last executing test programs:

3m23.213854626s ago: executing program 4 (id=694):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000180)="d1", 0x1}], 0x1}}], 0x2, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1}, 0x8)

3m23.013653639s ago: executing program 4 (id=696):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r0, 0xffffffffffffffff, 0x2)
getdents64(r0, 0x0, 0x0)

3m21.854211914s ago: executing program 4 (id=706):
r0 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f0000000100)='`', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/net\x00')

3m20.720854793s ago: executing program 4 (id=712):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x28)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

3m19.926428721s ago: executing program 4 (id=716):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
set_mempolicy(0x4005, 0x0, 0x8)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})

3m18.41956667s ago: executing program 4 (id=724):
r0 = socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

3m17.94902962s ago: executing program 32 (id=724):
r0 = socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2m16.944332172s ago: executing program 0 (id=1101):
syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x0, &(0x7f0000000c80), 0x1, 0xbf6, &(0x7f0000000cc0)="$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")
mkdir(0x0, 0x1ff)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='7', 0x1)
getdents(r0, 0x0, 0x1517f)

2m16.078643703s ago: executing program 0 (id=1105):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=<r5=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
r6 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x5, 0x36f}]}, 0x10)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x80007, 0x4101, 0x4000000000000b, 0x1, 0x7, 0x400000400, 0x80000000000a, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x761c9023, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe})
keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="0fc7284625c87dc07148b8b9000000000000000f23d00f21f835100000070f23f848b8bcc585fc2fd3c5080f23d00f21f835000000080f23f8660fc7b374000000450fc7720ec48189c6168bc744240060000000c744240200380000ff2c2466baf80cb808122188ef66bafc0ced66ba610066ed", 0x74}], 0x1, 0xb, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)=@random={'os2.', '\x00'}, &(0x7f00000004c0)='\x00', 0x1, 0x2)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c", 0x3, 0x4000800, 0x0, 0x0)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x14e1, 0x2, 0x3, 0x1}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x440d, 0x0, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x0, 0xfffffffe, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x1000, 0x1, 0x35e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x2, 0x0, 0x1f3, 0x0, r0}}], 0x4, &(0x7f0000000540)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x626, 0x0, 0x0}}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="5479730000000009010020c7789337386b9c06f8c836794a05c7cb5f9ca886c70aee3f0298c2f35cd6d454582f310bb92e6005feb0b4332b3e18ee443401e50b2bf73a48e203001c7652acb9241a5d4efe9f93aa6e9b6dd094597b60b5c538c4590592f840789279aa6ca5d4c390e48131d5798a074161ec61b1d02ef4dd7237973eb8ee00ae29828e1f0b22114ca1"], 0x8)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

2m14.694529393s ago: executing program 0 (id=1112):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
lseek(r0, 0xa3d2, 0x1)

2m14.403628954s ago: executing program 0 (id=1114):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
unshare(0x600)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0])
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x1)
fstat(r1, 0x0)

2m14.173442072s ago: executing program 0 (id=1126):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m13.694514812s ago: executing program 0 (id=1121):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
getsockopt$inet_opts(0xffffffffffffffff, 0x84, 0x75, 0xfffffffffffffffe, &(0x7f0000000040)=0x40)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xb}, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8)

2m13.433743607s ago: executing program 33 (id=1121):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
getsockopt$inet_opts(0xffffffffffffffff, 0x84, 0x75, 0xfffffffffffffffe, &(0x7f0000000040)=0x40)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xb}, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8)

36.879017744s ago: executing program 6 (id=1674):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01872dbd7000fcdbdf250100000004000180100002800c00018008000100"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4800)

35.80500366s ago: executing program 6 (id=1677):
openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
mkdir(0x0, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001740)=@get={0x1, &(0x7f0000000740)=""/4096, 0x7})

34.640822533s ago: executing program 6 (id=1679):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/43, 0x0, 0x25000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b40))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

34.302470894s ago: executing program 6 (id=1681):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x8)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r2, 0x8, 0x0, @void}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000240)={0x4, 0x9, 0x5, 0xffff8000, 0x8, 0x0, 0x60a})
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x10b100, 0x0)
ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0})
ioctl(r0, 0x8b18, &(0x7f0000000040))

34.208841564s ago: executing program 6 (id=1682):
syz_usb_connect(0x3, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff62"], 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x10)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{0x0, 0x1c}], 0x1}, 0x4000080)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32.300550854s ago: executing program 6 (id=1692):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x103, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
close(r2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r3)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

16.693246643s ago: executing program 34 (id=1692):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x103, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
close(r2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r3)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

9.812269575s ago: executing program 3 (id=1760):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004)
ioctl$TIOCPKT(r0, 0x5420, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)

7.362621498s ago: executing program 1 (id=1765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x2, 0x0)
get_robust_list(r3, &(0x7f0000000300)=0x0, &(0x7f0000000440))
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000000)={'comedi_test\x00', [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe]})

7.356579059s ago: executing program 3 (id=1766):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0x8, 0x1, 0x2, 0x3, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x54815}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

6.058504281s ago: executing program 3 (id=1770):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42, 0x20}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005)

4.946433034s ago: executing program 1 (id=1771):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
madvise(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x10)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200"/101], 0xc4}}, 0x2c000010)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf252001000000000000000000000000000100000000000000000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b'], 0xb8}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0)

4.183461664s ago: executing program 5 (id=1773):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}})
shutdown(r0, 0x1)

4.182099504s ago: executing program 3 (id=1782):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
sendmsg$nl_route(r2, 0x0, 0x24044808)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x5dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x280ca014)

4.166420907s ago: executing program 2 (id=1774):
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4000440)
stat(0x0, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800)

4.062524529s ago: executing program 1 (id=1775):
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x7, 0x1, &(0x7f0000000040)='9', 0xe, 0x4, 0x8, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'})

4.033412785s ago: executing program 2 (id=1776):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', 0x0, 0x0, 0x0, 0x1)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040)

3.922265589s ago: executing program 3 (id=1777):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff)
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb)
read(r0, &(0x7f0000000100), 0xb)
mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x0, 0x1a0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x8, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0xd, 0x24, 0x35, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x4fc8, 0x5, 0x4, 0x100, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x5, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7ffb, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x7, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x40b, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x2, 0xb, 0x1, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0xa, 0x3e7, 0xb, 0x5, 0x20002, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0xffffffff, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x6, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x3, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x9, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x808, 0x6, 0x226, 0x5, 0x5, 0x0, 0x1ff, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffffff80, 0xb1e, 0xd5, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x808480, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x3, 0x237, &(0x7f0000000d00)="$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")
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000000000000060000000000000001000000010028d5332fc92f5f1800000761fed4fa5467bfa7b30fb90ca989000000000000000100000000000000810000000000000000000000000000000000000000000000000500000000000000000000000000000f00000000000000ff7f0000000000000200"/144])
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000))

3.160845868s ago: executing program 5 (id=1778):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x80000)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001a40)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x4, 0x1000, &(0x7f0000001ac0)=""/4096}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})

3.066789448s ago: executing program 1 (id=1779):
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
r2 = dup(r1)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25"], 0x18}}, 0x0)
close(r3)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86)

3.050005542s ago: executing program 2 (id=1780):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.896808233s ago: executing program 5 (id=1781):
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400), 0x35)
socket$nl_route(0x10, 0x3, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)

2.838143756s ago: executing program 3 (id=1783):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009"], 0x0)
socket(0x21, 0xa, 0x800)
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x8, 0x3, 0x3, 0x15, "0062ba7d82000000000000000000f7fffeff00"})
r3 = syz_open_pts(r1, 0x8182)
ioctl$TIOCCONS(r3, 0x541d)

2.469799943s ago: executing program 2 (id=1784):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7)

1.524392551s ago: executing program 1 (id=1785):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r7, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

1.491127758s ago: executing program 2 (id=1786):
openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x40800)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000"], 0x610)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.067747147s ago: executing program 5 (id=1787):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x28a40, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==")
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x200)

372.891462ms ago: executing program 1 (id=1788):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x6a03, "0f9d0000002000200000b82100"})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
listen(0xffffffffffffffff, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
socket$netlink(0x10, 0x3, 0x13)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)

372.356162ms ago: executing program 2 (id=1789):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
gettid()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$sg(0x0, 0xf9ba, 0x14b082)
syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

193.902209ms ago: executing program 7 (id=1738):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='rd_pages=64', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00')

42.365551ms ago: executing program 5 (id=1790):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r3, &(0x7f00000091c0)=""/16384, 0x4000)

0s ago: executing program 5 (id=1791):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x1, 0x6)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)

kernel console output (not intermixed with test programs):

