last executing test programs:

11m12.889811282s ago: executing program 0 (id=378):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f0000000140)={[{@discard_async}]}, 0x1, 0x5599, &(0x7f000000f080)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000)
fallocate(r0, 0x0, 0x80000, 0x4)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x80, 0x86)
copy_file_range(r2, 0x0, r1, &(0x7f00000000c0)=0x8010000, 0x10001, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r3, 0x2007ffb)

11m10.287097023s ago: executing program 0 (id=387):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xc1a}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010)

11m9.067588044s ago: executing program 0 (id=394):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4)

11m8.596774552s ago: executing program 0 (id=395):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x81e88c, 0x0)

11m8.058777714s ago: executing program 0 (id=397):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc811}, 0x4000090)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33)

11m6.545777305s ago: executing program 0 (id=407):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x8)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x3e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x9, 0x0, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082", 0x6, 0xffffffffffffffff)

11m5.762513263s ago: executing program 32 (id=407):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x8)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x3e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x9, 0x0, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082", 0x6, 0xffffffffffffffff)

9m36.421787383s ago: executing program 2 (id=844):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x5, 0x3, 0x4, 0x1ff}, 0x50)
mlock(&(0x7f00000c5000/0x2000)=nil, 0x2000)
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x8, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019700)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

9m35.089896982s ago: executing program 2 (id=851):
open(&(0x7f00000000c0)='./bus\x00', 0x141bc2, 0x1c0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @mcast2, 0x23}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9m34.760312977s ago: executing program 2 (id=854):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)

9m34.295752873s ago: executing program 2 (id=857):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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")
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)
wait4(0x0, 0x0, 0x80000000, 0x0)
process_mrelease(r0, 0x0)
socket(0x8000000010, 0x2, 0x0)

9m33.181694098s ago: executing program 2 (id=861):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m32.376330748s ago: executing program 2 (id=866):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m31.719468702s ago: executing program 33 (id=866):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m24.171453768s ago: executing program 4 (id=2041):
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

5m24.038168052s ago: executing program 4 (id=2043):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00'})
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x64)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
close(r0)

5m23.757498735s ago: executing program 4 (id=2048):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20501, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x40}, 0x40000002)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc)

5m22.669909829s ago: executing program 4 (id=2050):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

5m22.223216036s ago: executing program 4 (id=2053):
r0 = io_uring_setup(0x2d9a, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0xdd})
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc01c586a, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0xa, 0xfffffffe)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880)

5m21.779378836s ago: executing program 4 (id=2056):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
listns(&(0x7f0000000580)={0x20, 0x0, 0x5, 0x40000000, 0x0, 0x7fffffffffffffff}, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x7a, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, 0x0)

5m6.218329642s ago: executing program 34 (id=2056):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
listns(&(0x7f0000000580)={0x20, 0x0, 0x5, 0x40000000, 0x0, 0x7fffffffffffffff}, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x7a, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, 0x0)

19.894533057s ago: executing program 6 (id=2885):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

18.683753599s ago: executing program 6 (id=2888):
openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10e58000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x140c, 0x95e9d37b56298e73, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x20080000)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
flistxattr(r4, &(0x7f0000000140)=""/28, 0x11)

16.310275444s ago: executing program 3 (id=2889):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvfrom$inet(r2, &(0x7f00000001c0)=""/193, 0xc1, 0x20, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0)
close(r1)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

15.282275118s ago: executing program 6 (id=2893):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0x8004b709, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00'})
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @meta={0x3854454d, 0x32d87241, 0xb586, 0x59c0, 0x5}})

15.193625319s ago: executing program 3 (id=2894):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4008081)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listxattr(0x0, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})

14.735676093s ago: executing program 3 (id=2896):
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)

13.98410699s ago: executing program 7 (id=2899):
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket(0x2, 0x80805, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x9, 0xb0, 0x65, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "dcb21272776694cc2ca3182a49d234405593a213bf79fd34cb9f17c207abbb71", "728a06fff618e9fd1ab3a9893bf04964a42dcf932a6a845529b10d0eea3717ce8c0b54a62ea04f6c55f20db0344616fb", "60c38bbc7c462388e5ca18f903516385091d7625386329ee57144801", {"7fc030ad0b4b6e7e3169a63c351f47c7", "d2f21d52f5b88ca047543dde3e450804"}}}}}}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080)

13.706536041s ago: executing program 3 (id=2900):
socket$rxrpc(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x4000000001, 0x0, 0x3, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x44}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

11.909493987s ago: executing program 5 (id=2901):
unshare(0x100000)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a8000000003"], 0x38}}, 0x20000000)
r8 = dup(r6)
syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000007}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe64a, 0x2, 0x20000000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x2, 0xffffffff}, <r9=>0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
ioctl$OCFS2_IOC_UNRESVSP(r9, 0x40305829, 0x0)
r10 = dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x94)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89802)

10.589310707s ago: executing program 3 (id=2903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3, 0x2000000, r4}, 0x10)

10.552141909s ago: executing program 7 (id=2904):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000080), 0x12)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f00000001c0))
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4086, 0x3f, 0xff6, 0x4}, 0x28)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r4, &(0x7f00000001c0), 0x12)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0xf0}, 0x1, 0x0, 0x0, 0x20000044}, 0x28000800)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})

10.377767784s ago: executing program 6 (id=2905):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000))
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

9.587868657s ago: executing program 7 (id=2906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

8.094482683s ago: executing program 1 (id=2907):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000004c0), 0x0)
close(0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000500)={'bond0\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600)='+dummy0', 0x7)
close(r2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000680)={0x0, 'bond0\x00', {0x1}})

7.909979474s ago: executing program 6 (id=2908):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f, 0x3}}, 0x20)
r0 = io_uring_setup(0x6ded, &(0x7f0000000000)={0x0, 0x4279, 0x8, 0x801, 0x296})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000340)={0xa8, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xf633, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000005, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffdf, 0xffff, 0xffffffffffffffff, 0x1ff, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x8000000000000001, 0xffffffffffffffff, 0x5, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0x400009, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0xffffdffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9c, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000000002, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x1000, 0x3, 0x1, 0x2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x8, 0x7ffe, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffff7fffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000007, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffbffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff]})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000001000000000000000018a3b024912a33fa07741bd5b62a6b26d76757562e4d9f0163735aa132c0c8784c95d08406173905dd8d658c67948b86371e8eb6", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x18}, 0x94)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20)

7.755400521s ago: executing program 5 (id=2909):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@dmask={'dmask', 0x3d, 0x885}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}]}, 0x1, 0x14d4, &(0x7f00000015c0)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast2}, 0x4, 0x1, 0x0, 0x1}}, 0x2e)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0})

6.69758814s ago: executing program 5 (id=2910):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r4, 0xb2}, 0x0, &(0x7f0000000a00)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bb", 0x0)

6.584640936s ago: executing program 1 (id=2911):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

5.591929445s ago: executing program 5 (id=2912):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
socket$inet(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), &(0x7f0000000600)=@udp=r1, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4}, 0x14)
syz_emit_ethernet(0x5f0, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x5ba, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0x5ba, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}, "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"}}}}}}}, 0x0)

5.243556401s ago: executing program 1 (id=2913):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x10, 0x1, 0x9, 0x72, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x85, 0x8}})
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.101559033s ago: executing program 5 (id=2914):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x1ff, 0x33ba8, 0x7]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)

5.045938518s ago: executing program 7 (id=2915):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))
ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc01c586b, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4)

3.935310694s ago: executing program 5 (id=2916):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
unshare(0x8040480)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)

3.247132401s ago: executing program 6 (id=2917):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/16, 0x10}, 0x3}], 0x1, 0x23, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

2.515639309s ago: executing program 1 (id=2918):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0xe000000)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="180000009100000000000000010a000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x777)
write(0xffffffffffffffff, 0x0, 0x0)

1.742938798s ago: executing program 7 (id=2919):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r6})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

1.447232697s ago: executing program 1 (id=2920):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

1.211681632s ago: executing program 7 (id=2921):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff)
ftruncate(r0, 0x1000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='./img\n', 0x6)
write(0xffffffffffffffff, &(0x7f0000000300)='1\n\x00', 0x2)
close(0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='1\n', 0x2)

43.913949ms ago: executing program 1 (id=2922):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd24, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x82004}, 0x80000)

0s ago: executing program 3 (id=2923):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r0, 0x7)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r1, 0x100)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = socket$inet(0xa, 0x5, 0x0)
listen(r3, 0x1)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x8)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)

kernel console output (not intermixed with test programs):

