last executing test programs:

5m26.506942033s ago: executing program 4 (id=231):
open(&(0x7f00000002c0)='./file1\x00', 0x64842, 0x86)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00001a6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5m25.993426943s ago: executing program 4 (id=232):
io_setup(0x3ff, &(0x7f0000000500))
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2c008001, &(0x7f0000000000)={0x2, 0x24e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

5m23.934155348s ago: executing program 4 (id=243):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4)
bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000440), &(0x7f0000000480)=@udp=r0}, 0x20)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)

5m23.537316284s ago: executing program 4 (id=245):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5518, &(0x7f000000adc0)="$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")
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x105042, 0x1fe)
rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00')
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)

5m20.913596908s ago: executing program 4 (id=263):
syz_usb_connect$uac1(0x2, 0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020732b23004000010203010902700003010480810904000000010100000a240100000a000201020904010000010200000904010101010200000924020105035403000324010405011009050109d0"], 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

5m16.049012344s ago: executing program 4 (id=280):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902)

5m14.667201949s ago: executing program 32 (id=280):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902)

5m9.855166514s ago: executing program 2 (id=309):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20c0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

5m8.32621238s ago: executing program 2 (id=316):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
ptrace$peekuser(0x3, 0x0, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)

5m6.250891405s ago: executing program 2 (id=323):
openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0)
r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010811798080000000000010902"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x6b, 0x7b, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)

5m4.560547252s ago: executing program 2 (id=327):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

5m3.948641779s ago: executing program 2 (id=330):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x4b)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
unshare(0x26020480)
umount2(&(0x7f0000000080)='./file0\x00', 0x4)
unshare(0x20600)

5m3.608697421s ago: executing program 2 (id=331):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002a00)={@flat=@weak_handle={0x77682a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000001a00)=""/4096, 0x1000, 0x0, 0x24}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

4m48.231290204s ago: executing program 33 (id=331):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002a00)={@flat=@weak_handle={0x77682a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000001a00)=""/4096, 0x1000, 0x0, 0x24}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

3m44.481799334s ago: executing program 0 (id=658):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000280)='./file0/file0\x00')

3m43.286039398s ago: executing program 0 (id=661):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)

3m42.634858983s ago: executing program 0 (id=664):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000680)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0)

3m41.622192079s ago: executing program 0 (id=668):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0xc31, &(0x7f0000001ec0)="$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")
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100))
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

3m39.215762184s ago: executing program 0 (id=685):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x16}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

3m37.226291623s ago: executing program 0 (id=682):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

3m36.532978288s ago: executing program 34 (id=682):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

2m32.83609864s ago: executing program 5 (id=912):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x204203, 0x0)
io_uring_setup(0x9, 0x0)
close(0x3)
r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0)
mq_getsetattr(r1, 0x0, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_io_uring_setup(0xf00, 0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000140))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x12)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x7)
lseek(r0, 0x0, 0x3)

2m31.189412954s ago: executing program 5 (id=917):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @multicast2}, 0x4, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$evdev(0x0, 0x72, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0xe06, 0x7, [0x7ff, 0x10, 0x6, 0x1, 0x5, 0x1, 0x4, 0x7f]}]})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800)

2m30.826251065s ago: executing program 5 (id=920):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0xa77595c62f1a0aa7, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xe0}}}}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e00019eb17738540600000000000000", @ANYRES32=0x0, @ANYRES8=r1], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/213, 0xd5, 0x200, 0x0, 0x0)

2m27.483740028s ago: executing program 5 (id=940):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004)
r1 = socket$inet(0x2, 0x80001, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m27.003867702s ago: executing program 5 (id=946):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket$unix(0x1, 0x5, 0x0)
close(r1)
socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0028010})

2m26.430653846s ago: executing program 5 (id=951):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='-2 -3 -4.0 +4.1 +4.2\n', 0x15)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
close(r2)

2m11.356822671s ago: executing program 35 (id=951):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='-2 -3 -4.0 +4.1 +4.2\n', 0x15)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='tcp 2049\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='1\n', 0x2)
close(r2)

53.719841306s ago: executing program 1 (id=1315):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000003)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

52.22413286s ago: executing program 1 (id=1320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0)

51.41144534s ago: executing program 1 (id=1324):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x34, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x1e, 0x144, 0x0, 0x1, [@nested={0x18, 0xf3, 0x0, 0x1, [@nested={0x14, 0x28, 0x0, 0x1, [@nested={0x10, 0xa, 0x0, 0x1, [@typed={0xc, 0x33, 0x0, 0x0, @u64=0x4}]}]}]}, @generic="82a1"]}]}, 0x34}}, 0x4000080)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@delsa={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbff, {@in6=@remote, 0x4d2, 0x2, 0x32}, [@mark={0xc, 0x15, {0x35075b, 0xe266}}]}, 0x34}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r2)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x7f, 0x3c47a82a}}, 0x28)
mmap(&(0x7f000027c000/0x1000)=nil, 0x1000, 0x0, 0x4008831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)

50.954086536s ago: executing program 1 (id=1327):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x315d030, 0x0, 0x40, 0x0, &(0x7f0000000100))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

49.794324726s ago: executing program 1 (id=1332):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x121)

48.826210477s ago: executing program 1 (id=1337):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc)
socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)

38.997840695s ago: executing program 3 (id=1372):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000)

36.93610736s ago: executing program 3 (id=1382):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002e00010000000068c6a620074926551f", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098000000"], 0x2c}], 0x1}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000030000001200000008000300", @ANYRES32=r4, @ANYBLOB="06001200000000000a000600fffffffffffb00002c0011"], 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x4048014)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000006c0)={<r5=>0x0, 0x3, 0x6, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000ac0)={r5, "fd5cd123829556923676b57d03fdebdf"})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sunx86\x00')

36.11737665s ago: executing program 3 (id=1385):
socket$unix(0x1, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x3c, 0x4})
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e20, 0xff, @empty, 0xe}}, 0x0, 0x0, 0x1d, 0x0, "020602c431ee4eed18bcdf9bade9919b2e9088a80d94fabc05ddefcec013240a728cdd9f47964fc3c013ce6ad4c3c609f21ea5f3848a5fb0bbbdf311f9d8a156441a6a97d5b636ce0c025d22183bfd29"}, 0xd8)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0x3681}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4772000)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x38, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)

34.142054594s ago: executing program 3 (id=1393):
getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0x10, {0x7, 0x2b, 0x7ff7ffff, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = getpgid(0x0)
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

32.933693646s ago: executing program 36 (id=1337):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc)
socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)

32.729732053s ago: executing program 3 (id=1398):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

32.646421801s ago: executing program 9 (id=1399):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0])
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

31.566973027s ago: executing program 9 (id=1402):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x40d, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1}}, 0x40)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
mq_open(0x0, 0x1, 0x1a, &(0x7f0000000040)={0x20001294, 0x402, 0x5, 0x6})
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r2, 0x0)

30.616997364s ago: executing program 9 (id=1405):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfffffffffffffc31, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x0, 0x1, {0x9, 0xb, 0x1, 0xc, 0x2, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x7, 0x7}}, @TCA_GRED_MAX_P={0x0, 0x4, 0x4}, @TCA_GRED_STAB={0x0, 0x2, "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"}, @TCA_GRED_PARMS={0x0, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb988, 0x0, 0x1, 0xe149, 0xa, 0x8, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
splice(r0, &(0x7f0000000000)=0x4, r0, &(0x7f0000000040)=0xa, 0x0, 0xf)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e020200e8c928999de7773f2da1ba8a98736d6ee6f91ca99485ec33f3543a7ab8d6b7d259c418358288008ce9beb5d8cde7142245d2d6"], 0x5)

29.551757979s ago: executing program 9 (id=1408):
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x12158b9, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES64, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x5, 0x0, &(0x7f0000000000))
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
fchmod(r3, 0x21)

29.231614029s ago: executing program 9 (id=1410):
socket$phonet_pipe(0x23, 0x5, 0x2)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0)

28.633198995s ago: executing program 3 (id=1412):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3\n', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='udp 20000\n', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n', 0x2)
close(r2)

27.484311144s ago: executing program 9 (id=1417):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fanotify_init(0x0, 0x0)
r1 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50)
fanotify_mark(r0, 0x641, 0x48001018, r1, 0x0)
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1)
open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x100)
tee(r3, r4, 0x8000, 0x0)

12.870148954s ago: executing program 37 (id=1412):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3\n', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='udp 20000\n', 0xa)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1\n', 0x2)
close(r2)

8.406914048s ago: executing program 6 (id=1473):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)

7.211734047s ago: executing program 8 (id=1475):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x25002, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1000, 0x103)

6.997132852s ago: executing program 6 (id=1476):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000)

6.875127368s ago: executing program 7 (id=1477):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = userfaultfd(0x1)
mbind(&(0x7f000070d000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xe410, 0x5)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x9}, 0x94)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc010203010902120001000000000904000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

6.127117788s ago: executing program 8 (id=1478):
r0 = io_uring_setup(0x697d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xa9})
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x4)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0)
getpeername$packet(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.999201965s ago: executing program 6 (id=1479):
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x48c0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x6f)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000080)={0x2, 0x44, 0x248, 0x5d92, 0x7f, 0x1ce, 0x7fff, 0x4}, 0x0, &(0x7f00000000c0)={0x3ff, 0x80, 0x100000000000005, 0x0, 0x101, 0xafc2, 0x5, 0x400000000000001}, 0x0, 0x0)

5.911942775s ago: executing program 7 (id=1480):
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x10000000)
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e3000"/55], 0x38}}, 0x0)

4.665945509s ago: executing program 8 (id=1481):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)

4.606773247s ago: executing program 7 (id=1482):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
sendmsg$tipc(r0, 0x0, 0x40014)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x1f, &(0x7f0000000080)='size=4G%')
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0))
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

4.514566701s ago: executing program 6 (id=1483):
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0)
syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14)
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, 0x0, 0x0)

3.251335542s ago: executing program 8 (id=1484):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f00000005c0)={&(0x7f0000000080)=0xe00, 0x5, &(0x7f00000004c0), &(0x7f0000000580)})
getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000000040)=0x56)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$getflags(r1, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)

2.436138876s ago: executing program 7 (id=1485):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0x10, 0xa00, 0x40800000000000, 0x800000000000003}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x5c, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@remote, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0)

1.352787964s ago: executing program 7 (id=1486):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
flock(0xffffffffffffffff, 0x5)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1.332202869s ago: executing program 6 (id=1487):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x10, 0x2ffffffff}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.307735252s ago: executing program 8 (id=1488):
setns(0xc9, 0x0)
r0 = socket(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052)

763.262773ms ago: executing program 7 (id=1489):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)

51.144161ms ago: executing program 8 (id=1490):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x802, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
r2 = accept$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28)
sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0)

0s ago: executing program 6 (id=1491):
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