902.478:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.1.910" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  246.553879][ T7904] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  246.567264][ T7904] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.576064][ T7904] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.584831][ T7904] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  246.843830][ T7904] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  246.853444][ T7904] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  246.862405][ T7904] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  246.871305][ T7904] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.151995][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'.
[  247.189548][ T7904] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  247.198621][ T7904] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  247.207401][ T7904] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  247.216136][ T7904] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.266480][ T7904] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.275698][ T7904] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.284764][ T7904] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.294077][ T7904] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.901606][ T5346] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  248.068562][   T26] audit: type=1326 audit(1790290160.008:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.920" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  248.094305][ T5346] usb 3-1: Using ep0 maxpacket: 16
[  248.104166][ T5346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  248.133726][ T5346] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  248.151654][ T5346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.166965][ T5346] usb 3-1: Product: syz
[  248.174668][ T5346] usb 3-1: Manufacturer: syz
[  248.182684][ T5346] usb 3-1: SerialNumber: syz
[  248.206952][ T5346] usb 3-1: config 0 descriptor??
[  248.224899][ T5346] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  248.240985][ T5346] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  248.826904][ T5346] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  249.391545][ T8005] loop5: detected capacity change from 0 to 7
[  249.399126][ T4402]  loop5:
[  249.409160][ T4402] loop5: partition table partially beyond EOD, truncated
[  249.423156][ T8005]  loop5:
[  249.426169][ T8005] loop5: partition table partially beyond EOD, truncated
[  249.459343][ T5346] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  249.489930][ T5346] em28xx 3-1:0.0: board has no eeprom
[  249.594339][ T5346] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  249.608742][ T5346] em28xx 3-1:0.0: dvb set to bulk mode.
[  249.653630][ T5346] usb 3-1: USB disconnect, device number 19
[  249.686352][ T5346] em28xx 3-1:0.0: Disconnecting em28xx
[  249.707798][ T4879] em28xx 3-1:0.0: Binding DVB extension
[  249.819151][ T8019] fuse: Bad value for 'fd'
[  249.893577][ T4879] em28xx 3-1:0.0: Registering input extension
[  249.905824][ T8022] loop3: detected capacity change from 0 to 4096
[  249.915547][ T5346] em28xx 3-1:0.0: Closing input extension
[  249.993426][ T5346] em28xx 3-1:0.0: Freeing device
[  249.994549][ T8025] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.282987][ T8027] loop2: detected capacity change from 0 to 2048
[  250.330927][ T8027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.353636][   T26] audit: type=1326 audit(1790290418.292:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8032 comm="syz.0.931" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9098b9e159 code=0x0
[  250.378289][ T8027] UDF-fs: error (device loop2): udf_read_inode: (ino 1408) failed !bh
[  250.451687][ T8027] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=96, partition=0
[  250.475298][   T26] audit: type=1326 audit(1790290418.352:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.1.940" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  250.580043][   T26] audit: type=1326 audit(1790290418.482:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.5.933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  251.582670][ T8079] loop2: detected capacity change from 0 to 512
[  251.643997][ T8079] EXT4-fs: Ignoring removed nomblk_io_submit option
[  251.662348][ T8081] loop3: detected capacity change from 0 to 512
[  251.776121][ T8081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  251.851197][ T8081] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.877016][ T8079] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  251.891280][ T8079] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.121207][ T5346] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  252.182066][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  252.314785][ T5346] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  252.326616][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  252.345148][ T5346] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  252.385666][ T5346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.428252][ T8089] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  252.443452][ T5346] opticon 1-1:1.0: opticon converter detected
[  252.482770][ T5346] usb 1-1: opticon converter now attached to ttyUSB0
[  252.611027][ T4281] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  252.811745][ T4281] usb 4-1: Using ep0 maxpacket: 8
[  252.825880][ T4281] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  252.860856][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.889289][ T4281] usb 4-1: Product: syz
[  252.917033][ T4281] usb 4-1: Manufacturer: syz
[  252.934850][ T4281] usb 4-1: SerialNumber: syz
[  252.948267][ T8114] binder: 8113:8114 ioctl c0306201 200000000180 returned -14
[  252.977415][ T4281] usb 4-1: config 0 descriptor??
[  252.989583][   T26] audit: type=1326 audit(1790290932.921:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8117 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  252.998369][ T4281] gspca_main: se401-2.14.0 probing 047d:5003
[  253.118246][ T5346] usb 1-1: USB disconnect, device number 12
[  253.136229][ T5346] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  253.180314][ T5346] opticon 1-1:1.0: device disconnected
[  253.209348][ T8126] loop2: detected capacity change from 0 to 128
[  253.265759][ T8126] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  253.403297][ T4281] gspca_se401: ExtraFeatures: 255
[  253.610485][ T4281] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30
[  253.899851][   T26] audit: type=1326 audit(1790291189.837:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.0.951" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9098b9e159 code=0x0
[  253.905610][ T4281] usb 4-1: USB disconnect, device number 14
[  254.161279][   T26] audit: type=1326 audit(1790291190.107:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz.5.952" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  254.841132][ T8164] input: syz1 as /devices/virtual/input/input31
[  255.653225][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.660207][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.668956][   T26] audit: type=1326 audit(1790291447.604:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  255.926363][   T26] audit: type=1326 audit(1790291703.863:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8185 comm="syz.5.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  256.048095][ T8168] loop3: detected capacity change from 0 to 40427
[  256.102222][ T8168] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[  256.170253][   T26] audit: type=1804 audit(1790291960.101:157): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.962" name="/newroot/196/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=27392 res=1 errno=0
[  256.628022][ T8207] loop3: detected capacity change from 0 to 4096
[  256.661960][ T8207] EXT4-fs: Ignoring removed bh option
[  256.689166][ T8207] EXT4-fs (loop3): Test dummy encryption mode enabled
[  256.767212][ T8207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  257.079852][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  257.285307][   T26] audit: type=1326 audit(1790291961.221:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.3.969" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  257.586947][ T5185] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  257.792428][ T5185] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  257.814931][ T5185] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  257.858627][ T5185] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  257.884543][ T5185] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  257.916072][ T5185] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  257.959777][ T5185] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  257.988962][ T5185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.016317][ T5185] usb 1-1: Product: syz
[  258.031716][ T5185] usb 1-1: Manufacturer: syz
[  258.046791][ T5185] usb 1-1: SerialNumber: syz
[  258.067923][ T8221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  258.088743][ T5185] cdc_mbim 1-1:1.0: skipping garbage
[  258.116763][   T26] audit: type=1326 audit(1790291962.051:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.2.975" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  258.303379][ T8221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  258.634196][   T26] audit: type=1326 audit(1790291962.572:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.3.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  258.936696][ T8221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  259.152275][ T5185] cdc_mbim 1-1:1.0: bind() failure
[  259.170892][ T5185] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  259.195379][ T5185] cdc_ncm 1-1:1.1: bind() failure
[  259.395424][ T5185] usb 1-1: USB disconnect, device number 13
[  259.796394][   T26] audit: type=1326 audit(1790292219.738:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  260.227055][   T26] audit: type=1326 audit(1790292476.167:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.3.988" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  260.375232][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.990'.
[  260.977725][   T26] audit: type=1326 audit(1790292732.910:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8312 comm="syz.1.994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  261.780198][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'.
[  261.831833][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'.
[  262.079757][   T26] audit: type=1326 audit(1790292734.010:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.2.1006" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  262.124995][   T26] audit: type=1326 audit(1790292734.030:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.3.1008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  262.821514][ T8381] loop0: detected capacity change from 0 to 1024
[  263.002258][   T26] audit: type=1800 audit(1790293246.946:166): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1015" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=9 res=0 errno=0
[  263.761400][ T8400] fuse: Bad value for 'fd'
[  264.020243][ T4798] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  264.185324][   T26] audit: type=1326 audit(1790293248.126:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.5.1029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  264.215701][   T26] audit: type=1326 audit(1790293248.156:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.1028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  264.243942][ T4798] usb 1-1: Using ep0 maxpacket: 8
[  264.255236][ T4798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.270628][ T4798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.281363][ T4798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  264.295551][ T4798] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  264.305076][ T4798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.318871][ T4798] usb 1-1: config 0 descriptor??
[  264.598831][ T8434] loop3: detected capacity change from 0 to 256
[  264.632808][   T26] audit: type=1800 audit(1790293760.572:169): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1032" name="file1" dev="loop3" ino=1048647 res=0 errno=0
[  264.666149][ T8434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  264.678940][   T26] audit: type=1800 audit(1790293760.602:170): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1032" name="file1" dev="loop3" ino=1048647 res=0 errno=0
[  264.705010][ T8434] FAT-fs (loop3): Filesystem has been set read-only
[  264.712298][ T8434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  264.723885][ T8434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  264.739066][ T8434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  264.749762][ T8434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  265.340452][ T4798] sony 0003:054C:042F.0014: can't set operational mode: step 2
[  265.348580][ T4798] sony 0003:054C:042F.0014: Failed to set controller into operational mode
[  265.374226][ T4798] sony 0003:054C:042F.0014: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.0-1/input0
[  265.406923][ T4798] sony 0003:054C:042F.0014: failed to claim input
[  265.423987][ T4798] usb 1-1: USB disconnect, device number 14
[  265.563944][ T8456] fido_id[8456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  266.032818][ T8474] loop0: detected capacity change from 0 to 2048
[  266.135886][ T8474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  266.196063][ T8474] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1045: bg 0: block 240: padding at end of block bitmap is not set
[  266.263849][ T8474] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  266.276404][ T8474] EXT4-fs (loop0): This should not happen!! Data will be lost
[  266.276404][ T8474] 
[  266.286842][ T8474] EXT4-fs (loop0): Total free blocks count 0
[  266.293589][ T8474] EXT4-fs (loop0): Free/Dirty block details
[  266.299699][ T8474] EXT4-fs (loop0): free_blocks=0
[  266.305807][ T8474] EXT4-fs (loop0): dirty_blocks=16
[  266.311379][ T8474] EXT4-fs (loop0): Block reservation details
[  266.317469][ T8474] EXT4-fs (loop0): i_reserved_data_blocks=1
[  266.407538][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  266.535060][   T26] audit: type=1326 audit(1790293762.472:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.0.1050" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9098b9e159 code=0x0
[  266.572012][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'.
[  266.863236][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888028ae1c00: rx timeout, send abort
[  267.372779][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888028ae1c00: abort rx timeout. Force session deactivation
[  268.332331][   T26] audit: type=1326 audit(1790294020.270:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  270.109154][ T8576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1082'.
[  270.520585][   T26] audit: type=1326 audit(1790294278.444:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.1.1092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  270.756435][   T26] audit: type=1326 audit(1790294534.695:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.0.1093" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9098b9e159 code=0x0
[  271.879100][ T8644] loop0: detected capacity change from 0 to 4096
[  271.955886][ T8644] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  272.025275][ T8644] FAULT_INJECTION: forcing a failure.
[  272.025275][ T8644] name failslab, interval 1, probability 0, space 0, times 0
[  272.054385][ T8644] CPU: 0 PID: 8644 Comm: syz.0.1101 Not tainted syzkaller #0