ommit
[  337.748587][T10137] BTRFS info (device loop5): enabling free space tree
[  337.748604][T10137] BTRFS info (device loop5): enabling auto defrag
[  337.748624][T10137] BTRFS info (device loop5): use lzo compression, level 1
[  337.748646][T10137] BTRFS info (device loop5): max_inline set to 4096
[  338.081007][ T5711] usb 7-1: USB disconnect, device number 3
[  338.167577][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  338.167597][   T33] audit: type=1800 audit(1790197462.076:481): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1305" name="file1" dev="loop5" ino=260 res=0 errno=0
[  338.789656][ T7084] BTRFS info (device loop5): last unmount of filesystem 88cb69b3-ae7c-48fd-8b19-98fe5f013061
[  339.226366][T10178] overlayfs: failed to clone upperpath
[  340.836074][T10204] kernel read not supported for file /hugetlb.1GB.rsvd.usage_in_bytes (pid: 10204 comm: syz.3.1319)
[  340.849322][   T33] audit: type=1800 audit(1790197464.736:482): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1319" name="hugetlb.1GB.rsvd.usage_in_bytes" dev="mqueue" ino=29989 res=0 errno=0
[  341.182404][T10206] loop4: detected capacity change from 0 to 8
[  342.612310][T10233] 9p: Bad value for 'wfdno'
[  342.904045][T10226] 8021q: adding VLAN 0 to HW filter on device bond1
[  343.790148][T10229] 8021q: adding VLAN 0 to HW filter on device bond1
[  343.790523][T10229] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  343.796433][T10229] bond1: (slave gre1): Error -95 calling set_mac_address
[  343.945969][T10231] macvlan2: entered promiscuous mode
[  343.945994][T10231] macvlan2: entered allmulticast mode
[  343.946666][T10231] bond1: entered promiscuous mode
[  343.963503][T10231] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  344.014737][T10231] bond1: left promiscuous mode
[  344.290779][T10247] kvm: pic: non byte write
[  344.419983][T10252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.498506][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  347.767838][T10273] loop5: detected capacity change from 0 to 32768
[  347.882703][T10273] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  347.981845][T10273] XFS (loop5): Ending clean mount
[  348.080764][T10273] XFS (loop5): Quotacheck needed: Please wait.
[  348.486115][T10273] XFS (loop5): Quotacheck: Done.
[  348.572014][ T7084] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  349.170794][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1360'.
[  349.352076][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'.
[  349.468330][ T5747] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 241 sec
[  349.616990][ T5711] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  349.779689][ T5711] usb 6-1: Using ep0 maxpacket: 32
[  349.790304][ T5711] usb 6-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  349.791505][ T5711] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  349.791533][ T5711] usb 6-1: config 0 has no interface number 0
[  349.791578][ T5711] usb 6-1: config 0 interface 12 has no altsetting 0
[  349.795674][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.795701][ T5711] usb 6-1: Product: syz
[  349.795717][ T5711] usb 6-1: Manufacturer: syz
[  349.795733][ T5711] usb 6-1: SerialNumber: syz
[  349.852417][ T5711] usb 6-1: config 0 descriptor??
[  350.142240][ T5711] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  350.142337][ T5711] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  350.142358][ T5711] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  350.142444][ T5711] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  350.187613][ T5711] usb 6-1: USB disconnect, device number 3
[  350.306808][T10349] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  350.317628][T10349] netlink: 'syz.4.1369': attribute type 1 has an invalid length.
[  350.317651][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'.
[  350.491700][T10353] loop4: detected capacity change from 0 to 256
[  352.950677][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1382'.
[  356.049989][T10439] CIFS: Attempting to mount //127.0.0.1/share
[  356.152704][T10439] CIFS: VFS: Error connecting to socket. Aborting operation.
[  356.152860][T10439] CIFS: VFS: cifs_mount failed w/return code = -101
[  357.084436][T10454] netlink: 'syz.6.1406': attribute type 83 has an invalid length.
[  357.148304][T10460] netlink: 'syz.6.1406': attribute type 83 has an invalid length.
[  358.062664][T10470] tipc: Started in network mode
[  358.062692][T10470] tipc: Node identity 1000001, cluster identity 4369
[  358.062708][T10470] tipc: Node number set to 16777217
[  358.062976][T10470] tipc: Cannot configure node identity twice
[  358.120196][T10470] tipc: New replicast peer: 127.0.0.1
[  358.122913][T10470] tipc: Enabled bearer <udp:syz0>, priority 10
[  359.333586][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'.
[  361.161955][T10538] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  361.474887][   T33] audit: type=1804 audit(1790197485.376:483): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1439" name="file0" dev="ramfs" ino=30659 res=1 errno=0
[  361.650931][T10556] loop6: detected capacity change from 0 to 512
[  361.653500][T10556] EXT4-fs: Ignoring removed i_version option
[  361.653575][T10556] EXT4-fs: Ignoring removed bh option
[  361.684666][T10556] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1442: inode #13: comm syz.6.1442: iget: illegal inode #
[  361.684702][T10556] loop6: lost filesystem error report for type 5 error -117
[  361.697823][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  361.697848][    C1] EXT4-fs (loop6): initial error at time 1790197485: ext4_orphan_get:1403
[  361.697873][    C1] EXT4-fs (loop6): last error at time 1790197485: ext4_orphan_get:1403
[  361.712743][T10556] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1442: couldn't read orphan inode 13 (err -117)
[  361.712833][T10556] loop6: lost filesystem error report for type 5 error -117
[  361.821517][T10556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.250796][T10569] netlink: 'syz.1.1447': attribute type 1 has an invalid length.
[  362.255327][ T8739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.418655][T10569] bond1: entered promiscuous mode
[  362.419827][T10569] 8021q: adding VLAN 0 to HW filter on device bond1
[  362.486078][T10576] 8021q: adding VLAN 0 to HW filter on device bond1
[  362.496382][T10576] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  362.528071][T10576] bond1: (slave ip6gre1): Error -95 calling set_mac_address
[  363.651948][T10590] loop6: detected capacity change from 0 to 2048
[  363.710094][T10590]  loop6: p1 p3
[  363.710094][T10590]  p1: <netbsd: (ignored 240 more) >
[  363.710348][T10590] loop6: p1 size 16777216 extends beyond EOD, truncated
[  363.754696][T10590] loop6: p3 start 3036741376 is beyond EOD, truncated
[  364.629974][T10609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  364.635084][T10609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  365.237760][T10615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  367.678412][T10650] loop6: detected capacity change from 0 to 1024
[  367.717219][T10650] EXT4-fs: Ignoring removed bh option
[  367.720887][T10650] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block
[  367.720887][T10650] 
[  371.883010][T10715] fuse: fd is not a fuse device
[  371.952465][   T33] audit: type=1326 audit(1790197495.856:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.3.1495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7fc00000
[  372.589595][   T33] audit: type=1326 audit(1790197496.496:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.3.1495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10db79e159 code=0x7fc00000
[  375.746453][T10756] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  376.931121][T10770] usb usb8: usbfs: process 10770 (syz.6.1513) did not claim interface 0 before use
[  377.681626][T10770] pimreg: entered allmulticast mode
[  377.755544][T10770] pimreg: left allmulticast mode
[  378.580086][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  378.580175][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  380.667276][ T5621] Bluetooth: hci4: command 0x0406 tx timeout
[  382.741232][T10847] loop6: detected capacity change from 0 to 1024
[  382.746819][T10847] EXT4-fs: Ignoring removed orlov option
[  382.835820][T10847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  383.174145][T10855] netlink: 'syz.5.1541': attribute type 1 has an invalid length.
[  383.195332][T10858] fuse: fd is not a fuse device
[  383.250104][T10855] bond1: entered promiscuous mode
[  383.251114][T10855] bond1: entered allmulticast mode
[  383.251464][T10855] 8021q: adding VLAN 0 to HW filter on device bond1
[  383.301363][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1541'.
[  383.354670][T10859] erspan1: entered allmulticast mode
[  383.369924][T10859] bond1: (slave erspan1): making interface the new active one
[  383.369948][T10859] erspan1: entered promiscuous mode
[  383.378055][T10859] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  383.442384][T10855] bond1 (unregistering): (slave erspan1): Releasing active interface
[  383.442413][T10855] erspan1: left promiscuous mode
[  383.460585][T10855] bond1 (unregistering): Released all slaves
[  383.465118][T10861] fuse: fd is not a fuse device
[  383.764270][ T8739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.243384][T10872] netlink: 'syz.6.1546': attribute type 1 has an invalid length.
[  385.215271][T10872] 8021q: adding VLAN 0 to HW filter on device bond2
[  385.327183][T10881] bond2: (slave geneve2): making interface the new active one
[  385.334404][T10881] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  385.447225][ T7649] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.447712][ T7649] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.447749][ T7649] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.447782][ T7649] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.686831][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'.
[  385.754666][T10879] ceph: No mds server is up or the cluster is laggy
[  385.781920][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1554'.
[  385.984098][ T7649] smc: removing ib device syz1
[  386.837465][T10902] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1557'.
[  386.845233][T10903] loop6: detected capacity change from 0 to 512
[  386.931174][ T7649] smbdirect: ib_dev[syz1] removed
[  389.257473][ T5719] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  389.432296][ T5719] usb 7-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.40
[  389.434910][ T5719] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  389.434961][ T5719] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  389.434990][ T5719] usb 7-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  389.435019][ T5719] usb 7-1: config 1 interface 0 has no altsetting 0
[  389.467939][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.467961][ T5719] usb 7-1: Product: syz
[  389.467975][ T5719] usb 7-1: Manufacturer: syz
[  389.467989][ T5719] usb 7-1: SerialNumber: syz
[  389.522146][T10916] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  389.522317][T10916] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  390.019269][ T5719] rtl8150 7-1:1.0: couldn't find required endpoints
[  390.019513][ T5719] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[  390.058559][ T5719] usb 7-1: USB disconnect, device number 4
[  395.210528][   T33] audit: type=1804 audit(1790197519.116:486): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1590" name="file0" dev="tmpfs" ino=1871 res=1 errno=0
[  395.413952][T11038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.189667][T11098] netlink: 'syz.4.1606': attribute type 1 has an invalid length.
[  399.471737][T11098] 8021q: adding VLAN 0 to HW filter on device bond1
[  399.536368][T11103] 8021q: adding VLAN 0 to HW filter on device batadv1
[  399.552195][T11103] bond1: (slave batadv1): making interface the new active one
[  399.568297][T11103] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  399.598349][T11105] bond1 (unregistering): (slave batadv1): Releasing active interface
[  399.603244][T11105] bond1 (unregistering): Released all slaves
[  399.636964][ T5711] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  399.769927][ T7634] IPVS: starting estimator thread 0...
[  399.811224][ T5711] usb 7-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  399.814631][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  399.814660][ T5711] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  399.814687][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  399.814719][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.855508][ T5711] usb 7-1: config 0 descriptor??
[  399.880759][T11118] IPVS: using max 38 ests per chain, 91200 per kthread
[  399.884276][T11115] IPVS: Error connecting to the multicast addr
[  400.132028][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.134645][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  400.203015][ T5711] ath6kl: Failed to submit usb control message: -71
[  400.203056][ T5711] ath6kl: unable to send the bmi data to the device: -71
[  400.203066][ T5711] ath6kl: Unable to send get target info: -71
[  400.281745][ T5711] ath6kl: Failed to init ath6kl core: -71
[  400.292948][ T5711] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  400.347052][ T5711] usb 7-1: USB disconnect, device number 5
[  403.290247][T11163] netlink: 'syz.3.1627': attribute type 1 has an invalid length.
[  403.443840][T11163] 8021q: adding VLAN 0 to HW filter on device bond3
[  405.412371][T11166] bond3: (slave veth3): Enslaving as an active interface with a down link
[  405.414790][T11167] veth0_virt_wifi: entered promiscuous mode
[  405.469302][T11167] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with a down link
[  405.555619][T11171] bond3: (slave veth0_virt_wifi): Releasing active interface
[  405.642979][T11182] team0 (unregistering): Port device team_slave_0 removed
[  405.655543][T11182] team0 (unregistering): Port device team_slave_1 removed
[  408.111438][T11219] loop6: detected capacity change from 0 to 8
[  409.184367][ T7655] IPVS: starting estimator thread 0...
[  409.310124][T11240] IPVS: using max 29 ests per chain, 69600 per kthread
[  409.938037][ T5711] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 301 sec
[  411.242860][   T54] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10
[  411.559086][T11285] 8021q: adding VLAN 0 to HW filter on device bond3