  244.589880][ T8142]  </TASK>
[  244.997615][ T8144] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  244.997911][ T8144] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  244.997947][ T8144] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  245.037731][ T8150] syz_tun: entered allmulticast mode
[  245.109071][ T8153] netlink: 52 bytes leftover after parsing attributes in process `syz.1.650'.
[  245.135024][ T8153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.650'.
[  245.153639][ T8153] netlink: 52 bytes leftover after parsing attributes in process `syz.1.650'.
[  245.435307][ T8159] FAULT_INJECTION: forcing a failure.
[  245.435307][ T8159] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  245.435363][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.7.651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  245.435399][ T8159] Tainted: [L]=SOFTLOCKUP
[  245.435409][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  245.435424][ T8159] Call Trace:
[  245.435434][ T8159]  <TASK>
[  245.435444][ T8159]  dump_stack_lvl+0xe8/0x150
[  245.435498][ T8159]  should_fail_ex+0x410/0x560
[  245.435535][ T8159]  prepare_alloc_pages+0x223/0x600
[  245.435573][ T8159]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  245.435605][ T8159]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  245.435639][ T8159]  ? __pfx_policy_nodemask+0x10/0x10
[  245.435674][ T8159]  ? __pfx_mmap_region+0x10/0x10
[  245.435715][ T8159]  alloc_pages_mpol+0x21e/0x390
[  245.435754][ T8159]  alloc_pages_noprof+0xb1/0x2b0
[  245.435790][ T8159]  pte_alloc_one+0x22/0x370
[  245.435825][ T8159]  do_pte_missing+0x13c8/0x34b0
[  245.435855][ T8159]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  245.435885][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.435914][ T8159]  ? mtree_range_walk+0x707/0x8b0
[  245.435956][ T8159]  handle_mm_fault+0x1a53/0x3750
[  245.435993][ T8159]  ? mt_find+0x186/0x630
[  245.436034][ T8159]  ? handle_mm_fault+0xf1/0x3750
[  245.436081][ T8159]  ? __pfx_handle_mm_fault+0x10/0x10
[  245.436116][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.436157][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.436190][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.436230][ T8159]  __get_user_pages+0x1675/0x2750
[  245.436299][ T8159]  populate_vma_page_range+0x2be/0x3c0
[  245.436334][ T8159]  ? __pfx_populate_vma_page_range+0x10/0x10
[  245.436369][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.436397][ T8159]  ? down_read+0x2be/0x330
[  245.436432][ T8159]  __mm_populate+0x25f/0x390
[  245.436465][ T8159]  ? __pfx___mm_populate+0x10/0x10
[  245.436506][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.436535][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.436570][ T8159]  vm_mmap_pgoff+0x353/0x4e0
[  245.436599][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.436635][ T8159]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  245.436668][ T8159]  ? rcu_is_watching+0x16/0xb0
[  245.436707][ T8159]  ? ksys_mmap_pgoff+0xf3/0x760
[  245.436742][ T8159]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.436769][ T8159]  ? __x64_sys_mmap+0x7f/0x140
[  245.436802][ T8159]  do_syscall_64+0x166/0x520
[  245.436831][ T8159]  ? trace_irq_disable+0x3b/0x140
[  245.436858][ T8159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.436890][ T8159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.436915][ T8159] RIP: 0033:0x7f6e0079e159
[  245.436941][ T8159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.436963][ T8159] RSP: 002b:00007f6e016fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  245.436990][ T8159] RAX: ffffffffffffffda RBX: 00007f6e00a25fa0 RCX: 00007f6e0079e159
[  245.437010][ T8159] RDX: b635773f05ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  245.437028][ T8159] RBP: 00007f6e0083503b R08: ffffffffffffffff R09: 00000000ffffc000
[  245.437046][ T8159] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  245.437062][ T8159] R13: 00007f6e00a26038 R14: 00007f6e00a25fa0 R15: 00007ffc60b5d588
[  245.437101][ T8159]  </TASK>
[  245.464769][ T8158] bond1: entered allmulticast mode
[  245.464810][ T8158] ip6gre1: entered allmulticast mode
[  245.511675][ T8158] dvmrp8: entered allmulticast mode
[  245.542214][ T8156] bond1: left allmulticast mode
[  245.542254][ T8156] ip6gre1: left allmulticast mode
[  246.136242][ T8163] loop1: detected capacity change from 0 to 40427
[  246.149407][ T8163] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  246.149448][ T8163] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  246.274819][ T8163] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  246.301870][ T8163] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  246.301913][ T8163] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  246.490393][ T8163] syz.1.655: attempt to access beyond end of device
[  246.490393][ T8163] loop1: rw=2049, sector=45096, nr_sectors = 1704 limit=40427
[  246.768680][   T30] audit: type=1800 audit(1789460588.869:18): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.655" name="bus" dev="loop1" ino=13 res=0 errno=0
[  247.174782][ T5763] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  247.290579][   T30] audit: type=1800 audit(1789460589.389:19): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.659" name="syzkaller0" dev="sda1" ino=2053 res=0 errno=0
[  247.460157][ T8188] FAULT_INJECTION: forcing a failure.
[  247.460157][ T8188] name failslab, interval 1, probability 0, space 0, times 0
[  247.460208][ T8188] CPU: 0 UID: 0 PID: 8188 Comm: syz.7.662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  247.460246][ T8188] Tainted: [L]=SOFTLOCKUP
[  247.460258][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  247.460275][ T8188] Call Trace:
[  247.460285][ T8188]  <TASK>
[  247.460297][ T8188]  dump_stack_lvl+0xe8/0x150
[  247.460346][ T8188]  should_fail_ex+0x410/0x560
[  247.460384][ T8188]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  247.460412][ T8188]  should_failslab+0xa8/0x100
[  247.460452][ T8188]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  247.460475][ T8188]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  247.460528][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.460562][ T8188]  ? alloc_inode+0x6a/0x1b0
[  247.460593][ T8188]  ? alloc_inode+0x6a/0x1b0
[  247.460626][ T8188]  ? __pfx_simple_start_creating+0x10/0x10
[  247.460669][ T8188]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  247.460694][ T8188]  alloc_inode+0x6a/0x1b0
[  247.460728][ T8188]  new_inode+0x1f/0x170
[  247.460768][ T8188]  __debugfs_create_file+0xb8/0x400
[  247.460813][ T8188]  debugfs_create_file_full+0x3f/0x60
[  247.460857][ T8188]  blk_trace_setup_prepare+0x404/0x5a0
[  247.460897][ T8188]  blk_trace_setup+0x2f5/0x520
[  247.460933][ T8188]  ? __pfx_blk_trace_setup+0x10/0x10
[  247.460986][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.461014][ T8188]  ? snprintf+0xe8/0x140
[  247.461080][ T8188]  blk_trace_ioctl+0x37f/0x910
[  247.461117][ T8188]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  247.461152][ T8188]  ? kasan_quarantine_put+0xbb/0x1f0
[  247.461179][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.461215][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.461249][ T8188]  ? tomoyo_path_number_perm+0x219/0x5f0
[  247.461280][ T8188]  ? tomoyo_path_number_perm+0x219/0x5f0
[  247.461308][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.461346][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.461376][ T8188]  ? do_vfs_ioctl+0x116f/0x1530
[  247.461407][ T8188]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  247.461450][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.461479][ T8188]  ? hook_file_ioctl+0x1f2/0x600
[  247.461513][ T8188]  ? call_rcu+0x64d/0x8b0
[  247.461572][ T8188]  blkdev_ioctl+0x4c1/0x740
[  247.461609][ T8188]  ? __pfx_blkdev_ioctl+0x10/0x10
[  247.461640][ T8188]  ? __fget_files+0x2a/0x420
[  247.461679][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.461708][ T8188]  ? srso_alias_return_thunk+0x5/0xfbef5
[  247.461739][ T8188]  ? __pfx_blkdev_ioctl+0x10/0x10
[  247.461772][ T8188]  __se_sys_ioctl+0xfc/0x170
[  247.461803][ T8188]  do_syscall_64+0x166/0x520
[  247.461833][ T8188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.461865][ T8188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.461891][ T8188] RIP: 0033:0x7f6e0079e159
[  247.461915][ T8188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.461936][ T8188] RSP: 002b:00007f6e016fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  247.461965][ T8188] RAX: ffffffffffffffda RBX: 00007f6e00a25fa0 RCX: 00007f6e0079e159
[  247.461984][ T8188] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003
[  247.462000][ T8188] RBP: 00007f6e0083503b R08: 0000000000000000 R09: 0000000000000000
[  247.462016][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.462032][ T8188] R13: 00007f6e00a26038 R14: 00007f6e00a25fa0 R15: 00007ffc60b5d588
[  247.462072][ T8188]  </TASK>
[  247.469148][ T5763] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00
[  247.470682][ T5763] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  247.470717][ T5763] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  247.470767][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.483359][ T8188] debugfs: out of free dentries, can not create file 'msg'
[  247.492279][ T8161] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  247.492447][ T8161] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  247.628911][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.663'.
[  247.756933][ T8193] ip6gre1: entered promiscuous mode
[  247.756961][ T8193] ip6gre1: entered allmulticast mode
[  248.051289][ T5616] Bluetooth: hci1: Can't claim NULL iso interface
[  248.756573][ T5616] Bluetooth: hci1: Failed to get device id (-71)
[  248.756610][ T5616] Bluetooth: hci1: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported.
[  248.756896][ T5743] usb 6-1: USB disconnect, device number 4
[  248.761431][ T8198] lo speed is unknown, defaulting to 1000
[  249.314619][ T8212] loop0: detected capacity change from 0 to 2048
[  249.329534][ T8212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  251.073257][ T8202] lo speed is unknown, defaulting to 1000
[  251.612067][ T5614] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  251.615153][ T5614] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  252.587924][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.7.677'.
[  254.246747][ T7464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.468540][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  255.468663][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  257.187362][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.201514][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.206440][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.223457][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.224686][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.926768][ T7464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.067610][ T8286] lo: entered promiscuous mode
[  258.078842][ T8286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  258.223570][ T5616] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  258.223950][ T5616] Bluetooth: hci2: Injecting HCI hardware error event
[  258.262097][ T5625] Bluetooth: hci2: hardware error 0x00
[  258.458512][ T8296] input: syz1 as /devices/virtual/input/input11
[  258.796200][ T7464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.415151][ T5616] Bluetooth: hci1: command tx timeout
[  259.971220][ T7464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.632564][ T5625] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  260.648911][ T8319] loop1: detected capacity change from 0 to 1024
[  260.669131][ T8319] EXT4-fs: Ignoring removed bh option
[  260.670238][ T8319] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block
[  260.670238][ T8319] 
[  260.957729][ T8277] lo speed is unknown, defaulting to 1000
[  261.493168][ T5625] Bluetooth: hci1: command tx timeout
[  262.333127][   T48] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  262.523818][   T48] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  262.524561][   T48] usb 2-1: config 0 has no interfaces?
[  262.524601][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.556602][   T48] usb 2-1: config 0 descriptor??
[  263.237608][ T8354] loop6: detected capacity change from 0 to 256
[  263.240590][ T5770] usb 2-1: USB disconnect, device number 7
[  263.334912][ T7464] bridge_slave_1: left allmulticast mode
[  263.334959][ T7464] bridge_slave_1: left promiscuous mode
[  263.335231][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.576430][ T5625] Bluetooth: hci1: command tx timeout
[  263.577881][ T7464] bridge_slave_0: left allmulticast mode
[  263.577922][ T7464] bridge_slave_0: left promiscuous mode
[  263.578291][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.591125][ T8352] loop5: detected capacity change from 0 to 512
[  263.606577][ T8352] EXT4-fs: Invalid want_extra_isize 1969
[  263.947798][ T8354] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  265.139048][ T7464] bond1 (unregistering): (slave bridge1): Releasing active interface
[  265.139097][ T7464] bridge1 (unregistering): left allmulticast mode
[  265.200400][ T7464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.230062][ T7464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.258902][ T7464] bond0 (unregistering): Released all slaves
[  265.297758][ T7464] bond1 (unregistering): Released all slaves
[  265.399542][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5
[  265.656102][ T5625] Bluetooth: hci1: command tx timeout
[  266.029611][ T8393] loop5: detected capacity change from 0 to 1764
[  267.911090][   T30] audit: type=1326 audit(1789460866.010:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  267.911929][   T30] audit: type=1326 audit(1789460866.010:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  267.957012][   T30] audit: type=1326 audit(1789460866.040:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  268.082924][  T981] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  268.084144][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  268.247364][  T981] usb 6-1: device descriptor read/64, error -32
[  268.748398][  T981] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  269.276593][  T981] usb 6-1: device descriptor read/all, error -71
[  269.276905][  T981] usb usb6-port1: attempt power cycle
[  269.317180][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'.
[  269.614495][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.730'.
[  269.709183][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.709418][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.709617][ T8277] bridge_slave_0: entered allmulticast mode
[  269.746546][ T8277] bridge_slave_0: entered promiscuous mode
[  269.767958][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.194522][ T5847] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  270.343786][ T5847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  270.345500][ T5847] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  270.345543][ T5847] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  270.348162][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.348199][ T5847] usb 2-1: Product: syz
[  270.348216][ T5847] usb 2-1: Manufacturer: syz
[  270.348234][ T5847] usb 2-1: SerialNumber: syz
[  270.526449][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.526576][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.526820][ T8277] bridge_slave_1: entered allmulticast mode
[  270.621724][   T30] audit: type=1326 audit(1789460868.720:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  270.621908][   T30] audit: type=1326 audit(1789460868.720:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  270.622194][   T30] audit: type=1326 audit(1789460868.720:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  270.622480][   T30] audit: type=1326 audit(1789460868.720:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  270.623545][   T30] audit: type=1326 audit(1789460868.720:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  270.623602][   T30] audit: type=1326 audit(1789460868.720:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  270.623720][   T30] audit: type=1326 audit(1789460868.720:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8460 comm="syz.3.735" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f76f9e159 code=0x7ffc0000
[  271.245591][ T8277] bridge_slave_1: entered promiscuous mode
[  271.271630][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6
[  271.281114][ T8453] loop5: detected capacity change from 0 to 32768