[  272.061831][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  272.071895][ T8644] Call Trace:
[  272.075173][ T8644]  <TASK>
[  272.078101][ T8644]  dump_stack_lvl+0x188/0x24e
[  272.082783][ T8644]  ? show_regs_print_info+0x12/0x12
[  272.087977][ T8644]  ? load_image+0x410/0x410
[  272.092480][ T8644]  ? __might_sleep+0xd0/0xd0
[  272.097068][ T8644]  ? __lock_acquire+0x7c40/0x7c40
[  272.102096][ T8644]  ? __ext4fs_dirhash+0x74c/0x10a0
[  272.107212][ T8644]  should_fail_ex+0x390/0x4c0
[  272.111894][ T8644]  should_failslab+0x5/0x20
[  272.116389][ T8644]  slab_pre_alloc_hook+0x59/0x300
[  272.121408][ T8644]  ? ext4_htree_store_dirent+0x85/0x640
[  272.126953][ T8644]  __kmem_cache_alloc_node+0x4f/0x270
[  272.132332][ T8644]  ? ext4_htree_store_dirent+0x85/0x640
[  272.137741][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880578fbc00: rx timeout, send abort
[  272.137867][ T8644]  __kmalloc+0xa3/0x240
[  272.150197][ T8644]  ext4_htree_store_dirent+0x85/0x640
[  272.155579][ T8644]  htree_dirblock_to_tree+0x8cc/0xee0
[  272.160953][ T8644]  ? lockdep_hardirqs_on+0x94/0x140
[  272.166185][ T8644]  ? ext4_htree_fill_tree+0x1100/0x1100
[  272.171748][ T8644]  ? kasan_set_track+0x60/0x70
[  272.176514][ T8644]  ? __kasan_kmalloc+0x8e/0xa0
[  272.181279][ T8644]  ext4_htree_fill_tree+0x60f/0x1100
[  272.186598][ T8644]  ? ext4_handle_dirty_dirblock+0x650/0x650
[  272.192529][ T8644]  ext4_readdir+0x2d8d/0x3bf0
[  272.197222][ T8644]  ? verify_lock_unused+0x140/0x140
[  272.202520][ T8644]  ? __lock_acquire+0x7c40/0x7c40
[  272.207559][ T8644]  ? ext4_dir_llseek+0x4b0/0x4b0
[  272.212499][ T8644]  ? aa_path_link+0x8a0/0x8a0
[  272.217174][ T8644]  ? read_lock_is_recursive+0x10/0x10
[  272.222545][ T8644]  ? file_end_write+0x156/0x250
[  272.227401][ T8644]  ? mutex_lock_nested+0x10/0x10
[  272.232354][ T8644]  ? end_current_label_crit_section+0x14b/0x170
[  272.238597][ T8644]  ? iterate_dir+0x10d/0x550
[  272.243185][ T8644]  ? down_read_killable+0x1cc/0x340
[  272.248375][ T8644]  ? fsnotify_perm+0x248/0x550
[  272.253136][ T8644]  iterate_dir+0x213/0x550
[  272.257551][ T8644]  ? ext4_dir_llseek+0x4b0/0x4b0
[  272.262491][ T8644]  __se_sys_getdents+0xf2/0x260
[  272.267351][ T8644]  ? __x64_sys_getdents+0x80/0x80
[  272.272380][ T8644]  ? fillonedir+0x480/0x480
[  272.276916][ T8644]  ? lockdep_hardirqs_on+0x94/0x140
[  272.282116][ T8644]  do_syscall_64+0x4c/0xa0
[  272.286525][ T8644]  ? clear_bhb_loop+0x60/0xb0
[  272.291193][ T8644]  ? clear_bhb_loop+0x60/0xb0
[  272.295877][ T8644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.301780][ T8644] RIP: 0033:0x7f9098b9e159
[  272.306192][ T8644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.325879][ T8644] RSP: 002b:00007f9099a16028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  272.334302][ T8644] RAX: ffffffffffffffda RBX: 00007f9098e25fa0 RCX: 00007f9098b9e159
[  272.342276][ T8644] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000004
[  272.350258][ T8644] RBP: 00007f9098c3506b R08: 0000000000000000 R09: 0000000000000000
[  272.358275][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.366236][ T8644] R13: 00007f9098e26038 R14: 00007f9098e25fa0 R15: 00007ffe2cd40f18
[  272.374218][ T8644]  </TASK>
[  272.637769][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880578f9800: rx timeout, send abort
[  272.646137][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880578fbc00: abort rx timeout. Force session deactivation
[  272.845499][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  272.909812][   T26] audit: type=1326 audit(1790294792.852:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.1103" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  273.019577][   T26] audit: type=1326 audit(1790294792.962:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9098b9e159 code=0x0
[  273.146031][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880578f9800: abort rx timeout. Force session deactivation
[  273.796303][   T26] audit: type=1326 audit(1790295305.738:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8672 comm="syz.5.1109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  274.030952][   T26] audit: type=1326 audit(1790295305.978:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.1111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  274.340852][ T8700] loop0: detected capacity change from 0 to 8
[  274.431715][ T4274] SQUASHFS error: Unable to read directory block [631:72]
[  274.442437][ T4274] SQUASHFS error: Unable to read inode 0x0
[  274.453739][ T4274] SQUASHFS error: Unable to read inode 0x0
[  274.894591][   T26] audit: type=1326 audit(1790295818.830:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.5.1119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  275.063830][ T4502] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.201819][ T4502] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.330791][ T4502] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.536768][ T4502] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.835969][   T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.848762][   T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.867776][   T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.878502][   T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.890214][   T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.897606][   T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.933293][   T26] audit: type=1326 audit(1790296075.865:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.1128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  276.290728][ T8747] FAULT_INJECTION: forcing a failure.
[  276.290728][ T8747] name fail_futex, interval 1, probability 0, space 0, times 0
[  276.339212][ T8747] CPU: 0 PID: 8747 Comm: syz.3.1130 Not tainted syzkaller #0
[  276.346649][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  276.356729][ T8747] Call Trace:
[  276.360036][ T8747]  <TASK>
[  276.362989][ T8747]  dump_stack_lvl+0x188/0x24e
[  276.367691][ T8747]  ? do_syscall_64+0x4c/0xa0
[  276.372307][ T8747]  ? show_regs_print_info+0x12/0x12
[  276.377534][ T8747]  ? load_image+0x410/0x410
[  276.382085][ T8747]  ? mark_lock+0x94/0x320
[  276.386453][ T8747]  should_fail_ex+0x390/0x4c0
[  276.391165][ T8747]  get_futex_key+0x1b1/0x1000
[  276.395864][ T8747]  ? memset+0x1e/0x40
[  276.399883][ T8747]  ? futex_setup_timer+0xc0/0xc0
[  276.404845][ T8747]  ? lockdep_init_map_type+0x98/0x8d0
[  276.410233][ T8747]  futex_wake+0x123/0x4f0
[  276.414564][ T8747]  ? __raw_spin_lock_init+0x41/0x100
[  276.419849][ T8747]  ? futex_wake_mark+0x150/0x150
[  276.424791][ T8747]  do_futex+0x2e2/0x320
[  276.428955][ T8747]  ? fd_install+0x5c/0x4e0
[  276.433373][ T8747]  ? __ia32_sys_get_robust_list+0x100/0x100
[  276.439258][ T8747]  ? rcu_read_lock_sched_held+0x86/0x110
[  276.444920][ T8747]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  276.450905][ T8747]  ? put_pid+0xc3/0x120
[  276.455073][ T8747]  __se_sys_futex+0x381/0x410
[  276.459754][ T8747]  ? __x64_sys_futex+0xf0/0xf0
[  276.464520][ T8747]  ? __x64_sys_futex+0x1d/0xf0
[  276.469285][ T8747]  do_syscall_64+0x4c/0xa0
[  276.473694][ T8747]  ? clear_bhb_loop+0x60/0xb0
[  276.478386][ T8747]  ? clear_bhb_loop+0x60/0xb0
[  276.483060][ T8747]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.488980][ T8747] RIP: 0033:0x7f0f2939e159
[  276.493396][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.513004][ T8747] RSP: 002b:00007f0f2a31e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  276.521436][ T8747] RAX: ffffffffffffffda RBX: 00007f0f29625fa8 RCX: 00007f0f2939e159
[  276.529417][ T8747] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f29625fac
[  276.537388][ T8747] RBP: 00007f0f29625fa0 R08: 001098b50e5d3170 R09: 0000000000000000
[  276.545358][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.553352][ T8747] R13: 00007f0f29626038 R14: 00007ffd839f4dc0 R15: 00007ffd839f4ea8
[  276.561338][ T8747]  </TASK>
[  276.704710][   T26] audit: type=1326 audit(1790296332.648:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8754 comm="syz.2.1131" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  276.904023][ T8732] chnl_net:caif_netlink_parms(): no params data found
[  277.405161][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.441025][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.466809][ T8732] device bridge_slave_0 entered promiscuous mode
[  277.545438][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.559059][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.603578][ T8732] device bridge_slave_1 entered promiscuous mode
[  277.743670][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.772380][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.834579][ T8798] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1138'.
[  277.951098][   T26] audit: type=1326 audit(1790296589.898:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.1142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  277.969001][ T4287] Bluetooth: hci1: command 0x0409 tx timeout
[  278.004170][ T8732] team0: Port device team_slave_0 added
[  278.188076][   T26] audit: type=1326 audit(1790296846.127:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.2.1143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  278.260466][ T8732] team0: Port device team_slave_1 added
[  278.458724][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.474458][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.562616][ T8732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.626934][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.645229][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.678119][ T8732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.736969][ T4502] device hsr_slave_0 left promiscuous mode
[  278.760025][ T4502] device hsr_slave_1 left promiscuous mode
[  278.879510][ T4502] device veth1_macvtap left promiscuous mode
[  278.899453][ T4502] device veth0_macvtap left promiscuous mode
[  278.916126][ T4502] device veth1_vlan left promiscuous mode
[  278.929524][ T4502] device veth0_vlan left promiscuous mode
[  279.020912][   T26] audit: type=1326 audit(1790297102.969:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.1.1148" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  280.056291][ T4287] Bluetooth: hci1: command 0x041b tx timeout
[  280.163135][   T26] audit: type=1326 audit(1790297360.105:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  280.898120][ T4502] bond0 (unregistering): Released all slaves
[  281.054525][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1151'.
[  281.207201][ T8732] device hsr_slave_0 entered promiscuous mode
[  281.239059][ T8732] device hsr_slave_1 entered promiscuous mode
[  281.280288][ T8732] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.287930][   T26] audit: type=1326 audit(1790297617.226:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  281.319046][ T8732] Cannot create hsr debugfs directory
[  281.444405][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1160'.
[  281.579210][ T8888] 0: reclassify loop, rule prio 0, protocol 800
[  282.128909][ T4287] Bluetooth: hci1: command 0x040f tx timeout
[  282.167060][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'.
[  282.356393][ T8732] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  282.357462][   T26] audit: type=1326 audit(1790297874.296:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.2.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  282.419519][ T8732] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  282.457473][ T8732] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  282.492390][ T8732] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  282.712541][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.762633][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  282.786697][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  282.817400][ T8732] 8021q: adding VLAN 0 to HW filter on device team0
[  282.869146][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  282.892110][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  282.929764][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.936991][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.249470][ T8732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  283.328455][ T8732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  283.447417][ T8938] loop3: detected capacity change from 0 to 2048
[  283.834749][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  283.843285][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  283.864187][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  283.925135][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.932315][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.940326][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  283.959609][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  283.968483][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  284.017839][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  284.053475][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  284.079857][   T26] audit: type=1326 audit(1790298132.027:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.1175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  284.089548][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  284.174728][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  284.200678][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  284.208751][   T49] Bluetooth: hci1: command 0x0419 tx timeout
[  284.227293][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  284.246858][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  284.255568][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  284.264226][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  284.645900][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  284.661123][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  284.704318][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.940473][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'.
[  285.353585][   T26] audit: type=1326 audit(1790298389.293:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8987 comm="syz.1.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  285.902138][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  285.912159][   T26] audit: type=1326 audit(1790298645.851:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.3.1188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  285.937404][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  285.988778][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  285.997280][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  286.059793][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  286.071930][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  286.094657][ T8732] device veth0_vlan entered promiscuous mode
[  286.271332][ T8732] device veth1_vlan entered promiscuous mode
[  286.435193][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  286.456578][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  286.519463][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  286.566744][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  286.618760][ T8732] device veth0_macvtap entered promiscuous mode
[  286.960353][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  287.026923][ T8732] device veth1_macvtap entered promiscuous mode