[  411.652131][T11289] bond3: (slave ip6erspan0): making interface the new active one
[  411.675642][T11289] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  413.300677][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  415.377027][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  416.264208][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  416.323452][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.457632][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  418.611945][T11420] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 11420 comm: syz.5.1702)
[  418.727449][   T33] audit: type=1800 audit(1790197542.516:487): pid=11420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1702" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=34352 res=0 errno=0
[  420.104906][T11436] batman_adv: batadv0: Adding interface: dummy0
[  420.104925][T11436] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  420.104960][T11436] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  422.614353][T11468] fuse: Bad value for 'fd'
[  423.111047][T11473] netlink: 'syz.4.1716': attribute type 11 has an invalid length.
[  423.204258][T11473] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.231774][T11473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.352308][T11473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.407522][T11473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  423.407549][T11473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  423.476375][T11473] veth1_vlan: left promiscuous mode
[  423.494137][T11473] veth0_vlan: left promiscuous mode
[  423.509306][T11473] veth0_vlan: entered promiscuous mode
[  423.560187][T11473] veth1_vlan: entered promiscuous mode
[  423.609906][T11473] veth1_macvtap: left promiscuous mode
[  423.637191][T11473] veth0_macvtap: left promiscuous mode
[  423.643424][T11473] veth0_macvtap: entered promiscuous mode
[  423.654885][T11473] veth1_macvtap: entered promiscuous mode
[  423.811825][T11473] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  423.826411][T11473] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  423.868185][T11473] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  423.869451][T11473] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  423.875142][T11473] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  423.977543][ T7627] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.977644][ T7627] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.977788][ T7627] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.977828][ T7627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.054880][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.054993][ T1481] bridge0: port 1(bridge_slave_0) entered listening state
[  424.074503][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.074638][ T1481] bridge0: port 2(bridge_slave_1) entered listening state
[  424.198036][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1718'.
[  424.903048][T11507] create_pit_timer: 18 callbacks suppressed
[  424.903079][T11507] kvm: requested 179352 ns i8254 timer period limited to 200000 ns
[  424.903221][T11507] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  424.906824][T11507] kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[  424.948571][T11507] kvm: requested 159238 ns i8254 timer period limited to 200000 ns
[  424.948775][T11507] kvm: requested 50285 ns i8254 timer period limited to 200000 ns
[  424.949958][T11507] kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[  424.950148][T11507] kvm: requested 55314 ns i8254 timer period limited to 200000 ns
[  424.951145][T11507] kvm: requested 167619 ns i8254 timer period limited to 200000 ns
[  424.951676][T11507] kvm: requested 26819 ns i8254 timer period limited to 200000 ns
[  425.072741][T11507] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  425.771026][T11522] loop4: detected capacity change from 0 to 2048
[  425.825278][T11522]  loop4: p1 p3
[  425.825278][T11522]  p1: <netbsd: (ignored 240 more) >
[  425.825499][T11522] loop4: p1 size 16777216 extends beyond EOD, truncated
[  425.894185][T11522] loop4: p3 start 3036741376 is beyond EOD, truncated
[  426.243588][   T33] audit: type=1326 audit(1790197550.146:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  426.243734][   T33] audit: type=1326 audit(1790197550.146:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  426.276554][   T33] audit: type=1326 audit(1790197550.176:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  426.276735][   T33] audit: type=1326 audit(1790197550.176:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  426.308716][   T33] audit: type=1326 audit(1790197550.206:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  426.374160][   T33] audit: type=1326 audit(1790197550.276:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10db75e98e code=0x7ffc0000
[  426.393263][   T33] audit: type=1326 audit(1790197550.296:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10db75e98e code=0x7ffc0000
[  426.405772][   T33] audit: type=1326 audit(1790197550.306:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10db75e98e code=0x7ffc0000
[  426.424113][   T33] audit: type=1326 audit(1790197550.326:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10db75e98e code=0x7ffc0000
[  426.431481][   T33] audit: type=1326 audit(1790197550.336:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.3.1730" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10db75e98e code=0x7ffc0000
[  426.594848][ T6292] udevd[6292]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  427.614371][T11558] jffs2: notice: (11558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  427.956821][T11566] loop4: detected capacity change from 0 to 1024
[  427.967696][T11566] EXT4-fs: Ignoring removed bh option
[  428.003625][T11566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  428.003722][T11566] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.098752][T11566] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 3)
[  428.123436][T11566] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  428.123470][T11566] EXT4-fs (loop4): This should not happen!! Data will be lost
[  428.123470][T11566] 
[  428.169533][T11570] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.265560][T11570] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.275760][T11565] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.280187][T11565] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.289281][T11565] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.364899][T11570] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.365452][T11570] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.366239][T11570] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.408566][T11570] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 1)
[  428.692856][T11575] loop6: detected capacity change from 0 to 8
[  428.768277][T11575] unable to read xattr id index table
[  430.343464][T11591] netlink: 'syz.1.1752': attribute type 39 has an invalid length.
[  430.662937][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  431.010788][T11599] fuse: Bad value for 'fd'
[  432.857726][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'.
[  434.230416][T11627] team0: entered promiscuous mode
[  434.230443][T11627] team0: entered allmulticast mode
[  434.522081][T11646] netlink: 'syz.3.1773': attribute type 1 has an invalid length.
[  434.522099][T11646] netlink: 'syz.3.1773': attribute type 2 has an invalid length.
[  435.728858][T11657] netlink: 'syz.1.1774': attribute type 1 has an invalid length.
[  435.828622][T11657] 8021q: adding VLAN 0 to HW filter on device bond2
[  436.117586][T11661] 8021q: adding VLAN 0 to HW filter on device batadv1
[  436.964764][T11669] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  437.243734][T11661] bond2: (slave batadv1): making interface the new active one
[  437.354431][T11661] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  438.480816][T11664] bond2 (unregistering): (slave batadv1): Releasing active interface
[  438.501553][T11664] bond2 (unregistering): Released all slaves
[  440.018836][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  440.018886][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  440.974957][T11694] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1784'.
[  442.150797][T11719] fuse: fd is not a fuse device
[  442.304596][   T33] kauditd_printk_skb: 78 callbacks suppressed
[  442.304617][   T33] audit: type=1800 audit(1790197566.206:576): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1796" name="nullb0" dev="tmpfs" ino=1437 res=0 errno=0
[  446.543839][T11776] team0: left allmulticast mode
[  446.543863][T11776] team_slave_0: left allmulticast mode
[  446.543882][T11776] team_slave_1: left allmulticast mode
[  446.543948][T11776] team0: left promiscuous mode
[  446.543964][T11776] team_slave_0: left promiscuous mode
[  446.544267][T11776] team_slave_1: left promiscuous mode
[  446.544839][T11776] bridge0: port 3(team0) entered disabled state
[  446.617379][T11776] bridge_slave_0: left allmulticast mode
[  446.617406][T11776] bridge_slave_0: left promiscuous mode
[  446.617642][T11776] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.665425][T11776] bridge_slave_1: left allmulticast mode
[  446.665453][T11776] bridge_slave_1: left promiscuous mode
[  446.665666][T11776] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.706734][T11776] bond0: (slave bond_slave_0): Releasing backup interface
[  446.731054][T11776] bond0: (slave bond_slave_1): Releasing backup interface
[  446.767844][T11776] team0: Port device team_slave_0 removed
[  446.783036][T11776] team0: Port device team_slave_1 removed
[  446.783435][T11776] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.784544][T11776] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.815810][T11776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  447.034560][T11783] fuse: fd is not a fuse device
[  448.465201][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1821'.
[  448.781616][T11825] uprobe: syz.6.1826:11825 failed to unregister, leaking uprobe
[  448.781687][T11825] uprobe: syz.6.1826:11825 failed to unregister, leaking uprobe
[  449.051545][T11836] netlink: 'syz.4.1831': attribute type 12 has an invalid length.
[  449.335517][T11848] batman_adv: batadv0: Removing interface: dummy0
[  449.348487][T11848] bridge_slave_0: left allmulticast mode
[  449.348512][T11848] bridge_slave_0: left promiscuous mode
[  449.348739][T11848] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.390296][T11848] bridge_slave_1: left allmulticast mode
[  449.390320][T11848] bridge_slave_1: left promiscuous mode
[  449.390544][T11848] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.780314][T11848] bond0: (slave bond_slave_0): Releasing backup interface
[  449.812475][T11848] bond0: (slave bond_slave_1): Releasing backup interface
[  449.837045][T11848] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.842760][T11848] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.869885][T11848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  449.875225][T11856] tipc: Enabled bearer <eth:team0>, priority 0
[  450.221887][   T33] audit: type=1326 audit(1790197574.126:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.222148][   T33] audit: type=1326 audit(1790197574.126:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.247156][   T33] audit: type=1326 audit(1790197574.126:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.250828][   T33] audit: type=1326 audit(1790197574.156:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.251241][   T33] audit: type=1326 audit(1790197574.156:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.253105][   T33] audit: type=1326 audit(1790197574.156:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.269014][   T33] audit: type=1326 audit(1790197574.156:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.313201][   T33] audit: type=1326 audit(1790197574.186:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.343808][   T33] audit: type=1326 audit(1790197574.246:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.343977][   T33] audit: type=1326 audit(1790197574.246:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.1.1845" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7447f9e159 code=0x7ffc0000
[  450.537381][T11876] fuse: fd is not a fuse device
[  450.797987][T11882] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1849'.
[  450.865265][T11886] netlink: 'syz.5.1850': attribute type 1 has an invalid length.
[  450.928496][T11886] 8021q: adding VLAN 0 to HW filter on device bond1
[  451.025537][T11889] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  451.188939][T11896] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  451.674532][T11911] futex_wake_op: syz.5.1857 tries to shift op by 144; fix this program
[  452.140564][T11919] bridge_slave_0: left allmulticast mode
[  452.140594][T11919] bridge_slave_0: left promiscuous mode
[  452.168678][T11919] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.295692][T11919] bridge_slave_1: left allmulticast mode
[  452.295713][T11919] bridge_slave_1: left promiscuous mode
[  452.295873][T11919] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.398130][T11919] bond0: (slave bond_slave_0): Releasing backup interface
[  452.503452][T11919] bond0: (slave bond_slave_1): Releasing backup interface
[  452.559675][T11919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.559701][T11919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.589038][T11919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  452.727586][T11911] futex_wake_op: syz.5.1857 tries to shift op by 144; fix this program
[  453.323516][T11943] netlink: 'syz.5.1867': attribute type 1 has an invalid length.
[  453.432913][T11943] 8021q: adding VLAN 0 to HW filter on device bond2
[  453.690547][T11951] 0x00000000000a-0x000000000309 : ""
[  453.888894][T11951] ftl_cs: FTL header corrupt!
[  456.613565][T11943] bond2: (slave gretap1): making interface the new active one
[  456.754412][T11943] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  458.514261][T11975] fuse: fd is not a fuse device
[  461.838019][T12021] fuse: fd is not a fuse device
[  462.741223][T12028] netlink: 'syz.5.1896': attribute type 4 has an invalid length.
[  462.787713][T12028] netlink: 'syz.5.1896': attribute type 4 has an invalid length.
[  463.792611][T12026] overlayfs: failed to clone upperpath
[  464.055354][T12043] netlink: 'syz.6.1900': attribute type 1 has an invalid length.
[  464.236657][T12043] bond4: (slave gretap1): making interface the new active one