[  271.373392][ T8277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.377792][ T8277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.408426][ T8453] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.731 (8453)
[  271.676842][ T7464] hsr_slave_0: left promiscuous mode
[  271.695599][ T7464] hsr_slave_1: left promiscuous mode
[  271.697201][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.697229][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.785996][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.786063][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.881845][ T7464] veth1_macvtap: left promiscuous mode
[  271.881926][ T7464] veth0_macvtap: left promiscuous mode
[  271.882084][ T7464] veth1_vlan: left promiscuous mode
[  271.882165][ T7464] veth0_vlan: left promiscuous mode
[  272.102111][ T8453] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.102153][ T8453] BTRFS info (device loop5): using sha256 checksum algorithm
[  272.196240][ T5847] cdc_ncm 2-1:1.0: bind() failure
[  272.303441][ T5847] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  272.303496][ T5847] cdc_ncm 2-1:1.1: bind() failure
[  272.332489][ T8453] BTRFS info (device loop5): enabling ssd optimizations
[  272.332526][ T8453] BTRFS info (device loop5): turning on sync discard
[  272.332545][ T8453] BTRFS info (device loop5): enabling free space tree
[  272.332574][ T8453] BTRFS info (device loop5): use zlib compression, level 3
[  272.380314][ T5847] usb 2-1: USB disconnect, device number 8
[  273.006092][ T8503] sctp: [Deprecated]: syz.3.742 (pid 8503) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.006092][ T8503] Use struct sctp_sack_info instead
[  273.387042][ T5613] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  273.480168][ T8507] trusted_key: encrypted_key: key user:syz not found
[  273.904278][ T5616] Bluetooth: hci0: unexpected event for opcode 0x2062
[  274.509370][ T7464] team0 (unregistering): Port device team_slave_1 removed
[  274.556181][ T7464] team0 (unregistering): Port device team_slave_0 removed
[  275.118547][ T8533] input: syz1 as /devices/virtual/input/input12
[  275.149596][ T8531] netlink: 14 bytes leftover after parsing attributes in process `syz.5.750'.
[  275.380915][ T7479] smc: removing ib device syz0
[  275.528980][ T5341] infiniband syz0: ib_query_port failed (-19)
[  275.688830][ T7479] smbdirect: ib_dev[syz0] removed
[  275.751250][ T8277] team0: Port device team_slave_0 added
[  275.771104][ T8277] team0: Port device team_slave_1 added
[  275.887880][ T8524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.429674][ T8277] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.429699][ T8277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.429733][ T8277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.614002][ T8277] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.614028][ T8277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.614061][ T8277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.825374][ T8277] hsr_slave_0: entered promiscuous mode
[  279.763118][ T8277] hsr_slave_1: entered promiscuous mode
[  279.769482][ T8277] debugfs: 'hsr0' already exists in 'hsr'
[  279.769505][ T8277] Cannot create hsr debugfs directory
[  279.771401][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7
[  280.000703][ T8595] loop6: detected capacity change from 0 to 512
[  280.007096][ T8595] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  280.007115][ T8595] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  280.037215][ T8595] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.765: invalid indirect mapped block 9 (level 0)
[  280.037259][ T8595] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  280.040623][ T8595] EXT4-fs (loop6): 1 truncate cleaned up
[  280.100310][ T8595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.349293][ T6798] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.349950][ T8606] loop7: detected capacity change from 0 to 512
[  280.754948][ T8601] loop5: detected capacity change from 0 to 2048
[  280.859039][ T8606] EXT4-fs (loop7): 1 orphan inode deleted
[  280.871082][ T8606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.872698][ T8606] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.897805][ T7481] __quota_error: 213 callbacks suppressed
[  280.897832][ T7481] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  280.898084][ T7481] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u8:32: Failed to release dquot type 1
[  281.097058][ T8601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.097174][ T8601] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.521334][ T8606] loop7: detected capacity change from 512 to 0
[  281.908417][ T8632] loop1: detected capacity change from 0 to 4096
[  283.104727][ T5625] Bluetooth: hci3: command 0x0406 tx timeout
[  283.644479][ T8633] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.288116][ T8623] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.289249][ T8623] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:5039: inode #4: block 34: comm syz.7.768: unable to read itable block
[  284.289293][ T8623] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -5
[  284.289856][ T8623] Buffer I/O error on dev loop7, logical block 0, lost sync page write
[  284.289888][ T8623] EXT4-fs (loop7): I/O error while writing superblock
[  284.353752][ T8623] Buffer I/O error on dev loop7, logical block 0, lost sync page write
[  284.353790][ T8623] EXT4-fs (loop7): I/O error while writing superblock
[  284.390321][ T8613] Buffer I/O error on dev loop7, logical block 8, lost sync page write
[  285.306202][ T5613] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.557528][ T8644] netlink: 'syz.7.775': attribute type 1 has an invalid length.
[  285.680218][ T8643] loop3: detected capacity change from 0 to 2048
[  286.257238][ T8643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.259689][ T8643] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.473233][ T8644] 8021q: adding VLAN 0 to HW filter on device bond1
[  286.857640][   T30] audit: type=1800 audit(1789460884.960:243): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.777" name="file0" dev="loop3" ino=13 res=0 errno=0
[  287.887883][ T8646] macvlan2: entered promiscuous mode
[  288.642093][ T8646] macvlan2: entered allmulticast mode
[  288.642582][ T8646] bond1: entered allmulticast mode
[  288.642635][ T8646] bond1: entered promiscuous mode
[  288.667770][ T8646] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  288.692386][ T8646] team0: Port device macvlan2 added
[  288.767233][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8
[  289.383991][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.372590][ T8277] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  290.432708][ T8707] Option 'dnserror' to dns_resolver key: bad/missing value
[  290.543235][ T8710] netlink: 'syz.7.794': attribute type 1 has an invalid length.
[  290.725471][ T8713] netlink: 'syz.7.794': attribute type 10 has an invalid length.
[  290.725500][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.7.794'.
[  290.845474][   T48] hid-generic 0008:046D:C082.0003: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz0
[  291.383653][ T8277] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  292.104821][ T8733] netlink: 'syz.1.793': attribute type 11 has an invalid length.
[  292.149611][ T8710] 8021q: adding VLAN 0 to HW filter on device bond2
[  292.392697][ T8734] fido_id[8734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  292.458001][ T8711] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  292.485866][ T8712] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  292.486179][ T8713] dummy0: entered promiscuous mode
[  292.526373][ T8713] bond2: (slave dummy0): Releasing backup interface
[  292.582132][ T8277] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  292.609513][ T8277] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  292.871308][ T8277] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  292.937517][ T8277] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  292.938595][ T8277] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  292.981048][ T8277] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  294.525358][ T8277] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.545534][ T8277] 8021q: adding VLAN 0 to HW filter on device team0
[  294.639998][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.640136][ T7461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.698677][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.698824][ T6134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.006965][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  295.007004][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  295.007025][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xbe15 instead
[  295.007048][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xaee7 instead
[  295.007067][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  295.007086][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  295.007104][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  295.007128][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  295.007166][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  295.007204][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  295.007222][ T8782] jffs2: Further such events for this erase block will not be printed
[  295.012453][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  295.012491][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  295.012512][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xbe15 instead
[  295.012535][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xaee7 instead
[  295.012555][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  295.012583][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  295.012602][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  295.012627][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  295.012673][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  295.703860][ T8782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  295.703901][ T8782] jffs2: Further such events for this erase block will not be printed
[  295.704435][ T8782] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  295.704447][ T8782] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[  296.021489][ T8791] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  296.169049][ T8797] loop3: detected capacity change from 0 to 512
[  296.176543][ T8797] ext4: Unknown parameter 'fscontext'
[  296.270577][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'.
[  297.656261][ T8277] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.251842][ T8831] loop3: detected capacity change from 0 to 512
[  298.317382][ T8831] ext2: Unknown parameter '.'
[  299.636549][ T8277] veth0_vlan: entered promiscuous mode
[  299.830435][ T8277] veth1_vlan: entered promiscuous mode
[  300.225106][ T8277] veth0_macvtap: entered promiscuous mode
[  300.955042][ T8277] veth1_macvtap: entered promiscuous mode
[  301.085508][ T8277] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.172238][ T8277] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.243131][ T6134] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.243378][ T6134] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.243676][ T6134] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.243744][ T6134] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.305751][ T5616] Bluetooth: hci0: unexpected event for opcode 0x1003
[  301.306371][ T5616] Bluetooth: hci0: unexpected event for opcode 0x1004
[  301.369702][ T5847] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  301.961171][ T7477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.961204][ T7477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.127785][ T7463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.127817][ T7463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.045414][ T8889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  303.073536][ T5847] usb 7-1: unable to get BOS descriptor or descriptor too short
[  303.073618][ T5847] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  303.106738][ T5847] usb 7-1: unable to read config index 0 descriptor/start: -71
[  303.106786][ T5847] usb 7-1: can't read configurations, error -71
[  303.502892][ T5625] Bluetooth: hci0: command 0x0406 tx timeout
[  303.511799][ T5616] Bluetooth: hci0: Opcode 0x2008 failed: -110
[  304.022282][ T8900] batman_adv: batadv0: Adding interface: dummy0
[  304.022305][ T8900] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.022341][ T8900] batman_adv: batadv0: Interface activated: dummy0
[  304.457023][ T8904] batadv0: mtu less than device minimum
[  304.462654][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.464272][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.465832][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.467499][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.469054][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.470541][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.472069][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.473661][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.475192][ T8904] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  306.474648][ T8954] dvmrp8: left allmulticast mode
[  306.510507][   T30] audit: type=1326 audit(1789460904.610:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.510581][   T30] audit: type=1326 audit(1789460904.610:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.510643][   T30] audit: type=1326 audit(1789460904.610:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.581242][   T30] audit: type=1326 audit(1789460904.680:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.589070][   T30] audit: type=1326 audit(1789460904.610:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.609166][   T30] audit: type=1326 audit(1789460904.710:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.643585][   T30] audit: type=1326 audit(1789460904.750:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.643641][   T30] audit: type=1326 audit(1789460904.750:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.659923][   T30] audit: type=1326 audit(1789460904.750:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.678182][   T30] audit: type=1326 audit(1789460904.760:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  306.892167][ T8943] ceph: No mds server is up or the cluster is laggy
[  307.666701][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.855'.
[  308.307976][ T8989] netlink: 'syz.5.860': attribute type 2 has an invalid length.
[  308.693398][ T5616] Bluetooth: hci6: command 0x0405 tx timeout
[  310.197125][ T9028] tipc: Failed to remove unknown binding: 66,0,0/0:1043271184/1043271186
[  310.197174][ T9028] tipc: Failed to remove unknown binding: 66,0,0/0:1043271184/1043271185
[  310.198099][ T9028] tipc: Failed to remove unknown binding: 66,0,0/0:1043271184/1043271186
[  310.198136][ T9028] tipc: Failed to remove unknown binding: 66,0,0/0:1043271184/1043271185
[  310.467214][ T5625] Bluetooth: hci5: unexpected event for opcode 0x0401
[  310.602519][ T9040] netlink: 'syz.8.873': attribute type 1 has an invalid length.
[  310.726787][ T9048] loop1: detected capacity change from 0 to 512
[  310.755312][ T9048] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.875: corrupted in-inode xattr: invalid ea_ino
[  310.755349][ T9048] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  310.755644][ T9048] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.875: couldn't read orphan inode 15 (err -117)
[  310.755675][ T9048] loop1: lost filesystem error report for type 5 error -117
[  310.759984][ T9048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.892247][ T9044] team0: Port device veth0_to_bond added
[  310.969671][ T9049] macvlan2: entered promiscuous mode
[  310.969695][ T9049] macvlan2: entered allmulticast mode
[  310.973614][ T9049] team0: Device macvlan2 is already an upper device of the team interface
[  311.049968][ T9042] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input13
[  311.576436][ T9046] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input14
[  311.727793][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.971480][ T9102] loop3: detected capacity change from 0 to 512
[  313.113041][  T981] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  313.263281][  T981] usb 9-1: Using ep0 maxpacket: 16
[  313.264287][  T981] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  313.266474][  T981] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  313.266537][  T981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  313.266568][  T981] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  313.267920][  T981] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  313.267948][  T981] usb 9-1: Manufacturer: syz
[  313.348242][  T981] usb 9-1: config 0 descriptor??