[  287.103472][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.124414][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.149063][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.177936][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.229919][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.239073][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  287.315641][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  287.350582][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.371664][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.400952][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.433153][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.454864][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.502921][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  287.552884][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  287.584699][ T8732] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.631032][ T8732] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.643198][ T8732] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.643892][   T26] audit: type=1326 audit(1790298903.584:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.3.1201" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  287.678474][ T8732] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.836686][ T9063] fuse: Bad value for 'fd'
[  287.917262][ T4508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.941623][ T4508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.980026][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  288.015554][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.044223][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.070073][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  288.329617][   T26] audit: type=1326 audit(1790299160.270:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.5.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  288.368975][   T26] audit: type=1326 audit(1790299160.270:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.6.1123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  288.603512][ T9091] bond1: (slave syz_tun): Removing an active aggregator
[  288.612885][ T4497] bond1: Warning: Found an uninitialized port
[  288.650639][ T9091] bond1: (slave syz_tun): Releasing backup interface
[  288.719386][ T9100] loop3: detected capacity change from 0 to 16
[  288.773560][ T9100] erofs: (device loop3): mounted with root inode @ nid 36.
[  288.827219][ T9100] syz.3.1209: attempt to access beyond end of device
[  288.827219][ T9100] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16
[  288.923250][ T9100] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -11 in[50, 4046] out[4096]
[  289.026440][   T26] audit: type=1800 audit(1790299672.964:194): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1209" name="file2" dev="loop3" ino=89 res=0 errno=0
[  289.665148][ T9125] fuse: Bad value for 'fd'
[  289.892629][ T9134] xt_hashlimit: size too large, truncated to 1048576
[  289.972054][ T9132] netlink: 'syz.1.1217': attribute type 9 has an invalid length.
[  290.037356][ T9138] netlink: 'syz.6.1219': attribute type 4 has an invalid length.
[  290.100868][ T9139] netlink: 'syz.6.1219': attribute type 4 has an invalid length.
[  290.322616][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'.
[  290.633174][ T9156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.641847][ T9156] IPv6: NLM_F_CREATE should be set when creating new route
[  291.105018][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.112805][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.211600][   T26] audit: type=1326 audit(1790299675.154:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.1.1223" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  291.749850][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.803994][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.334327][ T9158] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.343946][ T9158] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.353288][ T9158] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.362935][ T9158] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.761223][ T9194] fuse: Bad value for 'fd'
[  292.868868][   T26] audit: type=1326 audit(1790299932.811:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.5.1230" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  293.317970][   T26] audit: type=1326 audit(1790300189.264:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.6.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  293.615553][ T9237] netlink: 'syz.3.1238': attribute type 4 has an invalid length.
[  293.686470][ T9239] netlink: 'syz.3.1238': attribute type 4 has an invalid length.
[  293.956604][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'.
[  294.263528][ T9261] fuse: Bad value for 'fd'
[  294.920343][ T9286] device lo entered promiscuous mode
[  294.925827][ T9286] device tunl0 entered promiscuous mode
[  294.962842][ T9286] device gre0 entered promiscuous mode
[  294.985073][ T9286] device gretap0 entered promiscuous mode
[  295.008064][ T9286] device erspan0 entered promiscuous mode
[  295.025890][ T9286] device ip_vti0 entered promiscuous mode
[  295.058309][ T9286] device ip6_vti0 entered promiscuous mode
[  295.064362][ T9286] device sit0 entered promiscuous mode
[  295.066684][   T26] audit: type=1326 audit(1790300447.007:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.1.1254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  295.099330][ T9286] device ip6tnl0 entered promiscuous mode
[  295.130922][ T9286] device ip6gre0 entered promiscuous mode
[  295.150136][ T9286] device syz_tun entered promiscuous mode
[  295.184176][ T9286] device ip6gretap0 entered promiscuous mode
[  295.214725][ T9286] device bridge0 entered promiscuous mode
[  295.230498][ T9286] device vcan0 entered promiscuous mode
[  295.247210][ T9286] device bond0 entered promiscuous mode
[  295.267371][ T9286] device bond_slave_0 entered promiscuous mode
[  295.288130][ T9286] device bond_slave_1 entered promiscuous mode
[  295.302997][ T9286] device team0 entered promiscuous mode
[  295.323291][ T9286] device team_slave_0 entered promiscuous mode
[  295.344073][ T9286] device team_slave_1 entered promiscuous mode
[  295.357360][ T9286] device dummy0 entered promiscuous mode
[  295.385178][ T9286] device nlmon0 entered promiscuous mode
[  295.401882][ T9286] device caif0 entered promiscuous mode
[  295.424417][ T9286] device batadv0 entered promiscuous mode
[  295.434226][ T9286] device vxcan0 entered promiscuous mode
[  295.447889][ T9286] device vxcan1 entered promiscuous mode
[  295.459910][ T9286] device veth0 entered promiscuous mode
[  295.465964][ T9286] device veth1 entered promiscuous mode
[  295.471915][ T9286] device wg0 entered promiscuous mode
[  295.479810][ T9286] device wg1 entered promiscuous mode
[  295.496878][ T9286] device wg2 entered promiscuous mode
[  295.512573][ T9286] device veth0_to_bridge entered promiscuous mode
[  295.532916][ T9286] device veth1_to_bridge entered promiscuous mode
[  295.547276][ T9286] device veth0_to_bond entered promiscuous mode
[  295.562536][ T9286] device veth1_to_bond entered promiscuous mode
[  295.570591][ T9286] device veth0_to_team entered promiscuous mode
[  295.577291][ T9286] device veth1_to_team entered promiscuous mode
[  295.586309][ T9286] device veth0_to_batadv entered promiscuous mode
[  295.593027][ T9286] device batadv_slave_0 entered promiscuous mode
[  295.599660][ T9286] device veth1_to_batadv entered promiscuous mode
[  295.606276][ T9286] device batadv_slave_1 entered promiscuous mode
[  295.613304][ T9286] device xfrm0 entered promiscuous mode
[  295.619115][ T9286] device veth0_to_hsr entered promiscuous mode
[  295.625677][ T9286] device veth1_to_hsr entered promiscuous mode
[  295.632455][ T9286] device hsr0 entered promiscuous mode
[  295.638448][ T9286] device veth1_virt_wifi entered promiscuous mode
[  295.645021][ T9286] device veth0_virt_wifi entered promiscuous mode
[  295.666645][ T9286] device virt_wifi0 entered promiscuous mode
[  295.675313][ T9286] device vlan0 entered promiscuous mode
[  295.681262][ T9286] device vlan1 entered promiscuous mode
[  295.687065][ T9286] device macvlan0 entered promiscuous mode
[  295.693133][ T9286] device macvlan1 entered promiscuous mode
[  295.700062][ T9286] device ipvlan0 entered promiscuous mode
[  295.706017][ T9286] device ipvlan1 entered promiscuous mode
[  295.712126][ T9286] device macvtap0 entered promiscuous mode
[  295.718421][ T9286] device macsec0 entered promiscuous mode
[  295.724296][ T9286] device geneve0 entered promiscuous mode
[  295.732038][ T9286] device geneve1 entered promiscuous mode
[  295.758044][ T9286] device netdevsim0 entered promiscuous mode
[  295.770925][ T9286] device netdevsim1 entered promiscuous mode
[  295.798267][ T9286] device netdevsim2 entered promiscuous mode
[  295.821534][ T9286] device netdevsim3 entered promiscuous mode
[  295.860027][ T9286] device wlan0 entered promiscuous mode
[  295.866176][ T9286] device wlan1 entered promiscuous mode
[  296.097149][   T26] audit: type=1326 audit(1790300704.035:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.6.1258" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  296.398832][ T9356] fuse: Bad value for 'fd'
[  296.942028][ T9380] netlink: 'syz.5.1273': attribute type 4 has an invalid length.
[  297.165168][ T9394] fuse: Bad value for 'fd'
[  297.368644][ T9399] fuse: Bad value for 'fd'
[  297.794531][ T9373] loop3: detected capacity change from 0 to 40427
[  297.810787][   T26] audit: type=1326 audit(1790300961.755:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9413 comm="syz.1.1283" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  297.856420][ T9373] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  297.921448][ T9373] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  297.970725][   T26] audit: type=1326 audit(1790300961.915:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.6.1286" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  297.999463][ T9373] F2FS-fs (loop3): Found nat_bits in checkpoint
[  298.199051][ T9373] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  298.206177][ T9373] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  298.371456][ T9373] syz.3.1271: attempt to access beyond end of device
[  298.371456][ T9373] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  298.587964][ T9453] syz.3.1271: attempt to access beyond end of device
[  298.587964][ T9453] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  300.170369][ T9479] overlayfs: failed to clone upperpath
[  300.301270][   T26] audit: type=1326 audit(1790301476.243:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.5.1297" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  300.461760][   T26] audit: type=1326 audit(1790301732.406:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.1.1299" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  301.154934][   T26] audit: type=1804 audit(1790301989.098:204): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1302" name="/newroot/17/bus/bus" dev="overlay" ino=126 res=1 errno=0
[  301.618636][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1305'.
[  301.681398][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  301.722704][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  302.308278][   T26] audit: type=1326 audit(1790301990.258:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9558 comm="syz.6.1310" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  302.632875][   T26] audit: type=1326 audit(1790302246.577:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.3.1313" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  302.714027][   T26] audit: type=1326 audit(1790302246.627:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.2.1314" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  303.017987][   T26] audit: type=1326 audit(1790302758.960:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.1.1315" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  303.782987][ T9633] batman_adv: batadv0: Adding interface: dummy0
[  303.807735][ T9633] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.941928][ T9633] batman_adv: batadv0: Interface activated: dummy0
[  303.969775][ T9643] batadv0: mtu less than device minimum
[  303.999354][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.013969][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.026336][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.038791][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.051007][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.063231][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.075424][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.087702][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.099909][ T9643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  304.380751][   T26] audit: type=1326 audit(1790303016.322:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9656 comm="syz.6.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  304.477091][ T9655] loop3: detected capacity change from 0 to 1024
[  304.502167][   T26] audit: type=1326 audit(1790303016.442:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9668 comm="syz.2.1329" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  304.518374][ T9655] hfsplus: unable to parse mount options
[  304.751564][ T9655] loop3: detected capacity change from 0 to 1024
[  304.841010][ T9655] hfsplus: Filesystem is marked locked, mounting read-only.
[  305.381336][   T26] audit: type=1326 audit(1790303529.328:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.6.1334" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  305.674553][   T26] audit: type=1326 audit(1790303785.615:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  306.382590][   T26] audit: type=1326 audit(1790303786.325:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.2.1344" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  306.535824][ T9761] ubi0: attaching mtd0
[  306.579743][ T9761] ubi0: scanning is finished
[  306.601123][ T9761] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  306.662356][ T9772] UBIFS error (pid: 9772): cannot open "ubi0:testvol", error -19
[  306.740404][ T9761] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  307.329183][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1348'.
[  307.524246][   T26] audit: type=1326 audit(1790304043.468:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.5.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  308.663898][ T5186] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  308.740512][ T5186] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  309.121223][   T26] audit: type=1326 audit(1790304301.066:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.1361" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  309.407830][ T4370] net_ratelimit: 3463 callbacks suppressed
[  309.407846][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.892695][ T9825] infiniband syz0: set down
[  309.901793][ T9825] infiniband syz0: added veth0
[  310.001186][ T9846] loop3: detected capacity change from 0 to 512
[  310.064589][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.084340][ T9846] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  310.401782][ T9825] RDS/IB: syz0: added
[  310.440011][ T9825] smc: adding ib device syz0 with port count 1
[  310.452638][   T26] audit: type=1326 audit(1790304558.393:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.3.1370" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  310.487651][ T9825] smc:    ib device syz0 port 1 has pnetid SYZ2 (user defined)
[  310.851544][ T9886] overlayfs: failed to clone upperpath
[  311.024424][   T26] audit: type=1326 audit(1790304814.966:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9892 comm="syz.5.1378" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  311.032502][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'.
[  311.087226][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.146400][ T9896] bridge2: port 1(dummy0) entered blocking state
[  311.192471][ T9896] bridge2: port 1(dummy0) entered disabled state
[  311.222134][ T9896] device dummy0 entered promiscuous mode
[  311.235868][ T9891] netlink: 'syz.1.1377': attribute type 10 has an invalid length.
[  311.247343][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1377'.