[  464.259873][T12043] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  466.963551][T12070] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  470.099164][  T991] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 362 sec
[  475.176002][T12159] bridge0: port 1(erspan0) entered blocking state
[  475.179350][T12159] bridge0: port 1(erspan0) entered disabled state
[  475.179812][T12159] erspan0: entered allmulticast mode
[  475.364810][T12159] erspan0: entered promiscuous mode
[  475.427676][T12159] erspan0: left allmulticast mode
[  475.427713][T12159] erspan0: left promiscuous mode
[  475.429353][T12159] bridge0: port 1(erspan0) entered disabled state
[  476.395370][T12171] lo: entered allmulticast mode
[  476.438991][T12171] lo: left allmulticast mode
[  477.151565][T12184] loop6: detected capacity change from 0 to 4096
[  477.206291][T12184] EXT4-fs: Ignoring removed orlov option
[  477.220246][T12184] EXT4-fs (loop6): Test dummy encryption mode enabled
[  477.265686][T12184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.323559][ T5747] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  477.521620][ T5747] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  477.816620][T12193] fido_id[12193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  478.044157][ T8739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.709827][T12250] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1964'.
[  482.894309][T12250] team0: Port device dummy0 removed
[  483.662549][T12267] syzkaller0: entered promiscuous mode
[  483.662573][T12267] syzkaller0: entered allmulticast mode
[  485.457922][T12285] ceph: No mds server is up or the cluster is laggy
[  485.672362][ T7627] IPVS: starting estimator thread 0...
[  485.743619][T12296] IPVS: fo: FWM 3 0x00000003 - no destination available
[  485.757033][T12298] IPVS: using max 26 ests per chain, 62400 per kthread
[  486.524600][ T7636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.768778][T12312] loop6: detected capacity change from 0 to 8192
[  487.114099][ T7636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.349093][T12319] 8021q: adding VLAN 0 to HW filter on device bond3
[  488.320487][T12321] bond3: (slave geneve2): making interface the new active one
[  488.335157][T12321] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  489.115712][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'.
[  489.391476][ T7636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.655971][T12346] netlink: 'syz.3.1991': attribute type 5 has an invalid length.
[  489.655995][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'.
[  489.800738][ T7636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.263516][ T7636] bridge_slave_1: left allmulticast mode
[  491.268428][ T7636] bridge_slave_1: left promiscuous mode
[  491.295429][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.344027][ T7636] bridge_slave_0: left allmulticast mode
[  491.344053][ T7636] bridge_slave_0: left promiscuous mode
[  491.346308][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.402556][T12388] fuse: fd is not a fuse device
[  492.089711][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2003'.
[  492.430323][ T7636] bond1 (unregistering): (slave geneve2): Releasing active interface
[  492.653120][ T7636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  492.656788][ T7636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.743214][ T7636] bond0 (unregistering): Released all slaves
[  492.861984][ T7636] bond1 (unregistering): Released all slaves
[  492.912817][ T7636] bond2 (unregistering): Released all slaves
[  493.045117][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[  493.579526][T12424] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  494.189325][ T7636] hsr_slave_0: left promiscuous mode
[  494.210933][ T7636] hsr_slave_1: left promiscuous mode
[  494.211972][ T7636] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.235826][ T7636] batman_adv: batadv0: Removing interface: batadv_slave_1
[  497.971192][ T7636] team0 (unregistering): Port device team_slave_1 removed
[  498.009717][ T7636] team0 (unregistering): Port device team_slave_0 removed
[  498.399951][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[  498.694342][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'.
[  498.843720][T12494] loop6: detected capacity change from 0 to 512
[  498.915626][T12494] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2028: iget: bad i_size value: 38620345925642
[  498.915936][T12494] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  498.916883][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  498.916905][    C0] EXT4-fs (loop6): initial error at time 1790197622: ext4_orphan_get:1403: inode 15
[  498.916939][    C0] EXT4-fs (loop6): last error at time 1790197622: ext4_orphan_get:1403: inode 15
[  498.923813][T12494] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2028: couldn't read orphan inode 15 (err -117)
[  498.923901][T12494] loop6: lost filesystem error report for type 5 error -117
[  498.966173][T12494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.182014][T12503] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.2028: bg 0: block 5: invalid block bitmap
[  500.239579][T12501] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  500.382255][T12503] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 20 with error 28
[  500.382294][T12503] EXT4-fs (loop6): This should not happen!! Data will be lost
[  500.382294][T12503] 
[  500.382311][T12503] EXT4-fs (loop6): Total free blocks count 0
[  500.382328][T12503] EXT4-fs (loop6): Free/Dirty block details
[  500.382384][T12503] EXT4-fs (loop6): free_blocks=0
[  500.382420][T12503] EXT4-fs (loop6): dirty_blocks=24
[  500.382435][T12503] EXT4-fs (loop6): Block reservation details
[  500.382450][T12503] EXT4-fs (loop6): i_reserved_data_blocks=24
[  500.510936][T12494] EXT4-fs (loop6): shut down requested (0)
[  501.460567][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  501.460652][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  502.711539][T12543] xt_limit: Overflow, try lower: 1207959552/384
[  502.755421][T12539] Can't find ip_set type bitmap:ip
[  503.603743][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  503.603764][   T33] audit: type=1800 audit(1790197627.506:610): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2039" name="file1" dev="tmpfs" ino=1741 res=0 errno=0
[  503.700886][T12553] fuse: fd is not a fuse device
[  503.732852][T12554] netlink: 'syz.3.2042': attribute type 4 has an invalid length.
[  503.744382][T12554] netlink: 'syz.3.2042': attribute type 4 has an invalid length.
[  505.152675][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3
[  505.241001][T12586] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  505.724298][T12599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  506.334033][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2059'.
[  506.450020][T12626] netlink: 'syz.6.2059': attribute type 10 has an invalid length.
[  506.450042][T12626] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2059'.
[  507.272255][T12633] syzkaller0: entered promiscuous mode
[  507.272282][T12633] syzkaller0: entered allmulticast mode
[  508.836286][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4
[  509.655053][T12656] xt_socket: unknown flags 0x4c
[  510.093409][T12668] __vm_enough_memory: pid: 12668, comm: syz.6.2069, bytes: 4503599627366400 not enough memory for the allocation
[  510.841093][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.844816][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.846053][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.880818][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.885288][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.912488][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.913917][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.915272][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.916551][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.954390][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.955653][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.984188][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.985418][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.986680][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.991620][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  510.994834][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.002278][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.005354][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.307183][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.318329][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.325549][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.342251][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.351838][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.359475][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.372337][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.511110][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.542782][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  511.588879][T12671] 9pnet_fd: p9_fd_create_tcp (12671): problem connecting socket to 127.0.0.1
[  513.725853][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2081'.
[  516.223902][T12723] netlink: 'syz.3.2086': attribute type 1 has an invalid length.
[  516.237728][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'.
[  516.237868][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'.
[  517.464671][T12732] bond5: entered promiscuous mode
[  517.617533][T12737] vcan1: entered promiscuous mode
[  517.617557][T12737] vcan1: entered allmulticast mode
[  519.912893][T12763] netlink: 'syz.1.2095': attribute type 11 has an invalid length.
[  519.984242][T12763] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.002182][T12763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.133936][T12763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  520.133964][T12763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  520.243967][T12763] veth1_macvtap: left promiscuous mode
[  520.259190][T12763] veth0_macvtap: left promiscuous mode
[  520.275640][T12763] veth0_macvtap: entered promiscuous mode
[  520.292469][T12763] veth1_macvtap: entered promiscuous mode
[  520.363451][T12763] 8021q: adding VLAN 0 to HW filter on device eth0
[  520.380127][T12763] 8021q: adding VLAN 0 to HW filter on device eth1
[  520.481154][T12763] 8021q: adding VLAN 0 to HW filter on device eth2
[  520.693806][T12763] 8021q: adding VLAN 0 to HW filter on device eth3
[  520.694632][T12763] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  520.712857][ T7645] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.720248][ T7645] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  520.720741][ T7645] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.728685][ T7645] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.729204][ T7645] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.063053][T12791] netlink: 'syz.1.2102': attribute type 4 has an invalid length.
[  522.093959][T12791] netlink: 'syz.1.2102': attribute type 4 has an invalid length.
[  522.302028][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  522.321676][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  522.324388][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  522.345298][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  522.365004][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  524.497051][   T54] Bluetooth: hci5: command tx timeout
[  525.817807][T12851] fuse: fd is not a fuse device
[  525.956520][T12857] netlink: 'syz.3.2117': attribute type 1 has an invalid length.
[  526.652099][   T54] Bluetooth: hci5: command tx timeout
[  526.977942][T12857] 8021q: adding VLAN 0 to HW filter on device bond4
[  527.081386][T12861] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  527.134273][T12863] bond4: entered promiscuous mode
[  527.134301][T12863] bond4: entered allmulticast mode
[  527.241531][T12865] macvlan2: entered promiscuous mode
[  527.241558][T12865] macvlan2: entered allmulticast mode
[  527.246281][T12865] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  527.909498][ T1475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.561647][T12900] syzkaller0: entered promiscuous mode
[  528.561682][T12900] syzkaller0: entered allmulticast mode
[  528.743766][   T54] Bluetooth: hci5: command tx timeout
[  530.577064][ T5747] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 422 sec
[  530.817824][   T54] Bluetooth: hci5: command tx timeout
[  534.352225][ T1475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.670602][ T1475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.748618][T12965] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  535.861139][ T1475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.263503][T12996] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2141'.
[  537.666485][T12792] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.666657][T12792] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.667326][T12792] bridge_slave_0: entered allmulticast mode
[  537.690324][T12792] bridge_slave_0: entered promiscuous mode
[  537.978704][T12792] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.978810][T12792] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.978963][T12792] bridge_slave_1: entered allmulticast mode
[  537.984512][T12792] bridge_slave_1: entered promiscuous mode
[  538.296411][T12792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  538.443301][T12792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  538.513598][T12792] team0: Port device team_slave_0 added
[  538.623397][T12792] team0: Port device team_slave_1 added
[  538.928785][T12792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.928804][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.928833][T12792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.933990][T12792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.934006][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.934036][T12792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.125262][ T1475] bond0 (unregistering): Released all slaves
[  541.424116][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5
[  541.460770][T12792] hsr_slave_0: entered promiscuous mode
[  541.479675][T12792] hsr_slave_1: entered promiscuous mode
[  541.482914][T12792] debugfs: 'hsr0' already exists in 'hsr'
[  541.482973][T12792] Cannot create hsr debugfs directory
[  541.726965][ T1475] tipc: Disabling bearer <eth:syzkaller0>
[  541.727452][ T1475] tipc: Left network mode