[  313.918489][ T5773] usb 9-1: USB disconnect, device number 2
[  314.829627][ T5625] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  314.832524][ T5625] Bluetooth: hci5: Injecting HCI hardware error event
[  314.843313][ T5616] Bluetooth: hci5: hardware error 0x00
[  315.284126][ T9138] loop3: detected capacity change from 0 to 4096
[  315.483853][ T9138] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  315.735485][ T9152] FAULT_INJECTION: forcing a failure.
[  315.735485][ T9152] name failslab, interval 1, probability 0, space 0, times 0
[  315.735549][ T9152] CPU: 0 UID: 0 PID: 9152 Comm: syz.1.905 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  315.735594][ T9152] Tainted: [L]=SOFTLOCKUP
[  315.735608][ T9152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  315.735632][ T9152] Call Trace:
[  315.735646][ T9152]  <TASK>
[  315.735657][ T9152]  dump_stack_lvl+0xe8/0x150
[  315.735720][ T9152]  should_fail_ex+0x410/0x560
[  315.735765][ T9152]  should_failslab+0xa8/0x100
[  315.735811][ T9152]  ? kcm_create+0x11b/0x550
[  315.735851][ T9152]  kmem_cache_alloc_noprof+0xa1/0x600
[  315.735901][ T9152]  ? srso_alias_return_thunk+0x5/0xfbef5
[  315.735940][ T9152]  ? sock_update_netprioidx+0x2b7/0x3a0
[  315.735992][ T9152]  ? kcm_create+0x11b/0x550
[  315.736038][ T9152]  kcm_create+0x11b/0x550
[  315.736094][ T9152]  __sock_create+0x4b3/0x9d0
[  315.736137][ T9152]  __sys_socket+0xd6/0x1b0
[  315.736176][ T9152]  __x64_sys_socket+0x7a/0x90
[  315.736203][ T9152]  do_syscall_64+0x166/0x520
[  315.736232][ T9152]  ? trace_irq_disable+0x3b/0x140
[  315.736258][ T9152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.736289][ T9152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.736314][ T9152] RIP: 0033:0x7f4a5a99e159
[  315.736336][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.736357][ T9152] RSP: 002b:00007f4a5b80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  315.736384][ T9152] RAX: ffffffffffffffda RBX: 00007f4a5ac25fa0 RCX: 00007f4a5a99e159
[  315.736402][ T9152] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029
[  315.736417][ T9152] RBP: 00007f4a5aa3503b R08: 0000000000000000 R09: 0000000000000000
[  315.736432][ T9152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.736447][ T9152] R13: 00007f4a5ac26038 R14: 00007f4a5ac25fa0 R15: 00007ffc3ac1d138
[  315.736486][ T9152]  </TASK>
[  316.260243][ T9138] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  316.862483][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  316.862566][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  317.094742][ T9138] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  317.138893][ T9175] loop6: detected capacity change from 0 to 128
[  317.175490][ T9162] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  317.209677][ T9165] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  317.227342][ T9167] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  317.256416][ T5616] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  317.310795][ T9168] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  317.509629][ T9169] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  317.606851][ T9138] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  318.619615][ T9162] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  318.818781][ T9206] futex_wake_op: syz.8.913 tries to shift op by 144; fix this program
[  319.295998][ T9217] overlayfs: failed to clone upperpath
[  319.393819][  T981] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  319.554829][  T981] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  319.555934][  T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  319.555960][  T981] usb 4-1: config 0 has no interface number 0
[  319.556004][  T981] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  319.556034][  T981] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  319.556075][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.621559][  T981] usb 4-1: config 0 descriptor??
[  319.657445][  T981] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  319.870731][ T9215] iowarrior 4-1:0.1: Error -90 while submitting URB
[  320.013762][ T5773] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  320.173783][ T5773] usb 6-1: Using ep0 maxpacket: 32
[  320.183800][ T5773] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  320.191865][ T5773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.191894][ T5773] usb 6-1: config 0 has no interfaces?
[  320.191926][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.207256][ T5773] usb 6-1: config 0 descriptor??
[  320.530152][ T5773] usb 4-1: USB disconnect, device number 5
[  320.803625][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.812374][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.221104][ T9256] netlink: 14 bytes leftover after parsing attributes in process `syz.5.920'.
[  321.332253][ T9256] bond0 (unregistering): Released all slaves
[  321.401337][ T9260] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  322.946579][ T5341] usb 6-1: USB disconnect, device number 8
[  323.169836][ T9290] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  323.727539][ T9305] sctp: [Deprecated]: syz.7.947 (pid 9305) Use of int in max_burst socket option.
[  323.727539][ T9305] Use struct sctp_assoc_value instead
[  323.842233][ T9306] sctp: [Deprecated]: syz.7.947 (pid 9306) Use of struct sctp_assoc_value in delayed_ack socket option.
[  323.842233][ T9306] Use struct sctp_sack_info instead
[  324.044788][ T9310] netlink: 'syz.6.949': attribute type 12 has an invalid length.
[  324.177767][ T9310] loop6: detected capacity change from 0 to 1024
[  324.232994][   T48] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  324.377069][ T9310] hfsplus: failed to load extents file
[  324.391691][   T48] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11
[  324.402571][   T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.402652][   T48] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  324.448556][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.448606][   T48] usb 4-1: Product: syz
[  324.448637][   T48] usb 4-1: Manufacturer: syz
[  324.448662][   T48] usb 4-1: SerialNumber: syz
[  324.498788][   T48] r8152-cfgselector 4-1: Unknown version 0x0000
[  324.524592][   T48] r8152 4-1:1.0: Expected endpoints are not found
[  324.794581][   T48] r8152-cfgselector 4-1: USB disconnect, device number 6
[  325.886204][ T9343] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  325.918615][ T9343] tipc: Resetting bearer <eth:syzkaller0>
[  325.998151][ T9343] tipc: Disabling bearer <eth:syzkaller0>
[  326.142695][ T9347] netlink: 'syz.3.962': attribute type 1 has an invalid length.
[  326.174857][ T9347] 8021q: adding VLAN 0 to HW filter on device bond1
[  326.211106][ T9347] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  326.287253][ T9347] bridge2: entered promiscuous mode
[  326.369817][ T9347] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  326.641933][ T9354] syzkaller0: entered promiscuous mode
[  326.641962][ T9354] syzkaller0: entered allmulticast mode
[  329.096392][ T9375] loop8: detected capacity change from 0 to 512
[  329.100753][ T9375] EXT4-fs: Ignoring removed i_version option
[  329.100828][ T9375] EXT4-fs: Ignoring removed oldalloc option
[  329.333024][ T9375] EXT4-fs (loop8): Test dummy encryption mode enabled
[  329.531451][ T9375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.607590][ T9379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.987305][ T8277] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.262929][ T5847] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  330.422898][ T5847] usb 4-1: Using ep0 maxpacket: 16
[  330.423677][ T5847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  330.428125][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  330.428155][ T5847] usb 4-1: config 0 has no interfaces?
[  330.429580][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  330.429604][ T5847] usb 4-1: SerialNumber: syz
[  330.479638][ T5847] usb 4-1: config 0 descriptor??
[  331.819071][ T9420] warning: `syz.1.987' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  332.077331][   T30] kauditd_printk_skb: 346 callbacks suppressed
[  332.077357][   T30] audit: type=1326 audit(1789460930.180:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.7.988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0079e159 code=0x7fc00000
[  332.078538][   T30] audit: type=1326 audit(1789460930.180:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.7.988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e0079e159 code=0x7fc00000
[  332.183032][   T30] audit: type=1326 audit(1789460930.280:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.7.988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e00797ed7 code=0x7fc00000
[  332.186904][   T30] audit: type=1326 audit(1789460930.290:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.7.988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e0073f4d9 code=0x7fc00000
[  332.187047][   T30] audit: type=1326 audit(1789460930.290:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.7.988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6e0073f59d code=0x7fc00000
[  332.190520][   T30] audit: type=1326 audit(1789460930.290:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.7.988" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e0079e159 code=0x7fc00000
[  332.548777][ T9432] FAULT_INJECTION: forcing a failure.
[  332.548777][ T9432] name failslab, interval 1, probability 0, space 0, times 0
[  332.548821][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.1.991 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  332.548853][ T9432] Tainted: [L]=SOFTLOCKUP
[  332.548863][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  332.548878][ T9432] Call Trace:
[  332.548888][ T9432]  <TASK>
[  332.548899][ T9432]  dump_stack_lvl+0xe8/0x150
[  332.548943][ T9432]  should_fail_ex+0x410/0x560
[  332.548978][ T9432]  should_failslab+0xa8/0x100
[  332.549014][ T9432]  __kmalloc_noprof+0xfe/0x720
[  332.549038][ T9432]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  332.549065][ T9432]  ? udpv6_init_sock+0x198/0x3b0
[  332.549100][ T9432]  ? udpv6_init_sock+0x198/0x3b0
[  332.549137][ T9432]  udpv6_init_sock+0x198/0x3b0
[  332.549166][ T9432]  ? sock_init_data_uid+0x6e4/0x980
[  332.549204][ T9432]  inet6_create+0xefb/0x1270
[  332.549245][ T9432]  ? inet6_create+0x80/0x1270
[  332.549290][ T9432]  __sock_create+0x4b3/0x9d0
[  332.549328][ T9432]  __sys_socket+0xd6/0x1b0
[  332.549361][ T9432]  __x64_sys_socket+0x7a/0x90
[  332.549390][ T9432]  do_syscall_64+0x166/0x520
[  332.549418][ T9432]  ? trace_irq_disable+0x3b/0x140
[  332.549445][ T9432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.549478][ T9432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.549504][ T9432] RIP: 0033:0x7f4a5a99e159
[  332.549526][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.549547][ T9432] RSP: 002b:00007f4a5b80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  332.549574][ T9432] RAX: ffffffffffffffda RBX: 00007f4a5ac25fa0 RCX: 00007f4a5a99e159
[  332.549594][ T9432] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[  332.549609][ T9432] RBP: 00007f4a5aa3503b R08: 0000000000000000 R09: 0000000000000000
[  332.549625][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.549641][ T9432] R13: 00007f4a5ac26038 R14: 00007f4a5ac25fa0 R15: 00007ffc3ac1d138
[  332.549680][ T9432]  </TASK>
[  333.088812][ T5847] usb 4-1: USB disconnect, device number 7
[  333.733021][ T5625] Bluetooth: hci4: command 0x1003 tx timeout
[  333.733230][ T5616] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  335.051451][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'.
[  335.600054][ T9474] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1002'.
[  336.154017][ T5763] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  336.305632][ T5763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  336.313623][ T5763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  336.313686][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.313728][ T5763] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  336.313757][ T5763] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  336.318134][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.318160][ T5763] usb 2-1: Product: syz
[  336.318182][ T5763] usb 2-1: Manufacturer: syz
[  336.318199][ T5763] usb 2-1: SerialNumber: syz
[  337.300286][ T9515] loop6: detected capacity change from 0 to 512
[  337.320870][ T9515] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1015: bad orphan inode 15
[  337.320909][ T9515] loop6: lost filesystem error report for type 5 error -117
[  337.321437][ T9515] ext4_test_bit(bit=14, block=18) = 1
[  337.321457][ T9515] is_bad_inode(inode)=0
[  337.321467][ T9515] NEXT_ORPHAN(inode)=1023
[  337.321477][ T9515] max_ino=32
[  337.321487][ T9515] i_nlink=0
[  337.324307][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  337.324323][    C0] EXT4-fs (loop6): initial error at time 1789460935: ext4_orphan_get:1429
[  337.324348][    C0] EXT4-fs (loop6): last error at time 1789460935: ext4_orphan_get:1429
[  337.329512][ T9515] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2933: inode #15: comm syz.6.1015: corrupted xattr block 19: invalid header
[  337.329550][ T9515] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  337.337275][ T9515] EXT4-fs warning (device loop6): ext4_evict_inode:288: xattr delete (err -117)
[  337.364920][ T9515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  337.365500][ T9515] ext4 filesystem being mounted at /116/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  337.475940][ T5763] cdc_ncm 2-1:1.0: bind() failure
[  337.512004][ T5763] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  337.514859][ T5763] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  337.520303][ T5763] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  337.556151][ T5763] usb 2-1: USB disconnect, device number 9
[  338.584846][ T9530] netlink: 'syz.7.1019': attribute type 4 has an invalid length.
[  338.584875][ T9530] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1019'.
[  338.615977][ T6798] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  338.866073][ T9537] netlink: 'syz.6.1020': attribute type 4 has an invalid length.
[  338.866548][ T9537] netlink: 'syz.6.1020': attribute type 4 has an invalid length.
[  339.408771][   T30] audit: type=1326 audit(1789460937.510:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99e159 code=0x0
[  339.533586][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  339.537720][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  339.539679][   T30] audit: type=1326 audit(1789460937.640:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  339.539812][   T30] audit: type=1326 audit(1789460937.640:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5a99e159 code=0x7ffc0000
[  339.539933][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  339.541963][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  339.542685][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  339.557125][   T30] audit: type=1326 audit(1789460937.660:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a5a95e98e code=0x7ffc0000
[  339.557181][   T30] audit: type=1326 audit(1789460937.660:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a5a95e98e code=0x7ffc0000
[  339.582262][   T30] audit: type=1326 audit(1789460937.660:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a5a95e98e code=0x7ffc0000
[  339.582321][   T30] audit: type=1326 audit(1789460937.660:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a5a95e98e code=0x7ffc0000
[  339.582370][   T30] audit: type=1326 audit(1789460937.670:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a5a95e98e code=0x7ffc0000
[  339.582419][   T30] audit: type=1326 audit(1789460937.670:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a5a95e98e code=0x7ffc0000
[  339.582467][   T30] audit: type=1326 audit(1789460937.670:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.1.1024" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a5a95e98e code=0x7ffc0000
[  339.588819][ T9558] loop6: detected capacity change from 0 to 4096
[  339.738352][ T9565] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  340.848134][ T9577] loop8: detected capacity change from 0 to 128
[  341.662821][ T5616] Bluetooth: hci4: command tx timeout
[  342.539805][ T9602] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  343.251117][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.256603][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.257174][ T9560] bridge_slave_0: entered allmulticast mode
[  343.295716][ T9560] bridge_slave_0: entered promiscuous mode
