+0x188/0x24e
[  526.332718][T13391]  ? memcpy+0x3c/0x60
[  526.336939][T13391]  ? show_regs_print_info+0x12/0x12
[  526.342310][T13391]  ? load_image+0x410/0x410
[  526.346893][T13391]  panic+0x2d3/0x710
[  526.350873][T13391]  ? bpf_jit_dump+0xd0/0xd0
[  526.355460][T13391]  __warn+0x2f8/0x4f0
[  526.359506][T13391]  ? mark_buffer_dirty+0x383/0x7a0
[  526.364691][T13391]  ? mark_buffer_dirty+0x383/0x7a0
[  526.369942][T13391]  report_bug+0x2ba/0x4f0
[  526.374474][T13391]  ? mark_buffer_dirty+0x383/0x7a0
[  526.379774][T13391]  handle_bug+0x3a/0x70
[  526.384261][T13391]  exc_invalid_op+0x16/0x40
[  526.388904][T13391]  asm_exc_invalid_op+0x16/0x20
[  526.393816][T13391] RIP: 0010:mark_buffer_dirty+0x383/0x7a0
[  526.399611][T13391] Code: 13 45 e2 ff 49 8b 3f be 04 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ec a5 fc ff e8 27 e1 90 ff e9 43 ff ff ff e8 1d e1 90 ff <0f> 0b e9 ba fc ff ff e8 11 e1 90 ff 0f 0b e9 00 fd ff ff e8 05 e1
[  526.419538][T13391] RSP: 0018:ffffc90005fff2f0 EFLAGS: 00010283
[  526.425661][T13391] RAX: ffffffff81f18783 RBX: ffff8880520ab570 RCX: 0000000000080000
[  526.433686][T13391] RDX: ffffc90005b31000 RSI: 0000000000012c6d RDI: 0000000000012c6e
[  526.441705][T13391] RBP: ffff8880255e3f01 R08: ffff8880520ab577 R09: 1ffff1100a4156ae
[  526.449733][T13391] R10: dffffc0000000000 R11: ffffed100a4156af R12: dffffc0000000000
[  526.457764][T13391] R13: ffff8880544a9ca8 R14: ffffea0002256258 R15: 000000000fffffff
[  526.465798][T13391]  ? mark_buffer_dirty+0x383/0x7a0
[  526.471184][T13391]  mark_buffer_dirty_inode+0x82/0x2c0
[  526.476723][T13391]  ? fat_sync_bhs+0x1a2/0x1c0
[  526.481480][T13391]  fat_ent_write+0xae/0x180
[  526.486227][T13391]  fat_chain_add+0x3e5/0x880
[  526.490973][T13391]  ? fat_clusters_flush+0x410/0x410
[  526.496418][T13391]  ? fat_bmap+0x483/0x590
[  526.500832][T13391]  fat_get_block+0x761/0xae0
[  526.505500][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.511030][T13391]  ? create_page_buffers+0x24f/0x4a0
[  526.516389][T13391]  __block_write_begin_int+0x577/0x1ab0
[  526.522041][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.527560][T13391]  ? page_zero_new_buffers+0x650/0x650
[  526.533374][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.538905][T13391]  block_write_begin+0x96/0x1e0
[  526.543828][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.549425][T13391]  cont_write_begin+0x5f9/0x800
[  526.554398][T13391]  ? generic_cont_expand_simple+0x200/0x200
[  526.560463][T13391]  ? fault_in_readable+0x139/0x1f0
[  526.565638][T13391]  ? fault_in_readable+0x13e/0x1f0
[  526.572297][T13391]  fat_write_begin+0x93/0x160
[  526.577167][T13391]  ? fat_block_truncate_page+0x50/0x50
[  526.582693][T13391]  generic_perform_write+0x2fa/0x5c0
[  526.588067][T13391]  ? generic_file_direct_write+0x330/0x330
[  526.593944][T13391]  ? __file_remove_privs+0x5f0/0x5f0
[  526.599292][T13391]  ? rwsem_write_trylock+0x135/0x1c0
[  526.604640][T13391]  ? clear_nonspinnable+0x60/0x60
[  526.609728][T13391]  ? generic_write_checks_count+0x363/0x440
[  526.615899][T13391]  __generic_file_write_iter+0x148/0x2a0
[  526.621600][T13391]  generic_file_write_iter+0xab/0x2e0
[  526.627046][T13391]  do_iter_write+0x638/0xb10
[  526.631699][T13391]  ? vfs_iter_write+0xa0/0xa0
[  526.636423][T13391]  ? rcu_read_lock_any_held+0xb0/0x130
[  526.641955][T13391]  do_pwritev+0x23e/0x3a0
[  526.646351][T13391]  ? do_preadv+0x390/0x390
[  526.650842][T13391]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  526.656909][T13391]  ? lock_chain_count+0x20/0x20
[  526.661825][T13391]  ? lockdep_hardirqs_on+0x94/0x140
[  526.667088][T13391]  ? __x64_sys_pwritev2+0xba/0x100
[  526.672260][T13391]  do_syscall_64+0x4c/0xa0
[  526.676742][T13391]  ? clear_bhb_loop+0x60/0xb0
[  526.681849][T13391]  ? clear_bhb_loop+0x60/0xb0
[  526.686591][T13391]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.692553][T13391] RIP: 0033:0x7f735cf9f559
[  526.697020][T13391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.717510][T13391] RSP: 002b:00007f735ddff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  526.726830][T13391] RAX: ffffffffffffffda RBX: 00007f735d225fa0 RCX: 00007f735cf9f559
[  526.734859][T13391] RDX: 0000000000000001 RSI: 0000200000022500 RDI: 0000000000000004
[  526.742880][T13391] RBP: 00007f735d036b20 R08: 0000000000000000 R09: 0000000000000000
[  526.750903][T13391] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[  526.758928][T13391] R13: 00007f735d226038 R14: 00007f735d225fa0 R15: 00007ffcfb3abcb8
[  526.766966][T13391]  </TASK>
[  526.770657][T13391] Kernel Offset: disabled
[  526.775103][T13391] Rebooting in 86400 seconds..