[  541.829492][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'.
[  542.765170][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2158'.
[  543.002685][T13080] hsr_slave_1 (unregistering): left promiscuous mode
[  547.568572][ T1475] hsr_slave_0: left promiscuous mode
[  547.569317][ T1475] hsr_slave_1: left promiscuous mode
[  547.755054][ T1475] veth1_macvtap: left promiscuous mode
[  547.755122][ T1475] veth0_macvtap: left promiscuous mode
[  547.755298][ T1475] veth1_vlan: left promiscuous mode
[  547.755387][ T1475] veth0_vlan: left promiscuous mode
[  547.878318][T13129] loop6: detected capacity change from 0 to 1024
[  547.896464][T13129] hfsplus: Unknown parameter ''
[  548.973846][T13145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2172'.
[  551.133616][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6
[  551.783563][T12792] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  551.869682][T12792] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  551.883955][T12792] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  553.326957][T12792] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  553.334006][T12792] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  553.446655][T12792] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  553.455182][T12792] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  553.599683][T12792] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  554.236036][T13193] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  555.363481][T12792] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.485461][T12792] 8021q: adding VLAN 0 to HW filter on device team0
[  555.544541][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.544693][ T7651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.646769][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.647049][ T7651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.769262][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7
[  561.067136][T13229] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  561.630318][T12792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.903657][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  562.903701][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  563.128123][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8
[  563.267994][T12792] veth0_vlan: entered promiscuous mode
[  563.322875][T12792] veth1_vlan: entered promiscuous mode
[  563.523751][T12792] veth0_macvtap: entered promiscuous mode
[  563.573120][T12792] veth1_macvtap: entered promiscuous mode
[  564.693665][T12792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  564.773289][T12792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.027480][ T1475] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.027888][ T1475] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.027931][ T1475] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.027972][ T1475] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.744973][T13289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2200'.
[  566.533469][ T7627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.533490][ T7627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.627405][T13292] netlink: 'syz.1.2201': attribute type 1 has an invalid length.
[  566.918973][T13292] bond2: entered promiscuous mode
[  566.923843][T13292] 8021q: adding VLAN 0 to HW filter on device bond2
[  567.006167][T13293] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  567.006192][T13293] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  567.006203][T13293] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  567.309599][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.309623][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.372173][T13297] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  567.372195][T13297] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  572.470883][T13370] bridge0: port 1(macvlan2) entered blocking state
[  572.471227][T13370] bridge0: port 1(macvlan2) entered disabled state
[  572.471392][T13370] macvlan2: entered allmulticast mode
[  572.471410][T13370] ip6gretap0: entered allmulticast mode
[  572.473643][T13370] macvlan2: entered promiscuous mode
[  574.628478][ T5720] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  574.629314][T13383] v: renamed from veth0_vlan
[  574.764864][T13402] vlan0: entered promiscuous mode
[  574.764889][T13402] hsr0: entered promiscuous mode
[  574.765463][T13402] vlan0: entered allmulticast mode
[  574.765480][T13402] hsr0: entered allmulticast mode
[  574.765494][T13402] hsr_slave_0: entered allmulticast mode
[  574.765510][T13402] hsr_slave_1: entered allmulticast mode
[  574.794017][ T5720] usb 8-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  574.828334][ T5720] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.828362][ T5720] usb 8-1: Product: syz
[  574.828378][ T5720] usb 8-1: Manufacturer: syz
[  574.828393][ T5720] usb 8-1: SerialNumber: syz
[  574.853313][ T5720] usb 8-1: config 0 descriptor??
[  574.867713][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'.
[  574.875203][ T5720] ch341 8-1:0.0: ch341-uart converter detected
[  574.899156][T13402] hsr_slave_0: left promiscuous mode
[  574.901026][T13402] hsr_slave_1: left promiscuous mode
[  575.095778][ T5720] usb 8-1: failed to receive control message: -32
[  575.095845][ T5720] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32
[  578.100913][T13410] bridge_slave_0: left allmulticast mode
[  578.100940][T13410] bridge_slave_0: left promiscuous mode
[  578.107037][T13410] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.146016][T13410] bridge_slave_1: left allmulticast mode
[  578.146042][T13410] bridge_slave_1: left promiscuous mode
[  578.146252][T13410] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.231433][T13410] bond0: (slave bond_slave_0): Releasing backup interface
[  578.276439][T13410] bond0: (slave bond_slave_1): Releasing backup interface
[  578.410160][T13410] team0: Port device team_slave_0 removed
[  578.472661][T13410] team0: Port device team_slave_1 removed
[  578.485774][T13410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  578.485794][T13410] batman_adv: batadv0: Removing interface: batadv_slave_0
[  578.539792][T13410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.539816][T13410] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.574232][T13410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  578.768148][ T5711] usb 8-1: USB disconnect, device number 2
[  578.814292][ T5711] ch341 8-1:0.0: device disconnected
[  579.731797][ T5272] v: left promiscuous mode
[  579.974096][T13287] v: entered promiscuous mode
[  582.008868][T13475] bond3: option mode: unable to set because the bond device has slaves
[  582.712450][T13489] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  582.820935][T13489] bond3: (slave macvlan3): Enslaving as an active interface with a down link
[  587.933193][T13538] loop6: detected capacity change from 0 to 131072
[  587.980013][T13538] F2FS-fs (loop6): invalid crc value
[  588.066633][T13538] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  588.087389][T13538] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  588.273459][T13538] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  588.274374][T13538] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  588.280890][T13538] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  588.680405][T13559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.034082][T13567] 9pnet_virtio: no channels available for device syz
[  590.484799][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2268'.
[  590.723061][T13589] bond3: entered promiscuous mode
[  590.723087][T13589] bond3: entered allmulticast mode
[  591.297352][T13287] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 483 sec
[  592.308149][T13612] netlink: 'syz.1.2273': attribute type 1 has an invalid length.
[  592.823163][T13612] 8021q: adding VLAN 0 to HW filter on device bond4
[  593.169755][T13616] vlan0: entered allmulticast mode
[  593.169778][T13616] bond4: entered allmulticast mode
[  593.299116][T13621] bond4: (slave dummy0): making interface the new active one
[  593.299156][T13621] dummy0: entered allmulticast mode
[  593.303633][T13621] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  595.792749][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2279'.
[  596.002392][T13661] bond3: option mode: unable to set because the bond device has slaves
[  596.017861][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'.
[  596.017883][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2283'.
[  596.121248][T13661] 8021q: adding VLAN 0 to HW filter on device bond0
[  596.167512][T13661] bond3: (slave bond0): making interface the new active one
[  596.170822][T13661] bond3: (slave bond0): Enslaving as an active interface with an up link
[  596.389024][T13664] bond3 (unregistering): (slave geneve2): Releasing active interface
[  596.389058][T13664] bond0: entered promiscuous mode
[  596.389075][T13664] bond_slave_0: entered promiscuous mode
[  596.389294][T13664] bond_slave_1: entered promiscuous mode
[  596.432250][T13664] bond3 (unregistering): (slave bond0): Releasing active interface
[  596.432279][T13664] bond0: left promiscuous mode
[  596.432294][T13664] bond_slave_0: left promiscuous mode
[  596.432506][T13664] bond_slave_1: left promiscuous mode
[  596.485030][T13664] bond3 (unregistering): Released all slaves
[  598.440459][T13714] fuse: fd is not a fuse device
[  598.767195][ T5719] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  599.659594][ T5719] usb 7-1: New USB device found: idVendor=0b48, idProduct=1006, bcdDevice=1.00
[  599.792674][ T5719] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  599.796676][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.796704][ T5719] usb 7-1: Product: syz
[  599.796721][ T5719] usb 7-1: Manufacturer: syz
[  599.796737][ T5719] usb 7-1: SerialNumber: syz
[  599.815822][T13746] loop7: detected capacity change from 0 to 256
[  600.156711][T13746] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  600.279872][T13759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2305'.
[  600.783354][T13746] exFAT-fs (loop7): start_clu is invalid cluster(0x0)
[  601.116893][ T5719] ttusb_dec_send_command: command bulk message failed: error -110
[  601.117149][ T5719] ttusb-dec 7-1:1.0: probe with driver ttusb-dec failed with error -110
[  602.696632][T13782] xt_ecn: cannot match TCP bits for non-tcp packets
[  602.744466][T13287] usb 7-1: USB disconnect, device number 6
[  612.696587][T13891] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.943433][T13903] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  612.959400][T13903] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  612.965467][T13903] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  612.990558][T13891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.015877][T13891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  614.098416][ T7667] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.098466][ T7667] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.108670][ T7667] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.108706][ T7667] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.108749][ T7667] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.108777][ T7667] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.108829][ T7667] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.108856][ T7667] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.318599][T13908] loop7: detected capacity change from 0 to 4096
[  614.348850][T13908] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  614.465384][T13908] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  614.465482][T13908] ntfs3(loop7): Failed to load $Extend (-22).
[  614.465503][T13908] ntfs3(loop7): Failed to initialize $Extend.
[  614.537831][   T33] audit: type=1800 audit(1790197738.446:611): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2351" name="nullb0" dev="tmpfs" ino=1437 res=0 errno=0
[  614.707757][T13918] bridge2: entered promiscuous mode
[  614.805207][T13918] x_tables: duplicate underflow at hook 1
[  614.807284][  T991] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  614.961175][  T991] usb 8-1: New USB device found: idVendor=046d, idProduct=c08a, bcdDevice=0.40
[  614.976415][  T991] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 439, setting to 64
[  614.976452][  T991] usb 8-1: config 1 interface 0 has no altsetting 0
[  615.007855][  T991] usb 8-1: string descriptor 0 read error: -22
[  615.008009][  T991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.045059][T13908] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  615.300835][T13908] ntfs3(loop7): ino=5, "/" indx_read_ra
[  615.496082][T13933] ntfs3(loop7): ino=5, "/" indx_read_ra
[  616.368160][T13908] ntfs3(loop7): ino=5, "/" indx_read_ra
[  616.369720][ T7636] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22.
[  616.373845][T13908] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  616.373896][T13908] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  617.566296][T13948] netlink: 'syz.5.2357': attribute type 3 has an invalid length.
[  617.641289][  T991] usbhid 8-1:1.0: can't add hid device: -71
[  617.641397][  T991] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  617.645425][  T991] usb 8-1: USB disconnect, device number 3
[  617.977324][ T7652] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.234120][T13957] loop6: detected capacity change from 0 to 4096
[  618.257270][T13957] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  618.483118][T13957] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  621.640260][T14006] overlayfs: failed to clone upperpath
[  622.688620][ T5719] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  622.838249][ T5719] usb 8-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  622.841251][ T5719] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.909372][ T5719] usb 8-1: config 0 descriptor??
[  622.961990][ T5719] cp210x 8-1:0.0: cp210x converter detected
[  623.400459][T14009] loop7: detected capacity change from 0 to 256
[  623.561624][ T5719] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  623.564642][ T5719] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71
[  623.564701][ T5719] cp210x 8-1:0.0: GPIO initialisation failed: -71
[  623.847686][ T5719] usb 8-1: cp210x converter now attached to ttyUSB0
[  623.920111][ T5719] usb 8-1: USB disconnect, device number 4
[  624.024113][ T5719] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  624.078008][ T5719] cp210x 8-1:0.0: device disconnected