[  343.317333][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.317563][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.317849][ T9560] bridge_slave_1: entered allmulticast mode
[  343.334844][ T9560] bridge_slave_1: entered promiscuous mode
[  343.375028][ T9609] loop1: detected capacity change from 0 to 40427
[  343.399801][ T9609] F2FS-fs (loop1): invalid crc value
[  343.442667][ T9625] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1
[  343.442697][ T9625] ref_ctr increment failed for inode: 0x242 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888029a20cc0
[  343.631217][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.675499][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.733197][ T5616] Bluetooth: hci4: command tx timeout
[  343.851212][ T9625] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1
[  343.851264][ T9625] ref_ctr decrement failed for inode: 0x242 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888029a20cc0
[  343.851332][ T9625] uprobe: syz.7.1040:9625 failed to unregister, leaking uprobe
[  344.160512][ T9560] team0: Port device team_slave_0 added
[  344.169755][ T9609] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  344.180627][ T9560] team0: Port device team_slave_1 added
[  344.296536][ T9609] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  344.341578][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.341607][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.341636][ T9560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.389011][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.389033][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.389066][ T9560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.990786][ T9560] hsr_slave_0: entered promiscuous mode
[  344.998590][ T9560] hsr_slave_1: entered promiscuous mode
[  345.006221][ T9560] debugfs: 'hsr0' already exists in 'hsr'
[  345.006263][ T9560] Cannot create hsr debugfs directory
[  345.366139][   T30] kauditd_printk_skb: 179 callbacks suppressed
[  345.366176][   T30] audit: type=1800 audit(1789460943.470:795): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1043" name="bus" dev="loop1" ino=17 res=0 errno=0
[  345.375371][ T9642] syz.1.1043: attempt to access beyond end of device
[  345.375371][ T9642] loop1: rw=2049, sector=77824, nr_sectors = 1320 limit=40427
[  345.814511][ T5616] Bluetooth: hci4: command tx timeout
[  346.873267][ T5611] syz-executor: attempt to access beyond end of device
[  346.873267][ T5611] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  346.925965][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  346.926016][ T5611] Tainted: [L]=SOFTLOCKUP
[  346.926026][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  346.926043][ T5611] Call Trace:
[  346.926054][ T5611]  <TASK>
[  346.926067][ T5611]  dump_stack_lvl+0xe8/0x150
[  346.926119][ T5611]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  346.926164][ T5611]  f2fs_write_end_bio+0x1211/0x16e0
[  346.926194][ T5611]  ? blkg_put+0x22/0x240
[  346.926247][ T5611]  __submit_merged_bio+0x258/0x6a0
[  346.926282][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.926313][ T5611]  ? rcu_is_watching+0x16/0xb0
[  346.926353][ T5611]  __submit_merged_write_cond+0x3c9/0x4e0
[  346.926396][ T5611]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  346.926445][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.926486][ T5611]  f2fs_write_data_pages+0x2a27/0x36f0
[  346.926571][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  346.926655][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.926692][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.926717][ T5611]  ? __bfs+0x153/0x290
[  346.926740][ T5611]  ? __pfx_hlock_conflict+0x10/0x10
[  346.926777][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.926813][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.926838][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.926861][ T5611]  ? __lock_acquire+0x1511/0x2de0
[  346.926908][ T5611]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  346.926945][ T5611]  do_writepages+0x338/0x560
[  346.926969][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.926995][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.927022][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.927045][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  346.927081][ T5611]  filemap_fdatawrite+0x1e9/0x2f0
[  346.927111][ T5611]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  346.927167][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.927193][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.927221][ T5611]  ? do_raw_spin_unlock+0xf5/0x200
[  346.927255][ T5611]  f2fs_sync_dirty_inodes+0x30e/0x830
[  346.927293][ T5611]  f2fs_write_checkpoint+0xa3d/0x2710
[  346.927313][ T5611]  ? __lock_acquire+0x747/0x2de0
[  346.927363][ T5611]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  346.927384][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.927457][ T5611]  kill_f2fs_super+0x2dd/0x700
[  346.927488][ T5611]  ? __pfx_kill_f2fs_super+0x10/0x10
[  346.927544][ T5611]  ? call_rcu+0x64d/0x8b0
[  346.927572][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.927596][ T5611]  ? lockdep_hardirqs_on+0x7b/0x110
[  346.927621][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.927658][ T5611]  deactivate_locked_super+0xbc/0x110
[  346.927697][ T5611]  cleanup_mnt+0x3d3/0x460
[  346.927722][ T5611]  task_work_run+0x1d9/0x270
[  346.927751][ T5611]  ? __pfx_task_work_run+0x10/0x10
[  346.927783][ T5611]  exit_to_user_mode_loop+0x204/0x770
[  346.927806][ T5611]  ? srso_alias_return_thunk+0x5/0xfbef5
[  346.927829][ T5611]  ? rcu_is_watching+0x16/0xb0
[  346.927859][ T5611]  do_syscall_64+0x328/0x520
[  346.927884][ T5611]  ? trace_irq_disable+0x3b/0x140
[  346.927907][ T5611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.927934][ T5611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.927958][ T5611] RIP: 0033:0x7f4a5a99f397
[  346.927980][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  346.927998][ T5611] RSP: 002b:00007ffc3ac1c3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  346.928023][ T5611] RAX: 0000000000000000 RBX: 00007f4a5aa3448b RCX: 00007f4a5a99f397
[  346.928038][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3ac1c460
[  346.928053][ T5611] RBP: 00007ffc3ac1c460 R08: 00007ffc3ac1d460 R09: 00000000ffffffff
[  346.928069][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3ac1d4f0
[  346.928082][ T5611] R13: 00007f4a5aa3448b R14: 00000000000543e3 R15: 00007ffc3ac1d530
[  346.928116][ T5611]  </TASK>
[  346.928254][ T5611] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  347.441777][ T5847] loop1: lost filesystem error report for type 5 error -108
[  347.893050][ T5616] Bluetooth: hci4: command tx timeout
[  347.959643][ T9560] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  348.069505][ T9560] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  348.070420][ T9560] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  348.126330][ T9560] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  348.127733][ T9560] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  348.178096][ T9560] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  348.252227][ T9560] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  348.273768][ T9560] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  348.722672][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.792643][ T9560] 8021q: adding VLAN 0 to HW filter on device team0
[  348.880505][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.880662][ T7479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.896137][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.896309][ T7479] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.786077][ T9719] fuse: Bad value for 'fd'
[  350.170364][ T9726] isp1760 pcspkr: error -ENXIO: IRQ index 0 not found
[  351.800981][ T9753] fuse: fd is not a fuse device
[  352.838646][ T9761] overlayfs: failed to clone upperpath
[  352.865852][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.012976][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1085'.
[  353.281693][ T9770] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  355.606515][ T9560] veth0_vlan: entered promiscuous mode
[  355.640990][ T9560] veth1_vlan: entered promiscuous mode
[  355.749184][ T9560] veth0_macvtap: entered promiscuous mode
[  355.787264][ T9560] veth1_macvtap: entered promiscuous mode
[  355.859655][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.913308][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  356.023887][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.023954][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.023994][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.024034][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.967008][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.967040][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.416842][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.416874][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.878518][   T30] audit: type=1326 audit(1789460956.950:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.878626][   T30] audit: type=1326 audit(1789460956.960:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.878680][   T30] audit: type=1326 audit(1789460956.960:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.878746][   T30] audit: type=1326 audit(1789460956.960:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.878801][   T30] audit: type=1326 audit(1789460956.960:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.878855][   T30] audit: type=1326 audit(1789460956.960:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.878924][   T30] audit: type=1326 audit(1789460956.960:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.878981][   T30] audit: type=1326 audit(1789460956.960:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.880102][   T30] audit: type=1326 audit(1789460956.980:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.880601][   T30] audit: type=1326 audit(1789460956.980:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.8.1109" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54439e159 code=0x7ffc0000
[  358.909215][ T9839] binder_alloc: 9838: pid 9838 spamming oneway? 1 buffers allocated for a total size of 4096
[  359.626579][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1027'.
[  360.355810][ T9878] loop8: detected capacity change from 0 to 512
[  360.402015][ T9878] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  360.402122][ T9878] System zones: 0-2, 18-18, 34-34
[  360.405598][ T9878] EXT4-fs (loop8): 1 orphan inode deleted
[  360.413629][ T9878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.417442][ T9878] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.696585][ T8277] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.772662][ T9890] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  362.479064][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1129'.
[  362.479122][ T9915] netlink: 'syz.7.1129': attribute type 7 has an invalid length.
[  362.479137][ T9915] netlink: 'syz.7.1129': attribute type 8 has an invalid length.
[  362.479152][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1129'.
[  362.530781][ T9915] ip6gretap0: entered promiscuous mode
[  362.565384][ T9915] syz_tun: entered promiscuous mode
[  362.582605][ T9915] gretap0: entered promiscuous mode
[  362.604979][ T9915] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  362.605016][ T9915] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  362.605035][ T9915] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network
[  364.223133][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  364.253200][ T9946] loop1: detected capacity change from 0 to 512
[  364.334297][ T9946] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  364.402254][   T10] usb 9-1: Using ep0 maxpacket: 16
[  364.412678][   T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  364.426699][   T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  364.426744][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  364.429245][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.429280][   T10] usb 9-1: Product: syz
[  364.429297][   T10] usb 9-1: Manufacturer: syz
[  364.429315][   T10] usb 9-1: SerialNumber: syz
[  364.433251][   T10] usb 9-1: config 0 descriptor??
[  364.452619][   T10] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  364.452671][   T10] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  364.908971][ T9957] syz.7.1144 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  365.107397][   T10] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  365.124342][   T10] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[  365.380331][   T10] em28xx 9-1:0.0: AC97 chip type couldn't be determined
[  365.380360][   T10] em28xx 9-1:0.0: No AC97 audio processor
[  365.428464][   T10] usb 9-1: USB disconnect, device number 3
[  365.442401][   T10] em28xx 9-1:0.0: Disconnecting em28xx
[  366.561558][ T9968] loop9: detected capacity change from 0 to 512
[  366.697904][ T9968] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  366.697940][ T9968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  366.698241][ T9968] EXT4-fs (loop9): orphan cleanup on readonly fs
[  366.966212][ T9968] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #13: comm syz.9.1146: iget: bad i_size value: 12154761577498
[  366.966410][ T9968] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  366.988805][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  366.988837][    C1] EXT4-fs (loop9): initial error at time 1789460965: ext4_orphan_get:1403: inode 13
[  366.988874][    C1] EXT4-fs (loop9): last error at time 1789460965: ext4_orphan_get:1403: inode 13
[  367.293053][ T9982] cgroup: Unknown subsys name 'cpuset'
[  367.300601][ T9982] loop8: detected capacity change from 0 to 512
[  367.327616][ T9982] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: comm syz.8.1153: inode #2147418112: comm syz.8.1153: iget: illegal inode #
[  367.327665][ T9982] loop8: lost filesystem error report for type 5 error -117
[  367.327957][ T9982] EXT4-fs (loop8): no journal found
[  367.327980][ T9982] EXT4-fs (loop8): can't get journal size
[  367.332960][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  367.332988][    C1] EXT4-fs (loop8): initial error at time 1789460965: ext4_get_journal_inode:5927
[  367.333016][    C1] EXT4-fs (loop8): last error at time 1789460965: ext4_get_journal_inode:5927
[  367.359447][ T9972] macvlan2: entered promiscuous mode
[  367.359471][ T9972] vlan2: entered promiscuous mode
[  367.359486][ T9972] gretap0: entered promiscuous mode
[  367.403016][ T9968] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1146: couldn't read orphan inode 13 (err -117)
[  367.403059][ T9968] loop9: lost filesystem error report for type 5 error -117
[  367.429066][ T9968] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  367.429990][ T9982] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  367.450558][ T9982] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  367.502588][ T9982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.691730][ T9986] netlink: 'syz.6.1152': attribute type 11 has an invalid length.
[  368.107890][ T8277] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.571818][ T9968] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.1146: dx entry: limit 65535 != root limit 120
[  368.571862][ T9968] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1146: Corrupt directory, running e2fsck is recommended
[  368.588599][   T10] em28xx: Freeing device
[  370.248710][ T9560] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.811435][ T9993] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  370.811475][ T9993] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  371.929251][T10040] binder: 10039:10040 ioctl c0306201 200000000180 returned -14
[  372.467711][T10038] tipc: Started in network mode
[  372.467763][T10038] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  372.467953][T10038] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  373.589413][ T7744] tipc: Node number set to 43690
[  373.693267][  T187] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  373.844271][  T187] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  373.845636][  T187] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  373.848895][  T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.848931][  T187] usb 2-1: Product: syz
[  373.848952][  T187] usb 2-1: Manufacturer: syz
[  373.848969][  T187] usb 2-1: SerialNumber: syz
[  373.885766][  T187] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  374.101567][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1181'.
[  374.230617][T10082] loop8: detected capacity change from 0 to 4096
[  374.247989][T10082] EXT4-fs: Ignoring removed nobh option