[  311.260643][ T9891] bridge2: port 1(dummy0) entered blocking state
[  311.269290][ T9891] bridge2: port 1(dummy0) entered forwarding state
[  311.279931][ T9891] bridge2: port 1(dummy0) entered disabled state
[  311.968126][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.132403][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.251862][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1382'.
[  312.446890][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.951116][ T9936] overlayfs: failed to clone lowerpath
[  313.001641][ T9936] overlayfs: failed to clone upperpath
[  313.028209][ T9938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.093845][ T9938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.116380][ T9938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.135405][ T9938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.445909][   T26] audit: type=1326 audit(1790305073.369:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9943 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  313.855140][ T9946] serio: Serial port ptm0
[  314.153533][   T26] audit: type=1326 audit(1790305330.091:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.5.1392" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  314.417897][ T9948] net_ratelimit: 474 callbacks suppressed
[  314.417925][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.519623][ T9954] loop6: detected capacity change from 0 to 8192
[  314.527164][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.580261][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.611969][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.639005][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.671139][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.696906][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.729773][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.770052][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.798910][ T9948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.881488][ T9968] device lo entered promiscuous mode
[  315.174113][ T9968] device tunl0 entered promiscuous mode
[  315.253429][ T9968] device gre0 entered promiscuous mode
[  315.518625][ T9968] device gretap0 entered promiscuous mode
[  315.545408][ T9968] device erspan0 entered promiscuous mode
[  315.578800][ T9968] device ip_vti0 entered promiscuous mode
[  315.607371][ T9968] device ip6_vti0 entered promiscuous mode
[  315.656096][ T9968] device sit0 entered promiscuous mode
[  315.701346][ T9984] FAULT_INJECTION: forcing a failure.
[  315.701346][ T9984] name failslab, interval 1, probability 0, space 0, times 0
[  315.720802][ T9968] device ip6tnl0 entered promiscuous mode
[  315.747756][ T9984] CPU: 1 PID: 9984 Comm: syz.3.1399 Not tainted syzkaller #0
[  315.755241][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  315.765342][ T9984] Call Trace:
[  315.768638][ T9984]  <TASK>
[  315.771566][ T9984]  dump_stack_lvl+0x188/0x24e
[  315.776436][ T9984]  ? show_regs_print_info+0x12/0x12
[  315.781671][ T9984]  ? load_image+0x410/0x410
[  315.786179][ T9984]  ? __might_sleep+0xd0/0xd0
[  315.790768][ T9984]  ? __lock_acquire+0x7c40/0x7c40
[  315.795824][ T9984]  should_fail_ex+0x390/0x4c0
[  315.800531][ T9984]  should_failslab+0x5/0x20
[  315.805038][ T9984]  slab_pre_alloc_hook+0x59/0x300
[  315.810094][ T9984]  ? x509_cert_parse+0x2d1/0x7a0
[  315.815043][ T9984]  __kmem_cache_alloc_node+0x4f/0x270
[  315.820454][ T9984]  ? x509_cert_parse+0x2d1/0x7a0
[  315.825417][ T9984]  __kmalloc_node_track_caller+0xa0/0x240
[  315.831171][ T9984]  kmemdup+0x27/0x60
[  315.835074][ T9984]  x509_cert_parse+0x2d1/0x7a0
[  315.839852][ T9984]  x509_key_preparse+0x60/0x660
[  315.844706][ T9984]  ? down_read+0x1a8/0x2d0
[  315.849141][ T9984]  asymmetric_key_preparse+0xa5/0x140
[  315.854558][ T9984]  key_create_or_update+0x432/0xa40
[  315.859862][ T9984]  ? security_key_permission+0x7c/0xa0
[  315.865365][ T9984]  ? key_type_put+0x20/0x20
[  315.869883][ T9984]  ? lookup_user_key_possessed+0x40/0x40
[  315.875542][ T9984]  ? __might_fault+0xc2/0x120
[  315.880223][ T9984]  ? __might_fault+0xa6/0x120
[  315.884941][ T9984]  __se_sys_add_key+0x34b/0x410
[  315.889814][ T9984]  ? __x64_sys_add_key+0xc0/0xc0
[  315.894903][ T9984]  ? lockdep_hardirqs_on+0x94/0x140
[  315.900133][ T9984]  ? __x64_sys_add_key+0x1c/0xc0
[  315.905098][ T9984]  do_syscall_64+0x4c/0xa0
[  315.909539][ T9984]  ? clear_bhb_loop+0x60/0xb0
[  315.914219][ T9984]  ? clear_bhb_loop+0x60/0xb0
[  315.918914][ T9984]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  315.924812][ T9984] RIP: 0033:0x7f0f2939e159
[  315.929247][ T9984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.948872][ T9984] RSP: 002b:00007f0f2a31e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  315.957316][ T9984] RAX: ffffffffffffffda RBX: 00007f0f29625fa0 RCX: 00007f0f2939e159
[  315.965552][ T9984] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 00002000000000c0
[  315.973536][ T9984] RBP: 00007f0f2943506b R08: 00000000084e6dfd R09: 0000000000000000
[  315.981544][ T9984] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  315.989521][ T9984] R13: 00007f0f29626038 R14: 00007f0f29625fa0 R15: 00007ffd839f4ea8
[  315.997508][ T9984]  </TASK>
[  316.004961][ T9968] device ip6gre0 entered promiscuous mode
[  316.047621][ T9968] device ip6gretap0 entered promiscuous mode
[  316.083658][ T9968] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.091117][ T9968] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.101027][ T9968] device bridge0 entered promiscuous mode
[  316.124129][ T9968] device vcan0 entered promiscuous mode
[  316.199127][ T9968] device bond0 entered promiscuous mode
[  316.205856][ T9968] device bond_slave_0 entered promiscuous mode
[  316.248846][ T9968] device bond_slave_1 entered promiscuous mode
[  316.303421][ T9968] device team0 entered promiscuous mode
[  316.312696][ T9968] device team_slave_0 entered promiscuous mode
[  316.322965][ T9968] device team_slave_1 entered promiscuous mode
[  316.421592][ T9968] device nlmon0 entered promiscuous mode
[  316.432703][ T9968] device caif0 entered promiscuous mode
[  316.487730][ T9968] device batadv0 entered promiscuous mode
[  316.512966][   T26] audit: type=1326 audit(1790305588.452:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.2.1404" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  316.541022][ T9968] device vxcan0 entered promiscuous mode
[  316.589990][ T9968] device vxcan1 entered promiscuous mode
[  316.603156][ T9968] device veth0 entered promiscuous mode
[  316.703474][ T9968] device veth1 entered promiscuous mode
[  316.772199][ T9968] device wg0 entered promiscuous mode
[  316.857778][   T26] audit: type=1326 audit(1790305844.805:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.3.1405" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  317.089164][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.095707][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.605680][ T9968] device wg1 entered promiscuous mode
[  317.687629][ T9968] device wg2 entered promiscuous mode
[  317.778387][ T9968] device veth0_to_bridge entered promiscuous mode
[  317.911521][ T9968] device veth1_to_bridge entered promiscuous mode
[  317.998544][ T9968] device veth0_to_bond entered promiscuous mode
[  318.078066][ T9968] device veth1_to_bond entered promiscuous mode
[  318.127182][ T9968] device veth0_to_team entered promiscuous mode
[  318.212037][ T9968] device veth1_to_team entered promiscuous mode
[  318.312497][ T9968] device veth0_to_batadv entered promiscuous mode
[  318.357181][ T9968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.392380][ T9968] device batadv_slave_0 entered promiscuous mode
[  318.465027][ T9968] device veth1_to_batadv entered promiscuous mode
[  318.481177][ T9968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.504745][T10035] loop3: detected capacity change from 0 to 256
[  318.525963][ T9968] device batadv_slave_1 entered promiscuous mode
[  318.633350][ T9968] device xfrm0 entered promiscuous mode
[  318.677349][ T9968] device veth0_to_hsr entered promiscuous mode
[  318.807242][ T9968] device veth1_to_hsr entered promiscuous mode
[  318.894271][ T9968] device veth1_virt_wifi entered promiscuous mode
[  318.935572][ T9968] device veth0_virt_wifi entered promiscuous mode
[  318.948995][ T9968] device virt_wifi0 entered promiscuous mode
[  319.051082][ T9968] device vlan0 entered promiscuous mode
[  319.076635][ T9968] device vlan1 entered promiscuous mode
[  319.088945][ T9968] device macvlan0 entered promiscuous mode
[  319.155499][ T9968] device macvlan1 entered promiscuous mode
[  319.197982][ T9968] device ipvlan0 entered promiscuous mode
[  319.225777][ T9968] device ipvlan1 entered promiscuous mode
[  319.321431][ T9968] device macvtap0 entered promiscuous mode
[  319.382042][ T9968] device macsec0 entered promiscuous mode
[  319.426378][ T9968] device geneve0 entered promiscuous mode
[  319.432457][ T5185] net_ratelimit: 2290 callbacks suppressed
[  319.432472][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.466269][T10048] loop6: detected capacity change from 0 to 1024
[  319.504032][ T9968] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.514460][ T9968] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.525231][ T9968] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.535560][ T9968] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.548442][ T9968] device geneve1 entered promiscuous mode
[  319.680374][ T9968] device netdevsim0 entered promiscuous mode
[  319.730999][ T9968] device netdevsim1 entered promiscuous mode
[  320.341959][ T9968] device netdevsim2 entered promiscuous mode
[  320.361430][ T9968] device netdevsim3 entered promiscuous mode
[  320.407573][ T9968] device wlan0 entered promiscuous mode
[  320.434250][ T9968] device wlan1 entered promiscuous mode
[  320.449214][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.470379][ T9968] device bridge1 entered promiscuous mode
[  320.495083][ T9968] device bridge2 entered promiscuous mode
[  320.551987][ T9973] device bridge0 entered promiscuous mode
[  320.576362][ T9973] device vlan2 entered promiscuous mode
[  320.653214][T10046] tipc: Started in network mode
[  320.664228][T10046] tipc: Node identity 4, cluster identity 4711
[  320.692334][T10046] tipc: Node number set to 4
[  320.698788][T10051] netlink: 'syz.2.1415': attribute type 4 has an invalid length.
[  320.733947][T10052] netlink: 'syz.2.1415': attribute type 4 has an invalid length.
[  320.796422][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.873187][   T26] audit: type=1326 audit(1790306104.810:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.5.1418" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  321.024320][   T26] audit: type=1326 audit(1790306360.968:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.3.1421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  321.228489][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.257635][   T26] audit: type=1800 audit(1790306361.208:224): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1423" name="protocol" dev="configfs" ino=52218 res=0 errno=0
[  321.287028][T10084] dlm: no local IP address has been set
[  321.301381][   T26] audit: type=1800 audit(1790306617.236:225): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1423" name="local" dev="configfs" ino=52220 res=0 errno=0
[  321.327982][T10084] dlm: cannot start dlm midcomms -107
[  321.486448][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.566134][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.574823][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.602505][T10104] bridge0: port 1(vxlan0) entered blocking state
[  321.610117][T10104] bridge0: port 1(vxlan0) entered disabled state
[  321.618252][T10104] device vxlan0 entered promiscuous mode
[  321.833093][T10110] xt_hashlimit: size too large, truncated to 1048576
[  321.898789][T10111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.107968][T10119] device syzkaller0 entered promiscuous mode
[  322.132826][T10119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.161402][T10117] tipc: Resetting bearer <eth:syzkaller0>
[  322.207299][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.211893][T10117] tipc: Disabling bearer <eth:syzkaller0>
[  322.220123][ T4370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.596330][   T26] audit: type=1326 audit(1790306618.546:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10129 comm="syz.6.1434" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  322.674928][T10131] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1433'.
[  324.583449][   T26] audit: type=1326 audit(1790306876.526:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  324.624075][ T4879] net_ratelimit: 5 callbacks suppressed
[  324.624090][ T4879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.689797][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.725101][T10163] loop6: detected capacity change from 0 to 256
[  325.192633][T10176] overlayfs: failed to clone upperpath
[  325.302400][T10178] syz.6.1445: attempt to access beyond end of device
[  325.302400][T10178] loop0: rw=0, sector=0, nr_sectors = 8 limit=0
[  325.534777][T10178] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO)
[  325.580840][T10178] device-mapper: ioctl: error adding target to table
[  325.725997][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.829577][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'.
[  325.888959][T10188] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  325.898118][T10188] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  325.907010][T10188] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  325.915870][T10188] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  326.320033][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'.
[  326.402011][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'.
[  327.102426][T10200] loop3: detected capacity change from 0 to 256
[  327.134753][T10200] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x990b46a1, utbl_chksum : 0xe619d30d)
[  327.158414][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.166436][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 0, err : -5)
[  327.176773][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.178997][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.191093][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 0, err : -5)
[  327.201399][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.207497][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 1, err : -5)
[  327.217642][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.223752][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 2, err : -5)
[  327.233918][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.240144][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 3, err : -5)
[  327.250880][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.256976][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 4, err : -5)
[  327.267024][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.273029][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 5, err : -5)
[  327.283009][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.289072][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 6, err : -5)
[  327.299139][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.305234][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 7, err : -5)
[  327.315379][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.321386][T10200] exFAT-fs (loop3): error, failed to bmap (inode : ffff88804fe38e60 iblock : 0, err : -5)
[  327.334341][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.340479][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.346549][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.352553][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.359023][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.365045][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.371130][T10200] exFAT-fs (loop3): error, broken FAT chain.