[  624.341049][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  624.341134][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  625.816980][ T7652] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.817926][ T7652] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.818006][ T7652] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.818143][ T7652] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  625.818224][ T7652] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  625.818291][ T7652] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  625.818357][ T7652] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  625.818411][ T7652] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  631.366225][T14101] MTRR 1 not used
[  633.530322][T14118] loop7: detected capacity change from 0 to 128
[  634.237025][T14118] affs: No valid root block on device loop7
[  635.856634][T14125] FAULT_INJECTION: forcing a failure.
[  635.856634][T14125] name failslab, interval 1, probability 0, space 0, times 0
[  635.856683][T14125] CPU: 0 UID: 0 PID: 14125 Comm: syz.6.2397 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  635.856715][T14125] Tainted: [L]=SOFTLOCKUP
[  635.856724][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  635.856741][T14125] Call Trace:
[  635.856751][T14125]  <TASK>
[  635.856768][T14125]  dump_stack_lvl+0xe8/0x150
[  635.856808][T14125]  should_fail_ex+0x3eb/0x540
[  635.856844][T14125]  should_failslab+0xa8/0x100
[  635.856876][T14125]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  635.856915][T14125]  ? alloc_inode+0xb8/0x1b0
[  635.856945][T14125]  ? alloc_inode+0xb8/0x1b0
[  635.856983][T14125]  alloc_inode+0xb8/0x1b0
[  635.857017][T14125]  alloc_anon_inode+0x1e/0x330
[  635.857044][T14125]  dma_buf_export+0x21a/0xab0
[  635.857082][T14125]  udmabuf_create+0xe49/0xf50
[  635.857145][T14125]  ? __pfx_udmabuf_create+0x10/0x10
[  635.857183][T14125]  ? __might_fault+0xaf/0x130
[  635.857222][T14125]  udmabuf_ioctl+0x1f3/0x300
[  635.857263][T14125]  ? lockdep_hardirqs_on+0x7b/0x110
[  635.857296][T14125]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  635.857327][T14125]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  635.857351][T14125]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  635.857374][T14125]  ? __se_sys_ioctl+0xea/0x170
[  635.857406][T14125]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  635.857427][T14125]  __se_sys_ioctl+0xfc/0x170
[  635.857458][T14125]  do_syscall_64+0x166/0x520
[  635.857499][T14125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.857525][T14125]  ? clear_bhb_loop+0x70/0xc0
[  635.857554][T14125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.857578][T14125] RIP: 0033:0x7f199679e159
[  635.857597][T14125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.857616][T14125] RSP: 002b:00007f1997601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  635.857641][T14125] RAX: ffffffffffffffda RBX: 00007f1996a25fa0 RCX: 00007f199679e159
[  635.857658][T14125] RDX: 00002000000002c0 RSI: 0000000040187542 RDI: 0000000000000004
[  635.857674][T14125] RBP: 00007f199683506b R08: 0000000000000000 R09: 0000000000000000
[  635.857689][T14125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  635.857703][T14125] R13: 00007f1996a26038 R14: 00007f1996a25fa0 R15: 00007ffccebbddb8
[  635.857738][T14125]  </TASK>
[  636.342409][T14139] loop7: detected capacity change from 0 to 2048
[  636.375047][T14139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  639.542441][T14173] loop7: detected capacity change from 0 to 256
[  639.549634][T14173] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  639.549693][T14173] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  639.630341][T14173] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  639.640884][T14173] exFAT-fs (loop7): failed to load alloc-bitmap
[  639.640926][T14173] exFAT-fs (loop7): failed to recognize exfat type
[  640.055585][T14189] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2411'.
[  640.076704][T14189] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2411'.
[  641.519899][T14213] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2418'.
[  641.519971][T14213] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2418'.
[  641.519987][T14213] tipc: Invalid UDP bearer configuration
[  641.520034][T14213] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  641.636327][T14213] IPVS: sh: FWM 3 0x00000003 - no destination available
[  641.745837][T14222] netlink: 'syz.1.2421': attribute type 1 has an invalid length.
[  641.848267][T14224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2421'.
[  641.965983][T14220] veth0_virt_wifi: left promiscuous mode
[  642.150665][T14220] v: left promiscuous mode
[  642.819834][T14234] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff817131a2 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0)
[  642.819895][T14234] Call Trace:
[  642.819908][T14234]  <TASK>
[  642.819932][T14234]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[  642.819964][T14234]  ? __pfx_call_function_single_prep_ipi+0x10/0x10
[  642.819995][T14234]  ? do_raw_spin_lock+0x12b/0x2f0
[  642.820027][T14234]  mce_cpu_restart+0x11a/0x2c0
[  642.820051][T14234]  ? __pfx_mce_cpu_restart+0x10/0x10
[  642.820075][T14234]  smp_call_function_many_cond+0xfb8/0x1500
[  642.820114][T14234]  ? __pfx_mce_cpu_restart+0x10/0x10
[  642.820144][T14234]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  642.820193][T14234]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  642.820226][T14234]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  642.820255][T14234]  ? __timer_delete_sync+0x4a7/0x520
[  642.820290][T14234]  set_bank+0x3a8/0x4e0
[  642.820317][T14234]  ? __pfx_set_bank+0x10/0x10
[  642.820337][T14234]  ? __pfx_sysfs_kf_write+0x10/0x10
[  642.820360][T14234]  ? __pfx_set_bank+0x10/0x10
[  642.820391][T14234]  ? dev_attr_store+0x4f/0x90
[  642.820425][T14234]  ? __pfx_sysfs_kf_write+0x10/0x10
[  642.820445][T14234]  kernfs_fop_write_iter+0x3a4/0x540
[  642.820484][T14234]  vfs_write+0x612/0xba0
[  642.820518][T14234]  ? __pfx_vfs_write+0x10/0x10
[  642.820546][T14234]  ? __fget_files+0x3a2/0x420
[  642.820566][T14234]  ? __fget_files+0x2a/0x420
[  642.820592][T14234]  ? fdget+0x1ac/0x250
[  642.820622][T14234]  ksys_write+0x150/0x270
[  642.820649][T14234]  ? __pfx_ksys_write+0x10/0x10
[  642.820676][T14234]  ? __seccomp_permit_syscall+0xe7/0x2b0
[  642.820719][T14234]  do_syscall_64+0x166/0x520
[  642.820750][T14234]  ? trace_irq_disable+0x3b/0x140
[  642.820778][T14234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.820801][T14234]  ? clear_bhb_loop+0x70/0xc0
[  642.820829][T14234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.820851][T14234] RIP: 0033:0x7f199679e159
[  642.820871][T14234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.820890][T14234] RSP: 002b:00007f19975bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  642.820915][T14234] RAX: ffffffffffffffda RBX: 00007f1996a26180 RCX: 00007f199679e159
[  642.820931][T14234] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005
[  642.820946][T14234] RBP: 00007f199683506b R08: 0000000000000000 R09: 0000000000000000
[  642.820960][T14234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  642.820973][T14234] R13: 00007f1996a26218 R14: 00007f1996a26180 R15: 00007ffccebbddb8
[  642.821011][T14234]  </TASK>
[  643.161056][T14220] bond4: left promiscuous mode
[  643.161084][T14220] bond4: left allmulticast mode
[  643.165042][T14222] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  643.187615][T14225] lo: entered allmulticast mode
[  643.187903][T14225] lo: left allmulticast mode
[  643.285661][T14230] bond4: (slave dummy0): Releasing active interface
[  643.285692][T14230] dummy0: left allmulticast mode
[  643.778992][T14256] netlink: 'syz.3.2426': attribute type 8 has an invalid length.
[  644.067750][ T7627] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  644.067799][ T7627] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  644.067838][ T7627] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  644.067883][ T7627] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  644.307587][T14259] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2429'.
[  644.780015][T14267] misc userio: Can't change port id on an already running userio instance
[  645.112023][T14276] bond4: (slave veth0_to_bond): Releasing active interface
[  645.131302][T14276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  645.195314][T14276] team0: Mode changed to "roundrobin"
[  645.212937][T14276] vlan0: entered promiscuous mode
[  645.212963][T14276] v: entered promiscuous mode
[  645.242289][T14276] team0: Port device vlan0 added
[  645.255939][T14276] tipc: Enabled bearer <eth:team0>, priority 0
[  645.445719][T14284] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  646.898253][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  648.031441][T14326] netlink: 'syz.1.2448': attribute type 30 has an invalid length.
[  651.386932][ T5711] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 543 sec
[  651.521765][T14388] loop7: detected capacity change from 0 to 512
[  651.537393][T14388] EXT4-fs (loop7): Test dummy encryption mode enabled
[  651.537416][T14388] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  651.537431][T14388] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  651.537452][T14388] EXT4-fs (loop7): SIPHASH is not a valid default hash value
[  654.955986][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'.
[  655.715618][T14435] bond1: entered allmulticast mode
[  656.160932][T14444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  656.755942][T14456] No such timeout policy "syz1"
[  657.674123][T14466] netlink: 'syz.3.2488': attribute type 12 has an invalid length.
[  658.424011][T14492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2495'.
[  658.440920][T14492] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.2495'.
[  659.909924][T14509] netlink: 'syz.6.2500': attribute type 1 has an invalid length.
[  660.029878][T14509] bond6: entered promiscuous mode
[  660.030352][T14509] 8021q: adding VLAN 0 to HW filter on device bond6
[  660.123265][T14512] ipvlan2: entered allmulticast mode
[  660.123292][T14512] bond6: entered allmulticast mode
[  660.225919][T14523] fuse: fd is not a fuse device
[  660.313918][T14509] bond6: (slave bridge5): making interface the new active one
[  660.314079][T14509] bridge5: entered promiscuous mode
[  660.314262][T14509] bridge5: entered allmulticast mode
[  660.354830][T14509] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  662.814317][T14560] loop6: detected capacity change from 0 to 512
[  662.918601][T14564] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  662.919148][T14564] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  662.919956][T14564] veth1_virt_wifi: entered allmulticast mode
[  662.931411][T14564] veth1_virt_wifi: left allmulticast mode
[  663.661835][T14560] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  663.661870][T14560] FAT-fs (loop6): Filesystem has been set read-only
[  664.267036][T14574] loop7: detected capacity change from 0 to 40427
[  664.401282][T14574] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  664.401309][T14574] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  664.493977][T14574] F2FS-fs (loop7): invalid crc value
[  664.652906][T14574] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  664.739364][T14574] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  664.739393][T14574] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  665.205234][T14585] syz.7.2519: attempt to access beyond end of device
[  665.205234][T14585] loop7: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  665.261809][ T5621] Bluetooth: hci2: unexpected event for opcode 0x040d
[  665.797909][T12792] syz-executor: attempt to access beyond end of device
[  665.797909][T12792] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  665.845777][T12792] CPU: 1 UID: 0 PID: 12792 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  665.845815][T12792] Tainted: [L]=SOFTLOCKUP
[  665.845823][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  665.845836][T12792] Call Trace:
[  665.845844][T12792]  <TASK>
[  665.845854][T12792]  dump_stack_lvl+0xe8/0x150
[  665.845891][T12792]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  665.845931][T12792]  f2fs_write_end_bio+0x112c/0x15f0
[  665.846002][T12792]  __submit_merged_bio+0x258/0x6a0
[  665.846036][T12792]  ? rcu_is_watching+0x16/0xb0
[  665.846075][T12792]  __submit_merged_write_cond+0x426/0x550
[  665.846131][T12792]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  665.846196][T12792]  f2fs_write_data_pages+0x2a1d/0x36f0
[  665.846264][T12792]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  665.846342][T12792]  ? __bfs+0x153/0x290
[  665.846369][T12792]  ? __pfx_hlock_conflict+0x10/0x10
[  665.846421][T12792]  ? lockdep_unlock+0x5c/0xd0
[  665.846444][T12792]  ? __lock_acquire+0x1511/0x2de0
[  665.846501][T12792]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  665.846530][T12792]  do_writepages+0x338/0x560
[  665.846575][T12792]  ? do_raw_spin_unlock+0xf5/0x200
[  665.846604][T12792]  filemap_fdatawrite+0x1e9/0x2f0
[  665.846644][T12792]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  665.846676][T12792]  ? add_lock_to_list+0xc7/0x100
[  665.846761][T12792]  ? do_raw_spin_unlock+0xf5/0x200
[  665.846789][T12792]  f2fs_sync_dirty_inodes+0x471/0x970
[  665.846835][T12792]  f2fs_write_checkpoint+0xa07/0x2840
[  665.846904][T12792]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  665.846993][T12792]  kill_f2fs_super+0x2dd/0x700
[  665.847026][T12792]  ? rcu_do_enqueue+0x616/0x870
[  665.847053][T12792]  ? lockdep_hardirqs_on+0x7b/0x110
[  665.847086][T12792]  ? __pfx_kill_f2fs_super+0x10/0x10
[  665.847138][T12792]  ? __pfx_call_rcu+0x10/0x10
[  665.847178][T12792]  ? shrinker_free+0x2a7/0x3b0
[  665.847216][T12792]  deactivate_locked_super+0xbe/0x110
[  665.847254][T12792]  cleanup_mnt+0x3d3/0x460
[  665.847286][T12792]  task_work_run+0x1d9/0x260
[  665.847318][T12792]  ? __pfx_task_work_run+0x10/0x10
[  665.847356][T12792]  exit_to_user_mode_loop+0x204/0x770
[  665.847386][T12792]  ? rcu_is_watching+0x16/0xb0
[  665.847423][T12792]  do_syscall_64+0x328/0x520
[  665.847454][T12792]  ? trace_irq_disable+0x3b/0x140
[  665.847480][T12792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.847500][T12792]  ? clear_bhb_loop+0x70/0xc0
[  665.847522][T12792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.847540][T12792] RIP: 0033:0x7f96e4d9f397