[  374.251534][T10082] EXT4-fs (loop8): Test dummy encryption mode enabled
[  374.290066][T10082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.317523][T10088] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  374.317523][T10088] The task syz.7.1183 (10088) triggered the difference, watch for misbehavior.
[  374.415107][   T30] kauditd_printk_skb: 50 callbacks suppressed
[  374.415136][   T30] audit: type=1800 audit(1789460972.520:856): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1184" name=8006 dev="sda1" ino=2061 res=0 errno=0
[  374.417903][T10089] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  374.839567][T10082] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  374.872916][  T187] gspca_mr97310a: reg write [19] error -110
[  374.873041][  T187] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110
[  375.421279][T10109] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1187'.
[  375.421305][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1187'.
[  375.421321][T10109] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1187'.
[  377.040732][T10121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.321977][ T7744] usb 2-1: USB disconnect, device number 10
[  377.532565][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1193'.
[  377.538254][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1193'.
[  378.087333][ T8277] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.389861][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  378.389931][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  378.493247][ T7744] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  378.534394][T10145] loop9: detected capacity change from 0 to 128
[  378.655112][ T7744] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice=7f.4e
[  378.656572][ T7744] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  378.656604][ T7744] usb 2-1: config 0 has no interface number 0
[  378.656640][ T7744] usb 2-1: config 0 interface 128 has no altsetting 0
[  378.659517][ T7744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.659547][ T7744] usb 2-1: Product: syz
[  378.659566][ T7744] usb 2-1: Manufacturer: syz
[  378.659583][ T7744] usb 2-1: SerialNumber: syz
[  378.756655][ T7744] usb 2-1: config 0 descriptor??
[  380.056278][T10140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1195'.
[  380.473883][ T5616] Bluetooth: hci1: command 0x0406 tx timeout
[  381.009931][ T7744] uvcvideo 2-1:0.128: Found Unit with invalid ID 0
[  381.010937][ T7744] uvcvideo 2-1:0.128: probe with driver uvcvideo failed with error -22
[  381.018099][ T7744] usb 2-1: USB disconnect, device number 11
[  381.388642][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1204'.
[  381.452553][T10168] loop6: detected capacity change from 0 to 4096
[  381.485331][T10168] EXT4-fs: Ignoring removed nobh option
[  381.485424][T10168] EXT4-fs: Ignoring removed bh option
[  381.559642][T10166] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1201'.
[  381.575008][T10176] random: crng reseeded on system resumption
[  381.631377][T10168] EXT4-fs (loop6): Test dummy encryption mode enabled
[  381.818481][T10168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.828371][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1209'.
[  382.971354][   T30] audit: type=1800 audit(1789460981.070:857): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1203" name="file1" dev="loop6" ino=19 res=0 errno=0
[  383.216882][T10200] futex_wake_op: syz.8.1210 tries to shift op by 144; fix this program
[  383.816477][ T6798] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.131419][T10239] loop8: detected capacity change from 0 to 512
[  387.469537][T10239] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.1224: bg 0: block 4: invalid block bitmap
[  387.469589][T10239] loop8: lost filesystem error report for type 5 error -117
[  387.472827][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  387.472857][    C0] EXT4-fs (loop8): initial error at time 1789460985: ext4_validate_block_bitmap:436
[  387.472887][    C0] EXT4-fs (loop8): last error at time 1789460985: ext4_validate_block_bitmap:436
[  388.291855][T10239] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  388.291893][T10239] loop8: lost filesystem error report for type 5 error -117
[  388.302063][T10239] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1224: invalid indirect mapped block 1 (level 1)
[  388.302118][T10239] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  388.331156][T10239] EXT4-fs (loop8): 1 truncate cleaned up
[  388.424746][T10239] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.746443][T10255] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  389.908708][ T8277] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.022484][T10261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  390.022516][T10261] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  390.025851][T10261] vhci_hcd vhci_hcd.0: Device attached
[  390.068193][T10264] vhci_hcd: connection closed
[  390.106808][ T6133] vhci_hcd vhci_hcd.1: stop threads
[  390.107306][ T6133] vhci_hcd vhci_hcd.1: release socket
[  390.107336][ T6133] vhci_hcd vhci_hcd.1: disconnect device
[  390.345817][T10269] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  390.530998][T10269] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  390.683608][T10276] futex_wake_op: syz.3.1233 tries to shift op by 144; fix this program
[  391.658244][T10278] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  391.658314][T10269] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  391.753873][T10269] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  391.778298][T10269] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  391.822427][T10272] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  391.869612][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'.
[  391.869642][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'.
[  391.916445][T10269] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  393.518556][T10272] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  393.545202][T10278] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  397.087693][ T7744] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  397.135435][T10312] overlayfs: failed to resolve './cgroup': -2
[  397.266064][ T7744] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  397.270080][ T7744] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  397.270133][ T7744] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.291227][ T7744] usb 10-1: config 0 descriptor??
[  397.308212][ T7744] pwc: Askey VC010 type 2 USB webcam detected.
[  397.735215][ T7744] pwc: recv_control_msg error -32 req 02 val 2b00
[  397.744926][ T7744] pwc: recv_control_msg error -32 req 02 val 2700
[  397.764812][ T7744] pwc: recv_control_msg error -32 req 02 val 2c00
[  397.770022][ T7744] pwc: recv_control_msg error -32 req 04 val 1000
[  397.770799][ T7744] pwc: recv_control_msg error -32 req 04 val 1300
[  397.775908][ T7744] pwc: recv_control_msg error -32 req 04 val 1400
[  397.782083][ T7744] pwc: recv_control_msg error -32 req 02 val 2000
[  397.784392][ T7744] pwc: recv_control_msg error -32 req 02 val 2100
[  397.787382][ T7744] pwc: recv_control_msg error -32 req 04 val 1500
[  398.007967][ T7744] pwc: recv_control_msg error -71 req 02 val 2400
[  398.013086][ T7744] pwc: recv_control_msg error -71 req 02 val 2600
[  398.016993][ T7744] pwc: recv_control_msg error -71 req 02 val 2900
[  398.017744][ T7744] pwc: recv_control_msg error -71 req 02 val 2800
[  398.022656][ T7744] pwc: recv_control_msg error -71 req 04 val 1100
[  398.025227][ T7744] pwc: recv_control_msg error -71 req 04 val 1200
[  398.203393][ T7744] pwc: Registered as video103.
[  398.238871][ T7744] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input15
[  398.341027][ T7744] usb 10-1: USB disconnect, device number 2
[  399.855740][T10336] loop6: detected capacity change from 0 to 1024
[  400.615735][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'.
[  400.615762][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'.
[  401.314468][   T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  401.716221][   T10] usb 7-1: Using ep0 maxpacket: 16
[  402.385856][   T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  402.409276][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.409305][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  402.436581][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.436612][   T10] usb 7-1: Product: syz
[  402.436629][   T10] usb 7-1: Manufacturer: syz
[  402.436646][   T10] usb 7-1: SerialNumber: syz
[  402.598847][   T10] usb 7-1: 0:2 : does not exist
[  402.756520][   T10] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  403.093586][T10377] input: syz1 as /devices/virtual/input/input16
[  403.473621][   T10] usb 7-1: USB disconnect, device number 5
[  403.739938][T10388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.816518][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.015145][ T7744] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  404.163573][ T7744] usb 10-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00
[  404.167786][ T7744] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.167811][ T7744] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  404.169099][ T7744] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  404.169125][ T7744] usb 10-1: SerialNumber: syz
[  404.599616][ T7744] usb 10-1: 0:2 : does not exist
[  404.722385][ T7744] usb 10-1: USB disconnect, device number 3
[  404.822167][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  406.769076][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.013709][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.030705][T10435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.877037][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.881001][T10441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.941584][T10435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.957471][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.012130][T10421] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.014651][T10421] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.370951][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.421578][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.783981][T10421] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  408.784006][T10421] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[  408.843870][T10421] bond1: left promiscuous mode
[  408.843893][T10421] ip6gre1: left promiscuous mode
[  410.354573][ T7470] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.354634][ T7470] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.354678][ T7470] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.354721][ T7470] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.829877][T10478] loop9: detected capacity change from 0 to 164
[  412.892925][ T5847] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  413.157512][ T5847] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  413.930618][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.930653][ T5847] usb 9-1: Product: syz
[  413.930670][ T5847] usb 9-1: Manufacturer: syz
[  413.930688][ T5847] usb 9-1: SerialNumber: syz
[  413.942634][ T5847] usb 9-1: config 0 descriptor??
[  414.140867][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1301'.
[  414.206830][ T5847] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  415.381992][T10506] binder_alloc: 10504: binder_alloc_buf size 1024 failed, no address space
[  415.382061][T10506] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0)
[  415.704031][T10513] overlayfs: failed to resolve './file0': -2
[  415.897587][T10516] tipc: Started in network mode
[  415.897606][T10516] tipc: Node identity 4, cluster identity 4711
[  415.897617][T10516] tipc: Node number set to 4
[  416.381089][ T5847] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  416.405185][ T5847] usb 9-1: USB disconnect, device number 4
[  418.419192][T10554] netlink: 'syz.1.1320': attribute type 1 has an invalid length.
[  418.631457][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1320'.
[  418.786006][T10559] bond1: (slave geneve2): making interface the new active one
[  418.790200][T10559] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  418.822346][T10562] 8021q: adding VLAN 0 to HW filter on device bond1
[  418.823182][ T7477] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  418.823233][ T7477] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  418.823278][ T7477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  418.823321][ T7477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  419.241476][T10567] netlink: 'syz.1.1324': attribute type 10 has an invalid length.
[  419.241504][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'.
[  419.976242][T10576] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1326'.
[  420.629331][T10581] loop9: detected capacity change from 0 to 512
[  420.680214][T10581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  420.723434][T10581] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.1330: iget: bad i_size value: 38620345925642
[  420.723469][T10581] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  420.730997][T10581] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1330: couldn't read orphan inode 15 (err -117)
[  420.731026][T10581] loop9: lost filesystem error report for type 5 error -117
[  420.881456][T10585] futex_wake_op: syz.6.1331 tries to shift op by 144; fix this program
[  420.882236][T10581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.993287][T10583] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  421.005360][T10591] fuse: fd is not a fuse device
[  421.260551][ T9560] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.434857][T10593] syzkaller0: entered promiscuous mode
[  421.434889][T10593] syzkaller0: entered allmulticast mode
[  421.495207][T10603] vxlan0: entered allmulticast mode
[  421.498477][ T7480] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  421.631193][ T6134] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  421.631256][ T6134] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  421.631299][ T6134] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  421.847535][T10608] loop9: detected capacity change from 0 to 32768
[  421.896444][T10608] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  422.052303][T10608] XFS (loop9): Ending clean mount
[  422.058939][T10608] XFS (loop9): Quotacheck needed: Please wait.
[  422.141644][   T30] audit: type=1804 audit(1789461020.240:858): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1339" name="bus" dev="ramfs" ino=31025 res=1 errno=0
[  422.163599][   T30] audit: type=1804 audit(1789461020.260:859): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1339" name="bus" dev="ramfs" ino=31025 res=1 errno=0
[  422.337879][T10608] XFS (loop9): Quotacheck: Done.
[  423.728538][ T9560] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  423.862499][ T7464] bridge_slave_1: left allmulticast mode
[  423.862530][ T7464] bridge_slave_1: left promiscuous mode
[  423.881504][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.947202][ T7464] bridge_slave_0: left allmulticast mode
[  423.947225][ T7464] bridge_slave_0: left promiscuous mode
[  423.947440][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.436238][T10651] loop6: detected capacity change from 0 to 4096
[  425.607971][T10661] xt_TPROXY: Can be used only with -p tcp or -p udp
[  425.929890][T10668] net_ratelimit: 10 callbacks suppressed
[  425.929913][T10668] ip_tables: iptables: counters copy to user failed while replacing table
[  426.024798][ T7464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.050695][ T7464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.071793][ T7464] bond0 (unregistering): Released all slaves
[  426.661207][T10676] vxlan0: entered allmulticast mode
[  426.674177][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9
[  426.907769][ T1015] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  426.907827][ T1015] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  426.907867][ T1015] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  426.907906][ T1015] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  427.487048][ T7464] hsr_slave_0: left promiscuous mode
[  427.491094][ T7464] hsr_slave_1: left promiscuous mode
[  427.502441][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.600750][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_1
[  429.402266][T10714] No such timeout policy "s"
[  429.402287][T10714] netlink: Failed to associated timeout policy 's'
[  429.426513][ T7464] team0 (unregistering): Port device team_slave_1 removed
[  429.444961][T10715] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1359'.