[  327.655276][ T5346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.850577][T10203] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.858165][T10203] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.866428][   T26] audit: type=1326 audit(1790307135.799:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10222 comm="syz.3.1458" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  327.994093][T10203] batman_adv: batadv0: Interface deactivated: dummy0
[  328.142506][T10231] overlayfs: failed to clone upperpath
[  328.220232][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.594379][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.650074][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.900262][T10250] binder: BINDER_SET_CONTEXT_MGR already set
[  328.927648][T10250] binder: 10245:10250 ioctl 4018620d 200000000100 returned -16
[  328.984916][T10250] binder: BINDER_SET_CONTEXT_MGR already set
[  329.001105][T10250] binder: 10245:10250 ioctl 4018620d 200000004a80 returned -16
[  329.245785][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.373906][T10203] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.383449][T10203] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.392623][T10203] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.402256][T10203] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.515919][T10252] tipc: Started in network mode
[  329.521174][T10252] tipc: Node identity 4, cluster identity 4711
[  329.543609][T10252] tipc: Node number set to 4
[  330.463978][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.594838][T10264] FAULT_INJECTION: forcing a failure.
[  330.594838][T10264] name failslab, interval 1, probability 0, space 0, times 0
[  330.645130][T10264] CPU: 0 PID: 10264 Comm: syz.3.1472 Not tainted syzkaller #0
[  330.652753][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  330.662901][T10264] Call Trace:
[  330.666184][T10264]  <TASK>
[  330.669120][T10264]  dump_stack_lvl+0x188/0x24e
[  330.673915][T10264]  ? show_regs_print_info+0x12/0x12
[  330.679295][T10264]  ? load_image+0x410/0x410
[  330.683796][T10264]  ? __lock_acquire+0x7c40/0x7c40
[  330.688946][T10264]  ? memset+0x1e/0x40
[  330.692943][T10264]  should_fail_ex+0x390/0x4c0
[  330.697630][T10264]  should_failslab+0x5/0x20
[  330.702469][T10264]  slab_pre_alloc_hook+0x59/0x300
[  330.707542][T10264]  kmem_cache_alloc+0x56/0x2f0
[  330.712313][T10264]  ? security_inode_alloc+0x30/0x110
[  330.717684][T10264]  security_inode_alloc+0x30/0x110
[  330.722799][T10264]  inode_init_always+0x910/0xc90
[  330.727740][T10264]  new_inode_pseudo+0x91/0x1c0
[  330.732500][T10264]  new_inode+0x25/0x1d0
[  330.736669][T10264]  proc_pid_make_inode+0x20/0x1a0
[  330.741692][T10264]  proc_task_instantiate+0x50/0x2b0
[  330.747070][T10264]  proc_task_lookup+0x37f/0x4e0
[  330.751939][T10264]  ? proc_task_lookup+0xdf/0x4e0
[  330.756903][T10264]  __lookup_slow+0x29d/0x3f0
[  330.761499][T10264]  ? lookup_one_len+0x2d0/0x2d0
[  330.766372][T10264]  ? down_read+0x1a8/0x2d0
[  330.770824][T10264]  lookup_slow+0x53/0x70
[  330.775073][T10264]  walk_component+0x2ad/0x3e0
[  330.780118][T10264]  link_path_walk+0x6b1/0xea0
[  330.784920][T10264]  ? handle_lookup_down+0x130/0x130
[  330.790258][T10264]  path_openat+0x285/0x2f10
[  330.794820][T10264]  ? verify_lock_unused+0x140/0x140
[  330.800055][T10264]  ? do_sys_openat2+0xdd/0x4f0
[  330.805011][T10264]  ? do_filp_open+0x420/0x420
[  330.809820][T10264]  do_filp_open+0x1ee/0x420
[  330.814452][T10264]  ? vfs_tmpfile+0x470/0x470
[  330.819093][T10264]  ? noop_direct_IO+0x10/0x10
[  330.823800][T10264]  ? _raw_spin_unlock+0x24/0x40
[  330.828778][T10264]  ? alloc_fd+0x590/0x640
[  330.834410][T10264]  do_sys_openat2+0x14b/0x4f0
[  330.839761][T10264]  ? do_sys_open+0xe0/0xe0
[  330.844351][T10264]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  330.850698][T10264]  ? lock_chain_count+0x20/0x20
[  330.856089][T10264]  __x64_sys_openat+0x135/0x160
[  330.861334][T10264]  do_syscall_64+0x4c/0xa0
[  330.866227][T10264]  ? clear_bhb_loop+0x60/0xb0
[  330.870942][T10264]  ? clear_bhb_loop+0x60/0xb0
[  330.875643][T10264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.881720][T10264] RIP: 0033:0x7f0f2935e98e
[  330.886574][T10264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  330.906964][T10264] RSP: 002b:00007f0f2a31dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  330.915558][T10264] RAX: ffffffffffffffda RBX: 00007f0f2a31e6c0 RCX: 00007f0f2935e98e
[  330.923568][T10264] RDX: 0000000000000002 RSI: 00007f0f2a31df90 RDI: ffffffffffffff9c
[  330.931647][T10264] RBP: 00007f0f2943506b R08: 0000000000000000 R09: 0000000000000000
[  330.939709][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.947781][T10264] R13: 00007f0f29626038 R14: 00007f0f29625fa0 R15: 00007ffd839f4ea8
[  330.955785][T10264]  </TASK>
[  330.959997][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.459767][T10303] tipc: Started in network mode
[  331.627552][T10303] tipc: Node identity 4, cluster identity 4711
[  331.837868][T10303] tipc: Node number set to 4
[  332.382110][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.408695][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.477583][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.490721][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.506106][T10314] fuse: Bad value for 'fd'
[  332.547518][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.575050][T10320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.625919][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.662516][T10320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.859237][T10330] loop6: detected capacity change from 0 to 512
[  332.924366][T10330] EXT4-fs (loop6): orphan cleanup on readonly fs
[  332.969082][T10330] Quota error (device loop6): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144).
[  333.026725][T10330] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  333.042977][T10330] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  333.050512][T10330] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1488: couldn't read orphan inode 26 (err -116)
[  333.073110][T10330] EXT4-fs (loop6): Remounting filesystem read-only
[  333.085008][T10330] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  333.912449][T10345] loop3: detected capacity change from 0 to 256
[  334.044132][ T8732] EXT4-fs (loop6): unmounting filesystem.
[  334.388788][T10365] tipc: Started in network mode
[  334.393719][T10365] tipc: Node identity 4, cluster identity 4711
[  334.458881][T10365] tipc: Node number set to 4
[  334.524891][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  334.728319][   T26] audit: type=1326 audit(1790307910.670:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.3.1502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  335.596535][ T5185] net_ratelimit: 430 callbacks suppressed
[  335.596553][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.738667][T10422] loop3: detected capacity change from 0 to 128
[  335.831500][T10422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  335.873318][T10422] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.893365][T10427] overlayfs: failed to clone upperpath
[  335.971799][T10424] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  336.121692][   T26] audit: type=1326 audit(1790308424.060:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10440 comm="syz.2.1519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  336.174192][T10445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.194268][T10445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.210358][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  336.218478][T10445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.280483][T10448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.307404][T10448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.361515][T10448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.392235][T10448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.401186][   T26] audit: type=1326 audit(1790308424.330:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10455 comm="syz.5.1524" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323579e159 code=0x0
[  336.444748][T10448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.453093][T10448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.281558][T10509] device syzkaller0 entered promiscuous mode
[  338.319100][T10509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.343376][T10508] tipc: Resetting bearer <eth:syzkaller0>
[  338.437673][T10508] tipc: Disabling bearer <eth:syzkaller0>
[  338.604085][   T26] audit: type=1326 audit(1790309194.549:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.3.1536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  338.695509][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'.
[  339.491185][T10551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.638354][T10551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.704540][   T26] audit: type=1326 audit(1790309451.563:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  339.827897][   T26] audit: type=1326 audit(1790309451.563:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  339.854969][   T26] audit: type=1326 audit(1790309451.573:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  339.882020][   T26] audit: type=1326 audit(1790309451.573:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  339.907968][   T26] audit: type=1326 audit(1790309451.573:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  339.932868][   T26] audit: type=1326 audit(1790309451.573:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  339.970394][   T26] audit: type=1326 audit(1790309451.573:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  340.006129][T10565] loop3: detected capacity change from 0 to 512
[  340.019118][   T26] audit: type=1326 audit(1790309451.573:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  340.050451][T10565] EXT4-fs: Ignoring removed i_version option
[  340.083350][   T26] audit: type=1326 audit(1790309451.603:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.5.1541" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f323579e159 code=0x7ffc0000
[  340.149399][T10565] EXT4-fs: Ignoring removed oldalloc option
[  340.156026][T10565] ext4: Unknown parameter 'smackfsdef'
[  340.867274][ T5186] net_ratelimit: 1420 callbacks suppressed
[  340.867293][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.085819][T10579] loop3: detected capacity change from 0 to 16
[  341.123278][T10579] erofs: (device loop3): mounted with root inode @ nid 36.
[  341.203607][   T49] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  341.224569][T10579] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  341.256138][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'.
[  341.429394][T10579] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  341.548212][T10587] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  341.638573][T10579] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  341.761777][T10596] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  341.833795][T10587] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  341.884346][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.983784][T10587] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  342.373203][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.561748][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.327167][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.511325][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'.
[  345.462022][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.920539][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  345.920554][   T26] audit: type=1326 audit(1790309713.870:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.1.1564" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  346.604319][ T4879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.898142][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'.
[  347.034849][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.170956][T10647] device bond2 entered promiscuous mode
[  347.297171][T10647] device bridge2 entered promiscuous mode
[  347.305800][T10651] input: syz0 as /devices/virtual/input/input33
[  347.403033][T10647] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  348.502905][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.737454][   T26] audit: type=1326 audit(1790309972.688:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.3.1581" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  348.796981][T10698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.809886][   T26] audit: type=1326 audit(1790309972.688:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10691 comm="syz.2.1582" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  348.847010][T10698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.867498][T10698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.902132][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.941332][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.957338][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.968106][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.067618][ T5345] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  349.855429][ T5345] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  349.895085][ T5345] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  349.951297][ T5345] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  349.981126][ T5345] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  350.020170][ T5345] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  350.062726][ T5345] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  350.091776][ T5345] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  350.113354][ T5345] usb 7-1: Product: syz
[  350.117867][ T5345] usb 7-1: Manufacturer: syz
[  350.220530][ T5345] cdc_wdm 7-1:1.0: skipping garbage
[  350.261099][ T5345] cdc_wdm 7-1:1.0: skipping garbage
[  350.298897][ T5345] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  350.324889][ T5345] cdc_wdm 7-1:1.0: Unknown control protocol
[  350.456649][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'.
[  350.599956][T10738] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.644335][ T5345] net_ratelimit: 2028 callbacks suppressed
[  351.644449][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.733044][    C0] hrtimer: interrupt took 33326 ns
[  351.998976][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.034787][T10758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.043408][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.057671][ T5345] usb 7-1: USB disconnect, device number 2
[  352.277966][   T26] audit: type=1326 audit(1790310488.221:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10763 comm="syz.6.1597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  352.390495][T10770] loop3: detected capacity change from 0 to 512
[  352.430430][T10770] EXT4-fs: Ignoring removed mblk_io_submit option
[  352.488776][T10770] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  352.600783][T10770] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  352.641038][T10770] EXT4-fs (loop3): orphan cleanup on readonly fs
[  352.675474][T10770] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1598: Invalid block bitmap block 0 in block_group 0
[  352.733868][T10770] Quota error (device loop3): write_blk: dquota write failed
[  352.763358][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.767206][T10770] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  352.771680][   T26] audit: type=1326 audit(1790310744.715:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.1.1602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  352.782085][T10770] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1598: Failed to acquire dquot type 1