[  665.847558][T12792] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  665.847575][T12792] RSP: 002b:00007ffd622858e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  665.847596][T12792] RAX: 0000000000000000 RBX: 00007f96e4e344bb RCX: 00007f96e4d9f397
[  665.847610][T12792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd622859a0
[  665.847623][T12792] RBP: 00007ffd622859a0 R08: 00007ffd622869a0 R09: 00000000ffffffff
[  665.847638][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd62286a30
[  665.847651][T12792] R13: 00007f96e4e344bb R14: 00000000000a271d R15: 00007ffd62286a70
[  665.847685][T12792]  </TASK>
[  666.009423][T12792] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  667.445240][T14605] loop7: detected capacity change from 0 to 1024
[  667.462638][T14605] hfsplus: Bad value for 'umask'
[  669.131659][T14627] bridge6: entered promiscuous mode
[  674.243395][T14697] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.2553'.
[  674.760155][T14707] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  675.596280][T14713] IPv6: addrconf: prefix option has invalid lifetime
[  677.227183][T14713] IPv6: NLM_F_CREATE should be specified when creating new route
[  677.227296][T14713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  677.227308][T14713] IPv6: NLM_F_CREATE should be set when creating new route
[  677.227338][T14713] IPv6: NLM_F_CREATE should be set when creating new route
[  677.315734][T14734] nftables ruleset with unbound set
[  678.027826][T14741] xt_CT: You must specify a L4 protocol and not use inversions on it
[  678.241822][T14743] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  679.406990][T14757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2569'.
[  686.067808][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  686.067873][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  688.324049][T14809] loop6: detected capacity change from 0 to 8
[  688.377263][T14809] SQUASHFS error: lzo decompression failed, data probably corrupt
[  688.377299][T14809] SQUASHFS error: Failed to read block 0x91: -5
[  688.377314][T14809] SQUASHFS error: Unable to read metadata cache entry [8f]
[  688.377360][T14809] SQUASHFS error: Unable to read inode 0x11f
[  690.591122][T14825] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  691.504161][T14830] loop6: detected capacity change from 0 to 4096
[  691.526330][T14830] EXT4-fs (loop6): Test dummy encryption mode enabled
[  691.583708][T14830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  691.637253][T14833] kAFS: unable to lookup cell '�'
[  691.808826][ T8739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.174205][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2594'.
[  694.495836][T14865] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  696.776858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  697.900654][T14893] syz_tun: left promiscuous mode
[  697.963923][T14893] team0: left promiscuous mode
[  697.964797][T14893] bond2: left promiscuous mode
[  697.967740][T14893] bond3: left promiscuous mode
[  697.970612][T14893] bridge2: left promiscuous mode
[  698.837395][T14895] IPv6: addrconf: prefix option has invalid lifetime
[  699.513424][T14906] sch_tbf: burst 6281 is lower than device lo mtu (32783) !
[  701.200063][T14923] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  701.827309][T14934] loop6: detected capacity change from 0 to 40427
[  701.871073][T14934] F2FS-fs (loop6): invalid crc value
[  701.981555][T14934] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  702.000946][T14934] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  702.000976][T14934] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  702.001017][T14934] F2FS-fs (loop6): Start checkpoint disabled!
[  702.048922][T14934] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  702.049493][T14934] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  702.429717][T14945] syz.6.2622: attempt to access beyond end of device
[  702.429717][T14945] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  702.530936][T14945] syz.6.2622: attempt to access beyond end of device
[  702.530936][T14945] loop6: rw=2049, sector=45104, nr_sectors = 48 limit=40427
[  703.020877][ T7667] kworker/u8:54: attempt to access beyond end of device
[  703.020877][ T7667] loop6: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  703.044851][ T7667] CPU: 0 UID: 0 PID: 7667 Comm: kworker/u8:54 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  703.044888][ T7667] Tainted: [L]=SOFTLOCKUP
[  703.044897][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  703.044912][ T7667] Workqueue: writeback wb_workfn (flush-7:6)
[  703.044953][ T7667] Call Trace:
[  703.044961][ T7667]  <TASK>
[  703.044971][ T7667]  dump_stack_lvl+0xe8/0x150
[  703.045006][ T7667]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  703.045047][ T7667]  f2fs_write_end_bio+0x112c/0x15f0
[  703.045101][ T7667]  __submit_merged_bio+0x258/0x6a0
[  703.045134][ T7667]  ? rcu_is_watching+0x16/0xb0
[  703.045173][ T7667]  __submit_merged_write_cond+0x426/0x550
[  703.045218][ T7667]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  703.045283][ T7667]  f2fs_write_data_pages+0x2a1d/0x36f0
[  703.045347][ T7667]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  703.045390][ T7667]  ? cfg80211_inform_single_bss_data+0x1499/0x1be0
[  703.045455][ T7667]  ? __lock_acquire+0x747/0x2de0
[  703.045499][ T7667]  ? lock_acquire+0x115/0x350
[  703.045550][ T7667]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  703.045577][ T7667]  do_writepages+0x338/0x560
[  703.045620][ T7667]  ? reacquire_held_locks+0x117/0x1a0
[  703.045650][ T7667]  ? writeback_sb_inodes+0x450/0x1af0
[  703.045691][ T7667]  __writeback_single_inode+0x136/0x1220
[  703.045729][ T7667]  ? do_raw_spin_unlock+0xf5/0x200
[  703.045757][ T7667]  writeback_sb_inodes+0x9de/0x1af0
[  703.045789][ T7667]  ? __lock_acquire+0x747/0x2de0
[  703.045851][ T7667]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  703.045933][ T7667]  ? rcu_is_watching+0x16/0xb0
[  703.045969][ T7667]  ? queue_io+0x2d3/0x470
[  703.046006][ T7667]  wb_writeback+0x41c/0xad0
[  703.046042][ T7667]  ? queue_io+0x241/0x470
[  703.046082][ T7667]  ? __pfx_wb_writeback+0x10/0x10
[  703.046113][ T7667]  ? do_raw_spin_lock+0x12b/0x2f0
[  703.046154][ T7667]  wb_workfn+0x431/0x10f0
[  703.046185][ T7667]  ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0
[  703.046232][ T7667]  ? __pfx_wb_workfn+0x10/0x10
[  703.046272][ T7667]  ? do_raw_spin_lock+0x26c/0x2f0
[  703.046308][ T7667]  ? lock_acquire+0x115/0x350
[  703.046346][ T7667]  ? rcu_is_watching+0x16/0xb0
[  703.046381][ T7667]  ? process_scheduled_works+0x97a/0x1630
[  703.046416][ T7667]  process_scheduled_works+0xc3d/0x1630
[  703.046486][ T7667]  ? __pfx_process_scheduled_works+0x10/0x10
[  703.046528][ T7667]  ? assign_work+0x3cf/0x5d0
[  703.046568][ T7667]  worker_thread+0xa47/0xfb0
[  703.046632][ T7667]  kthread+0x38b/0x480
[  703.046660][ T7667]  ? __pfx_worker_thread+0x10/0x10
[  703.046691][ T7667]  ? __pfx_kthread+0x10/0x10
[  703.046719][ T7667]  ret_from_fork+0x514/0xb70
[  703.046744][ T7667]  ? __pfx_ret_from_fork+0x10/0x10
[  703.046766][ T7667]  ? __switch_to+0xc78/0x1410
[  703.046808][ T7667]  ? __pfx_kthread+0x10/0x10
[  703.046837][ T7667]  ret_from_fork_asm+0x1a/0x30
[  703.046890][ T7667]  </TASK>
[  703.113336][ T7667] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  703.491711][T14953] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  703.534712][T14953] 8021q: adding VLAN 0 to HW filter on device bond5
[  703.571550][T14953] bond5: (slave gretap1): making interface the new active one
[  703.572526][T14953] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  705.709059][T14972] netlink: 'syz.5.2630': attribute type 1 has an invalid length.
[  706.773943][T14983] ip_tables: iptables: counters copy to user failed while replacing table
[  708.138881][T14976] veth3: entered allmulticast mode
[  708.915043][T14976] bond3: (slave veth3): Enslaving as an active interface with a down link
[  708.946920][T14978] bond1: (slave veth0_to_bond): Releasing backup interface
[  709.006086][T14978] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  712.177115][T13284] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 604 sec
[  715.062455][T15083] Trying to write to read-only block-device nullb0
[  716.334646][T15083]  nullb0: [POWERTEC] p1 p2
[  720.838890][T15110] sch_tbf: burst 6281 is lower than device lo mtu (32783) !
[  725.237919][T15138] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  726.906640][T15156] fuse: fd is not a fuse device
[  729.123153][T15175] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  730.377083][  T192] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  730.553684][  T192] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  730.555028][  T192] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[  730.555074][  T192] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  730.555090][  T192] usb 8-1: config 0 interface 0 has no altsetting 0
[  730.602934][  T192] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  730.602960][  T192] usb 8-1: Product: syz
[  730.602975][  T192] usb 8-1: Manufacturer: syz
[  730.602989][  T192] usb 8-1: SerialNumber: syz
[  730.644409][  T192] usb 8-1: config 0 descriptor??
[  730.669589][  T192] hub 8-1:0.0: bad descriptor, ignoring hub
[  730.669621][  T192] hub 8-1:0.0: probe with driver hub failed with error -5
[  730.815788][  T192] usb 8-1: selecting invalid altsetting 0
[  730.874884][T15192] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7)
[  730.900571][T15192] 9p: Bad value for 'wfdno'
[  731.335816][T15204] futex_wake_op: syz.1.2692 tries to shift op by 144; fix this program
[  733.385312][T15212] xt_hashlimit: size too large, truncated to 1048576
[  733.622002][T15221] ip_tables: iptables: counters copy to user failed while replacing table
[  734.021037][   T33] audit: type=1326 audit(1790197857.896:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.021443][   T33] audit: type=1326 audit(1790197857.896:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.021608][   T33] audit: type=1326 audit(1790197857.896:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.021776][   T33] audit: type=1326 audit(1790197857.896:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.021902][   T33] audit: type=1326 audit(1790197857.906:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.022052][   T33] audit: type=1326 audit(1790197857.916:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.022198][   T33] audit: type=1326 audit(1790197857.916:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.022571][   T33] audit: type=1326 audit(1790197857.916:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.022716][   T33] audit: type=1326 audit(1790197857.916:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  734.022866][   T33] audit: type=1326 audit(1790197857.916:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15224 comm="syz.7.2699" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  735.445830][  T192] usb 8-1: USB disconnect, device number 5
[  736.214934][T15250] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2701'.
[  739.684079][T13287] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  740.148372][T13287] usb 7-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  740.330385][T13287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.330588][T13287] usb 7-1: Product: syz
[  740.330707][T13287] usb 7-1: Manufacturer: syz
[  740.330768][T13287] usb 7-1: SerialNumber: syz
[  740.515327][T13287] usb 7-1: config 0 descriptor??
[  740.525057][T13287] ch341 7-1:0.0: ch341-uart converter detected
[  740.744266][T13287] usb 7-1: failed to receive control message: -32
[  740.744329][T13287] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32
[  740.816477][T15218] udevd[15218]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  740.847249][T15282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  740.853928][T13287] usb 7-1: USB disconnect, device number 7
[  740.881288][T13287] ch341 7-1:0.0: device disconnected
[  741.262867][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2717'.
[  741.268728][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2717'.
[  743.830995][T15321] fuse: fd is not a fuse device
[  743.969497][T15327] loop6: detected capacity change from 0 to 128
[  744.618655][   T33] kauditd_printk_skb: 81 callbacks suppressed
[  744.618677][   T33] audit: type=1800 audit(1790197868.346:703): pid=15332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2724" name="file1" dev="loop6" ino=135 res=0 errno=0
[  747.222392][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  747.222449][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  747.541657][T15366] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2735'.
[  747.541721][T15366] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2735'.
[  747.541778][T15366] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2735'.
[  748.313413][ T7645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.313436][ T7645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.359889][T15374] loop6: detected capacity change from 0 to 164
[  749.399879][ T7620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.399903][ T7620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.690030][T15419] loop7: detected capacity change from 0 to 8
[  754.361278][T15430] SQUASHFS error: Failed to read block 0x4de: -5
[  754.361832][T15430] SQUASHFS error: Failed to read block 0x4de: -5
[  754.394035][   T33] audit: type=1800 audit(1790197878.266:704): pid=15430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2750" name="file1" dev="loop7" ino=5 res=0 errno=0
[  754.630258][T15433] fuse: fd is not a fuse device
[  754.923426][T15441] netlink: 'syz.3.2759': attribute type 1 has an invalid length.
[  754.923461][T15441] netlink: 'syz.3.2759': attribute type 2 has an invalid length.
[  754.959049][T15435] syzkaller0: entered promiscuous mode
[  754.959073][T15435] syzkaller0: entered allmulticast mode
[  756.435877][T15454] fuse: fd is not a fuse device
[  764.378467][T15496] netlink: 'syz.1.2774': attribute type 1 has an invalid length.