[  429.583409][ T7464] team0 (unregistering): Port device team_slave_0 removed
[  430.579757][T10733] event trace: Could not enable event p
[  430.899957][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10
[  431.384454][ T7475] IPVS: starting estimator thread 0...
[  431.485004][T10752] IPVS: using max 25 ests per chain, 60000 per kthread
[  431.812292][T10759] bond0: left allmulticast mode
[  431.812320][T10759] bond_slave_0: left allmulticast mode
[  431.812340][T10759] bond_slave_1: left allmulticast mode
[  431.812360][T10759] bond0: left promiscuous mode
[  431.812374][T10759] bond_slave_0: left promiscuous mode
[  431.812604][T10759] bond_slave_1: left promiscuous mode
[  431.814130][T10759] bridge0: port 3(bond0) entered disabled state
[  431.999339][T10759] bridge_slave_0: left allmulticast mode
[  431.999364][T10759] bridge_slave_0: left promiscuous mode
[  431.999557][T10759] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.121079][T10759] bridge_slave_1: left allmulticast mode
[  432.121102][T10759] bridge_slave_1: left promiscuous mode
[  432.121302][T10759] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.236623][T10759] bond1: (slave veth0_to_bond): Releasing backup interface
[  432.236644][T10759] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  432.371962][T10759] bond0: (slave bond_slave_0): Releasing backup interface
[  432.492345][T10759] bond0: (slave bond_slave_1): Releasing backup interface
[  432.565144][T10759] team0: Port device team_slave_0 removed
[  432.603274][T10759] team0: Port device team_slave_1 removed
[  432.603671][T10759] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.629127][T10759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  432.702270][T10764] team0: Port device xfrm0 added
[  432.709529][T10766] tipc: Enabled bearer <eth:team0>, priority 0
[  434.459299][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11
[  435.049012][T10814] loop9: detected capacity change from 0 to 16
[  435.067058][T10814] erofs (device loop9): mounted with root inode @ nid 36.
[  435.389566][T10818] netlink: 'syz.7.1387': attribute type 3 has an invalid length.
[  435.389593][T10818] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.1387'.
[  436.787526][T10832] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1391'.
[  437.477225][T10839] fuse: fd is not a fuse device
[  437.946752][T10849] fuse: fd is not a fuse device
[  438.079886][ T5616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  438.100886][ T5616] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  438.114987][ T5616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  438.124805][ T5616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  438.125485][ T5616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  438.236246][T10854] syzkaller0: entered promiscuous mode
[  438.236274][T10854] syzkaller0: entered allmulticast mode
[  438.579346][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1400'.
[  439.480123][T10886] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1403'.
[  439.511537][T10883] vlan2: entered allmulticast mode
[  439.511566][T10883] bond0: entered allmulticast mode
[  439.511583][T10883] bond_slave_0: entered allmulticast mode
[  439.511603][T10883] bond_slave_1: entered allmulticast mode
[  439.737534][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  439.737600][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  439.978441][ T7470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  440.143517][ T5616] Bluetooth: hci7: command tx timeout
[  440.376700][T10886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  440.410195][T10886] bond_slave_0: left allmulticast mode
[  440.426818][T10886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  440.431764][T10886] bond_slave_1: left allmulticast mode
[  440.432216][T10886] bond0 (unregistering): Released all slaves
[  440.718116][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12
[  440.961382][ T7470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  441.582682][T10921] loop8: detected capacity change from 0 to 16
[  441.603658][T10921] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  441.638979][ T7470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  441.820875][ T9560] tipc: Resetting bearer <eth:syz_tun>
[  441.945368][ T9560] tipc: Disabling bearer <eth:syz_tun>
[  442.213328][ T5616] Bluetooth: hci7: command tx timeout
[  443.891221][ T7470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  444.000149][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1418'.
[  444.297653][ T5616] Bluetooth: hci7: command tx timeout
[  445.539603][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  445.552851][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  445.555769][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  445.557738][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  445.580254][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  446.023625][ T7470] bridge_slave_1: left allmulticast mode
[  446.023683][ T7470] bridge_slave_1: left promiscuous mode
[  446.023869][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.067440][ T7470] bridge_slave_0: left allmulticast mode
[  446.067472][ T7470] bridge_slave_0: left promiscuous mode
[  446.070622][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.384211][ T5616] Bluetooth: hci7: command tx timeout
[  446.925314][ T7470] vlan2 (unregistering): left promiscuous mode
[  446.925343][ T7470] gretap0 (unregistering): left promiscuous mode
[  447.191512][ T7470] bond1 (unregistering): (slave geneve2): Releasing active interface
[  447.581758][ T7470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.608496][ T7470] bond0 (unregistering): (slave 
c
@0Ùÿÿ): Releasing backup interface
[  447.635377][ T7470] bond0 (unregistering): Released all slaves
[  447.652945][ T5616] Bluetooth: hci2: command tx timeout
[  447.677862][ T7475] smbdirect: ib_dev[syz1] removed
[  447.709417][ T7470] bond1 (unregistering): Released all slaves
[  447.847899][T10996] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0
[  447.870915][ T7744] infiniband syz1: ib_query_port failed (-19)
[  447.981790][T10999] fuse: fd is not a fuse device
[  448.105189][ T7470] tipc: Disabling bearer <udp:syz2>
[  448.105412][ T7470] tipc: Left network mode
[  448.258908][T10857] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.259091][T10857] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.259220][T10857] bridge_slave_0: entered allmulticast mode
[  448.261144][T10857] bridge_slave_0: entered promiscuous mode
[  448.264254][T10857] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.264429][T10857] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.264555][T10857] bridge_slave_1: entered allmulticast mode
[  448.266658][T10857] bridge_slave_1: entered promiscuous mode
[  448.300277][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.303977][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.427466][T10857] team0: Port device team_slave_0 added
[  448.589988][T10857] team0: Port device team_slave_1 added
[  448.687749][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13
[  448.897219][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.897240][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.897271][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.924598][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1428'.
[  448.969335][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.969359][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.969389][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.104735][T11025] vlan2: entered allmulticast mode
[  449.104757][T11025] bridge1: entered allmulticast mode
[  449.137458][ T7470] hsr_slave_0: left promiscuous mode
[  449.139520][ T7470] hsr_slave_1: left promiscuous mode
[  449.140861][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.142112][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.146254][ T7470] batman_adv: batadv0: Interface deactivated: dummy0
[  449.146274][ T7470] batman_adv: batadv0: Removing interface: dummy0
[  449.380386][ T7470] team0 (unregistering): Port device team_slave_1 removed
[  449.585231][T11028] bridge1: port 1(erspan0) entered blocking state
[  449.588094][T11028] bridge1: port 1(erspan0) entered disabled state
[  449.588229][T11028] erspan0: entered allmulticast mode
[  449.591322][T11028] erspan0: entered promiscuous mode
[  449.597075][T11028] bridge1: port 1(erspan0) entered blocking state
[  449.597196][T11028] bridge1: port 1(erspan0) entered forwarding state
[  449.735735][ T5616] Bluetooth: hci2: command tx timeout
[  449.839888][T10857] hsr_slave_0: entered promiscuous mode
[  449.843113][T10857] hsr_slave_1: entered promiscuous mode
[  449.845979][T10857] debugfs: 'hsr0' already exists in 'hsr'
[  449.846001][T10857] Cannot create hsr debugfs directory
[  450.783751][T11040] lo speed is unknown, defaulting to 1000
[  450.783835][T11040] lo speed is unknown, defaulting to 1000
[  450.784703][T11040] lo speed is unknown, defaulting to 1000
[  450.785662][T11040] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  450.785692][T11040] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  450.785730][T11040] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  450.797290][T11040] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  450.961517][T11040] lo speed is unknown, defaulting to 1000
[  451.058611][T11040] lo speed is unknown, defaulting to 1000
[  451.114766][T11040] lo speed is unknown, defaulting to 1000
[  451.117229][T11040] lo speed is unknown, defaulting to 1000
[  451.119182][T11040] lo speed is unknown, defaulting to 1000
[  451.121243][T11040] lo speed is unknown, defaulting to 1000
[  451.123239][T11040] lo speed is unknown, defaulting to 1000
[  451.125314][T11040] lo speed is unknown, defaulting to 1000
[  451.815554][ T5616] Bluetooth: hci2: command tx timeout
[  452.301289][ T7470] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.301331][ T7470] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.546799][ T7470] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.546842][ T7470] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.729559][ T7470] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.729602][ T7470] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.976110][ T7470] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.976151][ T7470] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.039697][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14
[  453.174165][T11089] trusted_key: encrypted_key: insufficient parameters specified
[  453.462910][ T7744] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  453.613541][ T7744] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  453.614882][ T7744] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  453.617311][ T7744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.617336][ T7744] usb 7-1: Product: syz
[  453.617352][ T7744] usb 7-1: Manufacturer: syz
[  453.617370][ T7744] usb 7-1: SerialNumber: syz
[  453.858062][T10961] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.858197][T10961] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.858342][T10961] bridge_slave_0: entered allmulticast mode
[  453.871008][T10961] bridge_slave_0: entered promiscuous mode
[  453.885643][T10961] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.889279][T10961] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.889449][T10961] bridge_slave_1: entered allmulticast mode
[  453.893768][ T5616] Bluetooth: hci2: command tx timeout
[  453.900288][T10961] bridge_slave_1: entered promiscuous mode
[  453.984252][T11099] netlink: 'syz.8.1445': attribute type 1 has an invalid length.
[  453.987156][ T7744] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  454.002234][ T7744] usb 7-1: unit 2 not found!
[  454.002255][ T7744] usb 7-1: unit 80 not found!
[  454.181215][T11099] 8021q: adding VLAN 0 to HW filter on device bond1
[  454.183997][T11105] netlink: 'syz.8.1445': attribute type 10 has an invalid length.
[  454.184016][T11105] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1445'.
[  454.184075][T11105] dummy0: entered promiscuous mode
[  454.210062][ T7744] usb 7-1: USB disconnect, device number 6
[  454.289608][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  454.315817][T11100] bond1: (slave gretap1): making interface the new active one
[  454.316739][T11100] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  454.340580][T10961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.365887][T11101] dummy0: left promiscuous mode
[  454.394173][T11101] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  454.728669][T10961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.833389][ T7470] bridge_slave_1: left allmulticast mode
[  454.833417][ T7470] bridge_slave_1: left promiscuous mode
[  454.833675][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.840967][ T7470] bridge_slave_0: left allmulticast mode
[  454.840989][ T7470] bridge_slave_0: left promiscuous mode
[  454.841192][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.144767][ T7470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  455.147262][ T7470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.148606][ T7470] bond0 (unregistering): Released all slaves
[  455.235076][T11128] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  455.238790][ T7470] tipc: Left network mode
[  455.307202][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15
[  455.324058][T10961] team0: Port device team_slave_0 added
[  455.337768][T10961] team0: Port device team_slave_1 added
[  455.537030][T10961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.537049][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.537077][T10961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.545411][T10961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.545427][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.545457][T10961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.070334][T10961] hsr_slave_0: entered promiscuous mode
[  456.071770][T10961] hsr_slave_1: entered promiscuous mode
[  456.072633][T10961] debugfs: 'hsr0' already exists in 'hsr'
[  456.072653][T10961] Cannot create hsr debugfs directory
[  456.110704][ T7470] hsr_slave_0: left promiscuous mode
[  456.123221][ T7470] hsr_slave_1: left promiscuous mode
[  456.124248][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.124270][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.125733][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.125753][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.166613][ T7470] veth1_macvtap: left promiscuous mode
[  456.173781][ T7470] veth0_macvtap: left promiscuous mode
[  456.173898][ T7470] veth1_vlan: left promiscuous mode
[  456.173970][ T7470] veth0_vlan: left promiscuous mode
[  458.198119][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  458.220812][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  458.233828][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  458.237618][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  458.238291][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  458.457895][ T7470] team0 (unregistering): Port device team_slave_1 removed
[  458.486356][ T7470] team0 (unregistering): Port device team_slave_0 removed
[  458.783937][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16
[  459.081698][T10857] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  459.150948][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  459.159406][T10857] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  459.206463][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  459.260231][T10857] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  459.306308][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  459.374978][T10857] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  459.408896][T10857] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  460.294198][ T5625] Bluetooth: hci4: command tx timeout
[  460.457690][T11228] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1465'.
[  460.457718][T11228] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1465'.
[  460.457736][T11228] netlink: 'syz.7.1465': attribute type 5 has an invalid length.
[  460.457753][T11228] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1465'.
[  460.617678][T11235] netlink: 'syz.8.1467': attribute type 1 has an invalid length.
[  460.676259][T11235] 8021q: adding VLAN 0 to HW filter on device bond2
[  461.064842][T11237] bond2: (slave gretap2): making interface the new active one
[  461.071162][T11237] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  461.339009][T11186] lo speed is unknown, defaulting to 1000
[  461.745244][T10857] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.200687][T10857] 8021q: adding VLAN 0 to HW filter on device team0