[  352.855178][T10770] EXT4-fs (loop3): 1 orphan inode deleted
[  352.978739][ T4508] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5
[  353.000459][ T4508] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:24: Failed to release dquot type 1
[  353.020778][   T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.105598][T10770] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  353.895039][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  353.943593][T10821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.050278][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.112758][T10821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.092725][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.323722][T10853] fuse: Bad value for 'fd'
[  355.522051][   T49] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  356.202509][T10866] binder: BINDER_SET_CONTEXT_MGR already set
[  356.262941][T10866] binder: 10864:10866 ioctl 4018620d 2000000000c0 returned -16
[  356.390065][T10866] binder: BINDER_SET_CONTEXT_MGR already set
[  356.418755][T10866] binder: 10864:10866 ioctl 4018620d 200000000040 returned -16
[  356.439646][   T26] audit: type=1326 audit(1790311004.388:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10868 comm="syz.1.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  356.672866][T10845] net_ratelimit: 871 callbacks suppressed
[  356.672886][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.811075][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.975325][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.130760][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.279527][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.333742][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.492407][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.512882][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.521558][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.530386][T10845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.241691][ T5185] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  358.498923][ T5185] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  358.540054][ T5185] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  358.565089][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.649275][ T5185] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  359.048847][ T5185] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.077843][ T5185] usb 7-1: Product: syz
[  359.632490][ T5185] usb 7-1: Manufacturer: syz
[  359.655451][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.667156][ T5185] usb 7-1: SerialNumber: syz
[  359.721451][ T5185] usb 7-1: config 0 descriptor??
[  359.768121][T10887] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  359.787692][T10887] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  359.808809][T10881] syz.3.1620 (10881): drop_caches: 2
[  360.465601][T10887] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  360.482606][T10887] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  361.408358][ T5185] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  361.593003][   T26] audit: type=1326 audit(1790311265.540:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10922 comm="syz.1.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  361.617636][    C1] vkms_vblank_simulate: vblank timer overrun
[  361.684895][T10928] netlink: 'syz.3.1629': attribute type 1 has an invalid length.
[  361.738412][T10928] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.802579][ T5186] net_ratelimit: 145 callbacks suppressed
[  361.802595][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.868742][T10936] bond1: (slave veth3): Enslaving as an active interface with a down link
[  361.883896][T10928] 8021q: adding VLAN 0 to HW filter on device batadv1
[  361.893293][T10928] bond1: (slave batadv1): making interface the new active one
[  361.903616][T10928] device batadv1 entered promiscuous mode
[  361.910346][T10928] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  361.967197][T10940] bond1: (slave veth5): Enslaving as an active interface with a down link
[  361.987128][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  362.026160][T10946] overlayfs: failed to clone upperpath
[  362.271172][ T5185] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  362.328415][ T5185] dm9601 7-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 46:04:dd:40:e3:8d
[  363.023658][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.043854][ T5185] usb 7-1: USB disconnect, device number 3
[  363.081431][ T5185] dm9601 7-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet
[  363.245344][ T5199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.293851][ T5185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.440080][T10975] xt_nfacct: accounting object `' does not exist
[  364.734762][T10989] device syzkaller0 entered promiscuous mode
[  364.786779][T10989] tipc: Started in network mode
[  364.791688][T10989] tipc: Node identity 6ef32447e118, cluster identity 4711
[  364.843129][T10989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.860725][T10988] tipc: Resetting bearer <eth:syzkaller0>
[  364.962713][T10988] tipc: Disabling bearer <eth:syzkaller0>
[  365.064316][T11000] capability: warning: `syz.1.1651' uses deprecated v2 capabilities in a way that may be insecure
[  365.835383][ T5199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.631312][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.649228][   T26] audit: type=1326 audit(1790311526.599:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.6.1655" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe290b9e159 code=0x0
[  366.859650][ T5199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.217853][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.141561][T11036] ip_tables: iptables: counters copy to user failed while replacing table
[  369.241719][ T5199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.366738][T11047] syz.3.1664 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  369.396358][T11044] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  369.405894][T11044] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  369.415336][T11044] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  369.424397][T11044] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  369.641671][ T4879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.709384][T11044] device vxlan0 entered promiscuous mode
[  369.766389][T11044] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  370.205751][T11049] serio: Serial port ptm0
[  370.248551][   T26] audit: type=1326 audit(1790311530.200:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1669" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  370.323380][T11066] loop6: detected capacity change from 0 to 512
[  370.402590][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.420701][T11066] EXT4-fs (loop6): bad s_min_extra_isize: 544
[  370.841815][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.489397][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.961072][ T5186] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  372.248745][ T5186] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  372.352146][ T5186] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  372.514043][ T5186] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  372.675934][ T5186] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  372.694009][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.768504][ T5186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.777607][ T5199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.798705][T11098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  373.920363][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.407345][T11128] fuse: Bad value for 'fd'
[  374.555464][   T49] Bluetooth: hci5: Reading Intel version command failed (-71)
[  374.571959][ T4281] usb 4-1: USB disconnect, device number 15
[  374.707657][   T26] audit: type=1326 audit(1790311790.653:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11138 comm="syz.1.1684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea59e159 code=0x0
[  374.920928][ T5186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.936703][ T5345] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  375.101815][ T4281] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  375.131462][ T5345] usb 7-1: Using ep0 maxpacket: 8
[  375.138315][ T5345] usb 7-1: config 3 has an invalid interface number: 45 but max is 0
[  375.161842][ T5345] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  375.182662][ T5345] usb 7-1: config 3 has no interface number 0
[  375.197213][ T5345] usb 7-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  375.224230][ T5345] usb 7-1: config 3 interface 45 has no altsetting 0
[  375.240483][ T5345] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  375.258881][ T5345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.276599][ T5345] usb 7-1: Product: syz
[  375.285690][ T5345] usb 7-1: Manufacturer: syz
[  375.290352][ T5345] usb 7-1: SerialNumber: syz
[  375.304964][ T4281] usb 4-1: Using ep0 maxpacket: 32
[  375.314242][ T4281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.340341][ T4281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.356698][ T4281] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  375.386355][ T4281] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00
[  375.396297][ T4281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.415406][ T4281] usb 4-1: config 0 descriptor??
[  375.720759][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.798363][ T5345] usb 7-1: USB disconnect, device number 4
[  375.977223][ T5199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.988227][ T4281] chicony 0003:04F2:1123.0016: unknown main item tag 0x0
[  376.005627][ T4281] chicony 0003:04F2:1123.0016: unknown main item tag 0x0
[  376.013892][ T4281] chicony 0003:04F2:1123.0016: unknown main item tag 0x0
[  376.015390][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.021327][ T4281] chicony 0003:04F2:1123.0016: unknown main item tag 0x0
[  376.053398][ T4281] chicony 0003:04F2:1123.0016: unknown main item tag 0x0
[  376.061025][ T4281] chicony 0003:04F2:1123.0016: unknown main item tag 0x0
[  376.068154][ T4281] chicony 0003:04F2:1123.0016: unbalanced collection at end of report description
[  376.080256][ T4281] chicony 0003:04F2:1123.0016: Chicony hid parse failed: -22
[  376.094333][ T4281] chicony: probe of 0003:04F2:1123.0016 failed with error -22
[  376.303481][ T4512] device batadv1 left promiscuous mode
[  376.393467][ T4281] usb 4-1: USB disconnect, device number 16
[  377.020262][T11174] device syzkaller0 entered promiscuous mode
[  378.158203][   T26] audit: type=1326 audit(1790312050.107:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11192 comm="syz.2.1698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  378.534360][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.540979][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  379.724626][T11213] file system registered
[  379.777419][T11213] unloading
[  381.002879][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1707'.
[  381.527257][T11228] loop3: detected capacity change from 0 to 1024
[  381.535692][T11226] netlink: 'syz.1.1707': attribute type 11 has an invalid length.
[  381.557707][T11228] EXT4-fs (loop3): The Hurd can't support 64-bit file systems
[  383.465301][T11254] loop3: detected capacity change from 0 to 164
[  384.758714][T11267] fuse: Bad value for 'fd'
[  385.119492][ T5186] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  385.336455][ T5186] usb 4-1: not running at top speed; connect to a high speed hub
[  385.361035][ T5186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  385.388280][ T5186] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  385.411781][ T5186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.451975][ T5186] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  386.163491][ T5186] usb 4-1: No streaming interface found for terminal 2.
[  386.226290][ T5186] usb 4-1: USB disconnect, device number 17
[  389.022672][T11289] kvm [11288]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080
[  389.074264][T11289] kvm [11288]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000
[  389.099964][T11289] kvm [11288]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  389.132028][T11289] kvm [11288]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  389.175617][T11289] kvm [11288]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  389.187373][T11289] kvm [11288]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  389.228441][T11289] kvm [11288]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  389.271577][T11289] kvm [11288]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  389.328095][T11289] kvm [11288]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  389.374840][T11289] kvm [11288]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  392.250672][T11322] loop3: detected capacity change from 0 to 1024
[  392.354471][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.390185][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.443418][T11323] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.478834][T11323] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.523341][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.530969][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.563356][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.579046][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.636299][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.637201][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.664181][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.667885][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.714838][ T4294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.728260][ T4294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.740341][ T4294] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  392.747994][ T4294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.888189][T11323] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.914991][T11323] hfsplus: request for non-existent node 33423360 in B*Tree
[  392.973939][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.000976][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.044272][T11323] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.056263][T11323] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.075313][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.085894][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.100503][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.110655][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.128135][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.136724][T11322] hfsplus: request for non-existent node 33423360 in B*Tree
[  393.329311][   T26] audit: type=1326 audit(1790312321.266:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.3.1741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f2939e159 code=0x0
[  394.222136][T11318] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  394.269044][T11318] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  394.336357][T11318] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  394.410638][T11318] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  394.447245][T11318] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  394.504238][T11318] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  394.514744][T11318] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  395.396676][   T49] Bluetooth: hci5: command 0x0409 tx timeout