[  462.224386][ T7477] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.224498][ T7477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.373670][ T5625] Bluetooth: hci4: command tx timeout
[  462.522056][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.522169][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.445487][T11284] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  463.525957][T10961] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  463.544268][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  464.295198][T10961] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  464.325592][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  464.326479][T10961] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  464.362041][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  464.453150][ T5625] Bluetooth: hci4: command tx timeout
[  464.520068][T10961] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  464.550035][T10961] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  464.662170][T11186] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.665443][T11186] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.674930][T11186] bridge_slave_0: entered allmulticast mode
[  464.690077][T11186] bridge_slave_0: entered promiscuous mode
[  464.721826][T11186] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.730526][T11186] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.731110][T11186] bridge_slave_1: entered allmulticast mode
[  464.747601][T11186] bridge_slave_1: entered promiscuous mode
[  464.775171][T11316] siw: device registration error -23
[  465.912616][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.188022][ T5625] Bluetooth: hci4: command tx timeout
[  467.786177][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.901970][T11186] team0: Port device team_slave_0 added
[  467.926986][ T7478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.927006][ T7478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.951292][T11186] team0: Port device team_slave_1 added
[  468.024219][ T7478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.024241][ T7478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.371537][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.371558][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.371589][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.732313][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.732461][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.732639][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.267732][T10961] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.298635][T11186] hsr_slave_0: entered promiscuous mode
[  469.299725][T11186] hsr_slave_1: entered promiscuous mode
[  469.306902][T11186] debugfs: 'hsr0' already exists in 'hsr'
[  469.306923][T11186] Cannot create hsr debugfs directory
[  469.316086][T11357] tipc: Started in network mode
[  469.316105][T11357] tipc: Node identity 4, cluster identity 4711
[  469.316119][T11357] tipc: Node number set to 4
[  470.457896][   T31] INFO: task syz.5.951:9316 blocked for more than 143 seconds.
[  470.457927][   T31]       Tainted: G             L      syzkaller #0
[  470.457945][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  470.457956][   T31] task:syz.5.951       state:D stack:27816 pid:9316  tgid:9312  ppid:5613   task_flags:0x400040 flags:0x00080002
[  470.458034][   T31] Call Trace:
[  470.458044][   T31]  <TASK>
[  470.458060][   T31]  __schedule+0x17db/0x58f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  470.458126][   T31]  ? __pfx___schedule+0x10/0x10
[  470.458165][   T31]  ? schedule+0x90/0x2b0
[  470.458195][   T31]  schedule+0x164/0x2b0
[  470.458224][   T31]  schedule_preempt_disabled+0x13/0x30
[  470.458250][   T31]  __mutex_lock+0x7c1/0x1550
[  470.458280][   T31]  ? kasan_save_track+0x3e/0x80
[  470.458314][   T31]  ? __mutex_lock+0x5d4/0x1550
[  470.543980][   T31]  ? write_ports+0xb5/0xd10
[  470.544025][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  470.544081][   T31]  write_ports+0xb5/0xd10
[  470.556314][   T31]  ? __pfx_write_ports+0x10/0x10
[  470.556354][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.556397][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.556439][   T31]  ? _copy_from_user+0x94/0xb0
[  470.556473][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.556503][   T31]  ? simple_transaction_get+0x12d/0x160
[  470.556544][   T31]  nfsctl_transaction_write+0x10f/0x160
[  470.556581][   T31]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  470.556617][   T31]  vfs_write+0x296/0xba0
[  470.556667][   T31]  ? __pfx_vfs_write+0x10/0x10
[  470.556708][   T31]  ? __fget_files+0x2a/0x420
[  470.556749][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.556779][   T31]  ? __fget_files+0x3a2/0x4
** replaying previous printk message **
[  470.556779][   T31]  ? __fget_files+0x3a2/0x420
[  470.556813][   T31]  ? __fget_files+0x2a/0x420
[  470.556853][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.556893][   T31]  ksys_write+0x150/0x270
[  470.556935][   T31]  ? __pfx_ksys_write+0x10/0x10
[  470.556988][   T31]  do_syscall_64+0x166/0x520
[  470.557017][   T31]  ? trace_irq_disable+0x3b/0x140
[  470.557043][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.557076][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.557102][   T31] RIP: 0033:0x7f301479e159
[  470.557125][   T31] RSP: 002b:00007f30156bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  470.557182][   T31] RAX: ffffffffffffffda RBX: 00007f3014a26090 RCX: 00007f301479e159
[  470.557202][   T31] RDX: 0000000000000009 RSI: 0000200000000240 RDI: 0000000000000004
[  470.557218][   T31] RBP: 00007f301483503b R08: 0000000000000000 R09: 0000000000000000
[  470.557235][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  470.557251][   T31] R13: 00007f3014a26128 R14: 00007f3014a26090 R15: 00007ffd40540998
[  470.557292][   T31]  </TASK>
[  470.561846][   T31] 
[  470.561846][   T31] Showing all locks held in the system:
[  470.561860][   T31] locks held by pr/ttyS0/16: 2, last CPU#1:
[  470.561878][   T31]  #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  470.561955][   T31]  #1: ffffffff9ad3a098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  470.562033][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[  470.562051][   T31]  #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  470.562121][   T31] locks held by kworker/u8:7/1010: 3, on CPU#0:
[  470.562138][   T31]  #0: ffff8880324a1140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  470.562226][   T31]  #1: ffffc9000512fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  470.571519][   T31]  #2: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0
[  470.571617][   T31] locks held by udevd/4975: 2, last CPU#0:
[  470.571634][   T31]  #0: ffff88801f2b3270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  470.571706][   T31]  #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: aa_file_perm+0x18b/0x15f0
[  470.571827][   T31] locks held by getty/5363: 2, on CPU#0:
[  470.571845][   T31]  #0: ffff8880335db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  470.571924][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  470.571992][   T31] locks held by syz-executor/5596: 1, last CPU#0:
[  470.572010][   T31]  #0: ffff888033a169b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  470.572088][   T31] locks held by kworker/1:7/5847: 4, on CPU#1:
[  470.572105][   T31]  #0: ffff88801b68ed40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  470.572175][   T31]  #1: ffffc90004ca7c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  470.572248][   T31]  #2: ffffffff8ed5d7a8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0
[  470.572312][   T31]  #3: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  470.572389][   T31] locks held by kworker/u8:31/7480: 3, on CPU#1:
[  470.572406][   T31]  #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  470.572477][   T31]  #1: ffffc90003597c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  470.572547][   T31]  #2: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  470.572622][   T31] locks held by kworker/1:8/7740: 3, on CPU#1:
[  470.572640][   T31]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  470.572709][   T31]  #1: ffffc90002ea7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  470.580314][   T31]  #2: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770
[  470.583736][   T31] locks held by syz.5.951/9315: 3, on CPU#0:
[  470.583756][   T31]  #0: ffff8880315817b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  470.583830][   T31]  #1: ffff88807f63a460 (sb_writers#33){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  470.583915][   T31]  #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610
[  470.583986][   T31] locks held by syz.5.951/9316: 3, on CPU#1:
[  470.584003][   T31]  #0: ffff888032fdd970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  470.584075][   T31]  #1: ffff88807f63a460 (sb_writers#33){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  470.584154][   T31]  #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  470.586623][   T31] locks held by syz-executor/10857: 1, on CPU#0:
[  470.586643][   T31]  #0: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  470.586713][   T31] locks held by syz.3.1412/10930: 2, on CPU#1:
[  470.586730][   T31]  #0: ffff8880498d80e8 (&type->s_umount_key#104){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0
[  470.586808][   T31]  #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  470.586873][   T31] locks held by syz-executor/10961: 1, on CPU#1:
[  470.586897][   T31]  #0: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  470.586965][   T31] locks held by syz-executor/11186: 3, last CPU#0:
[  470.586982][   T31]  #0: ffffffff8f9ba4a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  470.587059][   T31]  #1: ffffffff90253240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  470.587125][   T31]  #2: ffff88801c2cc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x3c1/0x6f0
[  470.587190][   T31] locks held by syz.8.1484/11339: 2, last CPU#0:
[  470.587208][   T31]  #0: ffff8880299ac460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520
[  470.587281][   T31]  #1: ffff888031c344e0 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120
[  470.587360][   T31] locks held by syz.7.1489/11375: 1, last CPU#1:
[  470.587378][   T31]  #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260
[  470.587453][   T31] locks held by rm/11377: 3, last CPU#0:
[  470.587470][   T31]  #0: ffff88807a02b6b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  470.599157][   T31]  #1: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  470.599236][   T31]  #2: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  470.599304][   T31] locks held by syz.8.1490/11379: 1, last CPU#0:
[  470.599322][   T31]  #0: ffff88805e463448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  470.599399][   T31] 
[  470.599405][   T31] =============================================
[  470.599405][   T31] 
[  470.599416][   T31] NMI backtrace for cpu 0
[  470.599434][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  470.599465][   T31] Tainted: [L]=SOFTLOCKUP
[  470.599475][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  470.599489][   T31] Call Trace:
[  470.599499][   T31]  <TASK>
[  470.599509][   T31]  dump_stack_lvl+0xe8/0x150
[  470.599546][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  470.599585][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  470.599628][   T31]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  470.599670][   T31]  sys_info+0x135/0x170
[  470.599703][   T31]  watchdog+0xfd7/0x1030
[  470.599737][   T31]  ? watchdog+0x1c7/0x1030
[  470.599771][   T31]  kthread+0x38b/0x480
[  470.599797][   T31]  ? __pfx_watchdog+0x10/0x10
[  470.599820][   T31]  ? __pfx_kthread+0x10/0x10
[  470.599848][   T31]  ret_from_fork+0x514/0xb70
[  470.599876][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  470.599908][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.599937][   T31]  ? __switch_to+0xc89/0x1420
[  470.599977][   T31]  ? __pfx_kthread+0x10/0x10
[  470.600004][   T31]  ret_from_fork_asm+0x1a/0x30
[  470.600061][   T31]  </TASK>
[  470.600097][   T31] Sending NMI from CPU 0 to CPUs 1:
[  470.600124][    C1] NMI backtrace for cpu 1
[  470.600140][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  470.600170][    C1] Tainted: [L]=SOFTLOCKUP
[  470.600178][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  470.600191][    C1] RIP: 0010:wait_for_lsr+0x189/0x2f0
[  470.600217][    C1] Code: 8b 44 24 10 80 3c 28 00 74 09 49 8d 7e 50 e8 4e 25 c5 fc 4d 8b 5e 50 4c 89 f7 be 05 00 00 00 2e e8 ac 9b 75 06 48 8b 4c 24 08 <0f> b6 0c 29 84 c9 75 56 0f b7 c0 41 09 c5 49 8d 86 ea 02 00 00 0f
[  470.600236][    C1] RSP: 0018:ffffc900001578e0 EFLAGS: 00000002
[  470.600255][    C1] RAX: 0000000000000000 RBX: ffffffff9ad3a368 RCX: 1ffffffff35a746d
[  470.600272][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  470.600286][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  470.600301][    C1] R10: dffffc0000000000 R11: ffffffff8572f1c0 R12: 1ffffffff35a746d
[  470.600319][    C1] R13: 0000000000000000 R14: ffffffff9ad3a080 R15: 00000000000007eb
[  470.600337][    C1] FS:  0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000
[  470.600356][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  470.600372][    C1] CR2: 00005555823bca38 CR3: 000000004b525000 CR4: 0000000000350ef0
[  470.600395][    C1] Call Trace:
[  470.600403][    C1]  <TASK>
[  470.600417][    C1]  __serial8250_console_fifo_write+0x346/0x3e0
[  470.600457][    C1]  serial8250_console_write+0xaa1/0x1200
[  470.600491][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  470.600516][    C1]  ? __schedule+0x17f1/0x58f0
[  470.600539][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.600572][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.600604][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  470.600643][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  470.600674][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.600702][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  470.600738][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.600765][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  470.600806][    C1]  nbcon_kthread_func+0x679/0x880
[  470.600836][    C1]  ? nbcon_kthread_func+0x163/0x880
[  470.600860][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  470.600885][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.600917][    C1]  ? __kthread_parkme+0x71/0x1f0
[  470.600952][    C1]  ? __kthread_parkme+0x199/0x1f0
[  470.600991][    C1]  kthread+0x38b/0x480
[  470.601014][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  470.601036][    C1]  ? __pfx_kthread+0x10/0x10
[  470.601060][    C1]  ret_from_fork+0x514/0xb70
[  470.601084][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  470.601105][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  470.601132][    C1]  ? __switch_to+0xc89/0x1420
[  470.601167][    C1]  ? __pfx_kthread+0x10/0x10
[  470.601190][    C1]  ret_from_fork_asm+0x1a/0x30
[  470.601239][    C1]  </TASK>
[  470.630406][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  471.674431][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  471.685099][   T31] Tainted: [L]=SOFTLOCKUP
[  471.689403][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  471.699442][   T31] Call Trace:
[  471.702707][   T31]  <TASK>
[  471.705626][   T31]  vpanic+0x56d/0xa60
[  471.709615][   T31]  ? __pfx___schedule+0x10/0x10
[  471.714460][   T31]  ? __pfx_vpanic+0x10/0x10
[  471.718959][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  471.724617][   T31]  panic+0xc5/0xd0
[  471.728342][   T31]  ? __pfx_panic+0x10/0x10
[  471.732760][   T31]  ? preempt_schedule_common+0x7f/0xd0
[  471.738217][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  471.743586][   T31]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  471.749755][   T31]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  471.755911][   T31]  watchdog+0x1030/0x1030
[  471.760242][   T31]  ? watchdog+0x1c7/0x1030
[  471.764656][   T31]  kthread+0x38b/0x480
[  471.768716][   T31]  ? __pfx_watchdog+0x10/0x10
[  471.773378][   T31]  ? __pfx_kthread+0x10/0x10
[  471.777971][   T31]  ret_from_fork+0x514/0xb70
[  471.782551][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  471.787655][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  471.793280][   T31]  ? __switch_to+0xc89/0x1420
[  471.797962][   T31]  ? __pfx_kthread+0x10/0x10
[  471.802542][   T31]  ret_from_fork_asm+0x1a/0x30
[  471.807322][   T31]  </TASK>
[  471.810569][   T31] Kernel Offset: disabled
[  471.814877][   T31] Rebooting in 86400 seconds..