[  396.764724][   T26] audit: type=1326 audit(1790312580.680:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11386 comm="syz.2.1752" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29c959e159 code=0x0
[  397.539387][ T4294] Bluetooth: hci5: command 0x041b tx timeout
[  397.761860][T11324] chnl_net:caif_netlink_parms(): no params data found
[  398.632765][T11410] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  398.661096][T11410] CIFS: Attempting to mount \\127.0.0.1\share
[  398.670993][T11410] CIFS: VFS: No username specified
[  398.691798][T11324] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.734991][T11324] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.844324][T11324] device bridge_slave_0 entered promiscuous mode
[  398.854020][T11324] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.861549][T11324] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.871125][T11324] device bridge_slave_1 entered promiscuous mode
[  398.998207][T11422] __vm_enough_memory: pid: 11422, comm: syz.5.1757, no enough memory for the allocation
[  399.130179][T11324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.462570][T11324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.532196][T11324] team0: Port device team_slave_0 added
[  399.557976][ T4294] Bluetooth: hci5: command 0x040f tx timeout
[  399.572130][T11324] team0: Port device team_slave_1 added
[  400.327334][T11324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.414254][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.494107][T11324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.529306][T11324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.537477][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.395906][T11324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.465221][T11440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.512163][T11324] device hsr_slave_0 entered promiscuous mode
[  401.528546][T11324] device hsr_slave_1 entered promiscuous mode
[  401.542744][T11324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  401.561283][T11324] Cannot create hsr debugfs directory
[  401.577996][T11442] device syzkaller0 entered promiscuous mode
[  401.643102][ T4294] Bluetooth: hci5: command 0x0419 tx timeout
[  401.741033][T11440] tipc: Resetting bearer <eth:syzkaller0>
[  402.328322][T11439] tipc: Resetting bearer <eth:syzkaller0>
[  402.414644][T11439] tipc: Disabling bearer <eth:syzkaller0>
[  402.735156][T11324] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  402.902621][T11324] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  402.940751][T11324] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  402.996167][T11451] device syzkaller0 entered promiscuous mode
[  403.075210][T11324] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  403.621719][T11460] MPTCP: kernel_bind error, err=-99
[  403.800560][T11324] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.852949][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  403.853134][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'.
[  403.875127][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  403.889278][T11324] 8021q: adding VLAN 0 to HW filter on device team0
[  403.904256][T11462] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1771'.
[  403.914479][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  403.925460][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  403.934252][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.941598][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.950580][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  403.962159][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  403.971172][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.978330][ T4522] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.988735][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  403.997634][T11467] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1771'.
[  404.017403][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  404.025896][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  404.039192][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  404.055494][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  404.064522][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  404.074086][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  404.084195][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  404.095961][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  404.105709][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  404.123685][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  404.135159][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  404.146321][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  404.315332][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  404.326816][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  404.343175][T11324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.468079][T11492] file system registered
[  405.511606][T11492] loop3: detected capacity change from 0 to 128
[  405.697874][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  405.718286][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  405.764561][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  405.784471][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  405.819840][T11324] device veth0_vlan entered promiscuous mode
[  405.828596][ T4275] ffs_data_put(): freeing
[  405.833454][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  405.847684][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  405.871152][T11324] device veth1_vlan entered promiscuous mode
[  406.005707][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  406.025156][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  406.059002][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  406.084605][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  406.107576][T11324] device veth0_macvtap entered promiscuous mode
[  406.127464][T11324] device veth1_macvtap entered promiscuous mode
[  406.170625][T11324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.190605][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  406.200502][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  406.209678][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  406.219574][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  406.292536][T11324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.345063][T11324] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.359930][ T5186] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  406.375500][T11324] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.393840][T11324] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.404291][T11324] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.031950][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  407.046378][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  407.176904][ T5186] usb 4-1: Using ep0 maxpacket: 16
[  407.196387][ T5186] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.225440][ T5186] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  407.250370][ T5186] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  407.324690][ T5186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.354355][ T5186] usb 4-1: Product: syz
[  407.371162][ T5186] usb 4-1: Manufacturer: syz
[  407.382140][ T4490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.413107][T11523] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.431143][ T5186] usb 4-1: SerialNumber: syz
[  407.438787][ T4490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.474497][ T5186] usb 4-1: config 0 descriptor??
[  407.489987][T11523] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.564316][T11523] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.595923][T11523] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.622412][T11523] device geneve2 entered promiscuous mode
[  408.289409][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  408.347571][ T4516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.355990][ T4516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.372177][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  408.870278][T11538] 
[  408.872658][T11538] ======================================================
[  408.879677][T11538] WARNING: possible circular locking dependency detected
[  408.886966][T11538] syzkaller #0 Not tainted
[  408.891386][T11538] ------------------------------------------------------
[  408.898397][T11538] syz.7.1738/11538 is trying to acquire lock:
[  408.904466][T11538] ffff8880178e5aa0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430
[  408.916038][T11538] 
[  408.916038][T11538] but task is already holding lock:
[  408.923846][T11538] ffffffff8d805a08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550
[  408.933919][T11538] 
[  408.933919][T11538] which lock already depends on the new lock.
[  408.933919][T11538] 
[  408.944410][T11538] 
[  408.944410][T11538] the existing dependency chain (in reverse order) is:
[  408.954999][T11538] 
[  408.954999][T11538] -> #3 (tpg_instances_lock){+.+.}-{3:3}:
[  408.962903][T11538]        __mutex_lock+0x12d/0xae0
[  408.967997][T11538]        tcm_alloc_inst+0x61/0x190
[  408.973108][T11538]        usb_get_function_instance+0xd9/0x2e0
[  408.979266][T11538]        function_make+0x118/0x350
[  408.984427][T11538]        configfs_mkdir+0x511/0x9e0
[  408.989637][T11538]        vfs_mkdir+0x386/0x570
[  408.994425][T11538]        do_mkdirat+0x1d8/0x440
[  408.999269][T11538]        __x64_sys_mkdirat+0x85/0x90
[  409.004584][T11538]        do_syscall_64+0x4c/0xa0
[  409.009557][T11538]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.016052][T11538] 
[  409.016052][T11538] -> #2 (func_lock){+.+.}-{3:3}:
[  409.023258][T11538]        __mutex_lock+0x12d/0xae0
[  409.028282][T11538]        usb_get_function_instance+0x2a/0x2e0
[  409.034339][T11538]        function_make+0x118/0x350
[  409.039545][T11538]        configfs_mkdir+0x511/0x9e0
[  409.044767][T11538]        vfs_mkdir+0x386/0x570
[  409.049555][T11538]        do_mkdirat+0x1d8/0x440
[  409.054519][T11538]        __x64_sys_mkdir+0x6a/0x80
[  409.059735][T11538]        do_syscall_64+0x4c/0xa0
[  409.064685][T11538]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.071104][T11538] 
[  409.071104][T11538] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  409.079364][T11538]        __mutex_lock+0x12d/0xae0
[  409.084387][T11538]        uvcg_streaming_header_allow_link+0x6d/0x4a0
[  409.091084][T11538]        configfs_symlink+0x5a4/0x13c0
[  409.096544][T11538]        vfs_symlink+0x245/0x3d0
[  409.101473][T11538]        do_symlinkat+0x1b6/0x400
[  409.106495][T11538]        __x64_sys_symlink+0x7a/0x90
[  409.111876][T11538]        do_syscall_64+0x4c/0xa0
[  409.116863][T11538]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.123373][T11538] 
[  409.123373][T11538] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}:
[  409.132077][T11538]        __lock_acquire+0x2d18/0x7c40
[  409.137553][T11538]        lock_acquire+0x1bb/0x4a0
[  409.142683][T11538]        down_write+0x36/0x60
[  409.147370][T11538]        configfs_depend_item_unlocked+0x14f/0x430
[  409.153958][T11538]        usbg_make_tpg+0x1dd/0x550
[  409.159064][T11538]        target_fabric_make_tpg+0xa0/0x6d0
[  409.164939][T11538]        configfs_mkdir+0x511/0x9e0
[  409.170178][T11538]        vfs_mkdir+0x386/0x570
[  409.174947][T11538]        do_mkdirat+0x1d8/0x440
[  409.179787][T11538]        __x64_sys_mkdirat+0x85/0x90
[  409.185063][T11538]        do_syscall_64+0x4c/0xa0
[  409.190001][T11538]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.196415][T11538] 
[  409.196415][T11538] other info that might help us debug this:
[  409.196415][T11538] 
[  409.206720][T11538] Chain exists of:
[  409.206720][T11538]   &sb->s_type->i_mutex_key#26 --> func_lock --> tpg_instances_lock
[  409.206720][T11538] 
[  409.220544][T11538]  Possible unsafe locking scenario:
[  409.220544][T11538] 
[  409.228008][T11538]        CPU0                    CPU1
[  409.233733][T11538]        ----                    ----
[  409.239113][T11538]   lock(tpg_instances_lock);
[  409.243905][T11538]                                lock(func_lock);
[  409.250403][T11538]                                lock(tpg_instances_lock);
[  409.257684][T11538]   lock(&sb->s_type->i_mutex_key#26);
[  409.263326][T11538] 
[  409.263326][T11538]  *** DEADLOCK ***
[  409.263326][T11538] 
[  409.271478][T11538] 4 locks held by syz.7.1738/11538:
[  409.276670][T11538]  #0: ffff888019f50460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  409.286135][T11538]  #1: ffff888079e94660 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  409.297020][T11538]  #2: ffffffff8d4ea290 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0
[  409.307470][T11538]  #3: ffffffff8d805a08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550
[  409.317232][T11538] 
[  409.317232][T11538] stack backtrace:
[  409.323200][T11538] CPU: 0 PID: 11538 Comm: syz.7.1738 Not tainted syzkaller #0
[  409.330745][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  409.340913][T11538] Call Trace:
[  409.344262][T11538]  <TASK>
[  409.347364][T11538]  dump_stack_lvl+0x188/0x24e
[  409.352302][T11538]  ? load_image+0x410/0x410
[  409.356861][T11538]  ? show_regs_print_info+0x12/0x12
[  409.362175][T11538]  ? print_circular_bug+0x12b/0x1a0
[  409.367549][T11538]  check_noncircular+0x296/0x330
[  409.372534][T11538]  ? add_chain_block+0x9b0/0x9b0
[  409.377554][T11538]  ? lockdep_lock+0xf1/0x1f0
[  409.382145][T11538]  ? _find_first_zero_bit+0xd2/0x100
[  409.387594][T11538]  __lock_acquire+0x2d18/0x7c40
[  409.392480][T11538]  ? __kernel_text_address+0x9/0x30
[  409.397817][T11538]  ? verify_lock_unused+0x140/0x140
[  409.403022][T11538]  ? __mutex_trylock_common+0x15c/0x260
[  409.408565][T11538]  lock_acquire+0x1bb/0x4a0
[  409.413117][T11538]  ? configfs_depend_item_unlocked+0x14f/0x430
[  409.419269][T11538]  ? __might_sleep+0xd0/0xd0
[  409.423946][T11538]  ? read_lock_is_recursive+0x10/0x10
[  409.429337][T11538]  ? __mutex_trylock_common+0x15c/0x260
[  409.434883][T11538]  ? usbg_make_tpg+0xf5/0x550
[  409.439922][T11538]  ? mutex_lock_nested+0x10/0x10
[  409.445118][T11538]  down_write+0x36/0x60
[  409.449577][T11538]  ? configfs_depend_item_unlocked+0x14f/0x430
[  409.456704][T11538]  configfs_depend_item_unlocked+0x14f/0x430
[  409.463009][T11538]  usbg_make_tpg+0x1dd/0x550
[  409.467703][T11538]  ? snprintf+0xe5/0x140
[  409.472032][T11538]  ? usbg_drop_tport+0x20/0x20
[  409.476813][T11538]  ? vscnprintf+0x80/0x80
[  409.481228][T11538]  ? __kmem_cache_alloc_node+0x19d/0x270
[  409.486944][T11538]  target_fabric_make_tpg+0xa0/0x6d0
[  409.492311][T11538]  ? target_fabric_release_wwn+0xa0/0xa0
[  409.497979][T11538]  configfs_mkdir+0x511/0x9e0
[  409.502746][T11538]  vfs_mkdir+0x386/0x570
[  409.507021][T11538]  do_mkdirat+0x1d8/0x440
[  409.511355][T11538]  ? vfs_mkdir+0x570/0x570
[  409.515768][T11538]  __x64_sys_mkdirat+0x85/0x90
[  409.520527][T11538]  do_syscall_64+0x4c/0xa0
[  409.525033][T11538]  ? clear_bhb_loop+0x60/0xb0
[  409.529713][T11538]  ? clear_bhb_loop+0x60/0xb0
[  409.534404][T11538]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.540297][T11538] RIP: 0033:0x7fb867f9e159
[  409.544780][T11538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.564514][T11538] RSP: 002b:00007fb868ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  409.572948][T11538] RAX: ffffffffffffffda RBX: 00007fb868225fa0 RCX: 00007fb867f9e159
[  409.580914][T11538] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c
[  409.588878][T11538] RBP: 00007fb86803506b R08: 0000000000000000 R09: 0000000000000000
[  409.596927][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.604976][T11538] R13: 00007fb868226038 R14: 00007fb868225fa0 R15: 00007ffd89f95318
[  409.612955][T11538]  </TASK>
[  409.655179][   T22] usb 4-1: USB disconnect, device number 18