[  765.948820][   T33] audit: type=1326 audit(1790197889.856:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  765.948873][   T33] audit: type=1326 audit(1790197889.856:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  766.656266][   T33] audit: type=1326 audit(1790197890.556:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  766.657109][   T33] audit: type=1326 audit(1790197890.566:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  766.657358][   T33] audit: type=1326 audit(1790197890.566:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  766.657640][   T33] audit: type=1326 audit(1790197890.566:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  766.659462][   T33] audit: type=1326 audit(1790197890.566:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  766.659505][   T33] audit: type=1326 audit(1790197890.566:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  766.659999][   T33] audit: type=1326 audit(1790197890.566:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  766.660210][   T33] audit: type=1326 audit(1790197890.566:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.7.2780" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e4d9e159 code=0x7ffc0000
[  767.078782][T15522] loop7: detected capacity change from 0 to 4096
[  767.465684][T15532] macvlan0: entered promiscuous mode
[  767.925300][T15522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  768.314331][T12792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.605450][T15552] loop6: detected capacity change from 0 to 256
[  768.618153][T15552] vfat: Unknown parameter 'n8'
[  768.706605][T15552] syzkaller0: entered promiscuous mode
[  768.706630][T15552] syzkaller0: entered allmulticast mode
[  769.236360][T15558] 8021q: adding VLAN 0 to HW filter on device bond0
[  769.330170][T15558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  769.903433][T15558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  769.919206][T15558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  769.953379][T15558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  769.953602][T15558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  769.995376][T15558] veth1_macvtap: left promiscuous mode
[  770.006109][T15558] veth0_macvtap: left promiscuous mode
[  770.017717][T15558] veth0_macvtap: entered promiscuous mode
[  770.026638][T15558] veth1_macvtap: entered promiscuous mode
[  770.086200][T15558] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  770.100920][T15558] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  770.102080][T15558] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  770.107841][T15558] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  770.145189][T15558] 8021q: adding VLAN 0 to HW filter on device bond1
[  770.268060][T15558] 8021q: adding VLAN 0 to HW filter on device bond2
[  770.358288][T15558] 8021q: adding VLAN 0 to HW filter on device bond3
[  770.387135][ T7636] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  770.387185][ T7636] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  770.388673][T13287] gretap1: entered promiscuous mode
[  770.438494][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.438656][ T7645] bridge0: port 2(bridge_slave_1) entered forwarding state
[  770.605881][T15585] netlink: 'syz.5.2797': attribute type 4 has an invalid length.
[  770.631376][T15581] loop7: detected capacity change from 0 to 65536
[  770.649554][ T7673] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  770.649590][ T7673] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  770.697074][T15581] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  770.733009][T15585] netlink: 'syz.5.2797': attribute type 4 has an invalid length.
[  770.746099][ T7673] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  770.746131][ T7673] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  770.765545][ T7673] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  770.779408][ T7673] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  770.810087][T15581] XFS (loop7): Ending clean mount
[  770.834203][ T7651] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  770.834479][ T7651] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  770.834868][ T7651] bond3: (slave veth3): making interface the new active one
[  770.914673][T15581] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  770.914710][T15581] overlayfs: missing 'lowerdir'
[  770.961259][ T7651] bond3: active interface up!
[  771.094037][T15597] loop6: detected capacity change from 0 to 4096
[  772.256894][ T5711] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 664 sec
[  772.259882][T13287] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[  772.259936][T13287] XFS (loop7): Unmount and run xfs_repair
[  772.259950][T13287] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  772.259968][T13287] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  772.259985][T13287] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  772.260000][T13287] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  772.260014][T13287] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  772.260029][T13287] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  772.260044][T13287] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  772.260058][T13287] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  772.260071][T13287] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  772.260087][T13287] XFS (loop7): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74
[  772.302914][T12792] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  772.441586][  T192] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[  772.441639][  T192] XFS (loop7): Unmount and run xfs_repair
[  772.441653][  T192] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  772.441670][  T192] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  772.441686][  T192] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  772.441702][  T192] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  772.441716][  T192] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  772.441731][  T192] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  772.441745][  T192] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  772.441759][  T192] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  772.441774][  T192] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  772.441789][  T192] XFS (loop7): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74
[  772.458380][T15603] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  772.585811][T13287] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  772.585870][T13287] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  772.585886][T13287] loop7: lost filesystem error report for type 5 error -108
[  772.585885][  T192] loop7: lost filesystem error report for type 5 error -117
[  772.585980][T13287] loop7: lost filesystem error report for type 5 error -117
[  772.586000][T13287] loop7: lost filesystem error report for type 5 error -117
[  772.640657][  T192] loop7: lost filesystem error report for type 5 error -117
[  772.827867][   T33] kauditd_printk_skb: 67 callbacks suppressed
[  772.827889][   T33] audit: type=1800 audit(1790197896.736:782): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2801" name="file1" dev="loop6" ino=15 res=0 errno=0
[  774.491325][T15627] hfsplus: unable to find HFS+ superblock
[  777.357071][T13287] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  777.419588][T15649] syzkaller0: entered promiscuous mode
[  777.419606][T15649] syzkaller0: entered allmulticast mode
[  777.443724][T15649] tipc: Started in network mode
[  777.443747][T15649] tipc: Node identity a283d7e3a98f, cluster identity 4711
[  777.444003][T15649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  777.465831][T15648] tipc: Resetting bearer <eth:syzkaller0>
[  777.509959][T13287] usb 7-1: Using ep0 maxpacket: 16
[  777.513314][T13287] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40
[  777.535404][T13287] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 64
[  777.535433][T13287] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  777.535464][T13287] usb 7-1: config 1 interface 0 has no altsetting 0
[  777.568031][T13287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.568056][T13287] usb 7-1: Product: syz
[  777.568080][T13287] usb 7-1: Manufacturer: 탏뱖䍅㢤拜诉㎓㾽踹绽萤훈䆄䪞娍㺅텮ꥥ澳樎៥灎曶ꖷ査ꉋฮ쪆㝽废鑛岨鳘䠘敏ↂ칇軇♗꩙Ⴉ蘤郫䕯邋ሹᝓᘀ옧팾頗嶹ᖣ㹘䩃錢轈횻컺基謠
[  777.568099][T13287] usb 7-1: SerialNumber: syz
[  777.621846][T15641] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  777.621947][T15641] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  777.684569][T15648] tipc: Disabling bearer <eth:syzkaller0>
[  777.965948][T13287] usb 7-1: USB disconnect, device number 8
[  778.432912][T15662] loop7: detected capacity change from 0 to 256
[  779.264446][T15656] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  780.114306][T15667] syzkaller0: entered promiscuous mode
[  780.114332][T15667] syzkaller0: entered allmulticast mode
[  780.321363][T15674] netlink: 'syz.3.2819': attribute type 2 has an invalid length.
[  781.666952][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  784.595450][   T33] audit: type=1804 audit(1790197908.496:783): pid=15707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2832" name="bus" dev="ramfs" ino=47417 res=1 errno=0
[  784.596160][   T33] audit: type=1804 audit(1790197908.496:784): pid=15707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2832" name="bus" dev="ramfs" ino=47417 res=1 errno=0
[  785.446385][T15717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2835'.
[  787.227102][T15727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  787.249395][T15726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  788.410889][T15739] loop6: detected capacity change from 0 to 4096
[  788.524514][T15733] smpboot: CPU 1 is now offline
[  788.759127][T15739] EXT4-fs: Mount option(s) incompatible with ext2
[  793.302122][T15790] loop7: detected capacity change from 0 to 512
[  793.463810][T15790] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  793.535850][T15790] loop7: detected capacity change from 0 to 8
[  793.550466][T15790] squashfs: Unknown parameter './security'
[  793.698932][   T33] audit: type=1807 audit(1790197917.596:785): action=measure res=1
[  793.728562][T15790] ima: policy update completed
[  793.728684][   T33] audit: type=1802 audit(1790197917.636:786): pid=15790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.7.2855" res=1 errno=0
[  794.288254][T15797] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2857'.
[  794.288566][T15797] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2857'.
[  794.481162][   T33] audit: type=1800 audit(1790197918.386:787): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  794.544332][ T5719] libceph: connect (1)[c::]:6789 error -101
[  794.544688][ T5719] libceph: mon0 (1)[c::]:6789 connect error
[  794.592149][T15800] ceph: No mds server is up or the cluster is laggy
[  794.772456][   T33] audit: type=1800 audit(1790197918.676:788): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  794.809187][   T33] audit: type=1800 audit(1790197918.716:789): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  794.891812][   T33] audit: type=1800 audit(1790197918.786:790): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  797.165588][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2861'.
[  797.185248][   T33] audit: type=1800 audit(1790197921.086:791): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  798.773161][   T33] audit: type=1800 audit(1790197922.676:792): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  799.276470][   T33] audit: type=1800 audit(1790197923.176:793): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  799.332353][   T33] audit: type=1326 audit(1790197923.236:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.3.2867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  799.332390][   T33] audit: type=1326 audit(1790197923.236:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.3.2867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  799.368304][   T33] audit: type=1326 audit(1790197923.276:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.3.2867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  799.368341][   T33] audit: type=1326 audit(1790197923.276:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.3.2867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  799.368506][   T33] audit: type=1326 audit(1790197923.276:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.3.2867" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10db79e159 code=0x7ffc0000
[  799.698750][   T33] audit: type=1800 audit(1790197923.586:799): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  800.706964][   T33] audit: type=1804 audit(1790197924.226:800): pid=15847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2853" name="bus" dev="tmpfs" ino=3338 res=1 errno=0
[  802.383914][   T33] audit: type=1800 audit(1790197926.286:801): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  806.529469][   T33] audit: type=1800 audit(1790197930.436:802): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  807.111894][   T33] audit: type=1800 audit(1790197931.016:803): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  807.171784][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2873'.
[  807.344177][T15912] bridge7: port 1(veth5) entered blocking state
[  807.344261][T15912] bridge7: port 1(veth5) entered disabled state
[  807.344357][T15912] veth5: entered allmulticast mode
[  807.427829][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  807.427879][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  807.468016][T15912] veth5: entered promiscuous mode
[  807.542584][T15908] bridge7: port 2(veth0_to_bond) entered blocking state
[  807.542662][T15908] bridge7: port 2(veth0_to_bond) entered disabled state
[  807.542776][T15908] veth0_to_bond: entered allmulticast mode
[  807.582688][T15908] veth0_to_bond: entered promiscuous mode
[  807.965348][   T33] audit: type=1800 audit(1790197931.866:804): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  808.518026][T15924] No source specified
[  810.994815][   T33] audit: type=1800 audit(1790197934.896:805): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  811.995264][   T33] audit: type=1800 audit(1790197935.896:806): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  812.510116][   T33] audit: type=1800 audit(1790197936.416:807): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  812.838916][   T33] audit: type=1800 audit(1790197936.746:808): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  813.721809][T15976] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2897'.
[  813.741767][   T33] audit: type=1800 audit(1790197937.646:809): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  816.981839][T15989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2901'.
[  817.179096][   T33] audit: type=1800 audit(1790197941.086:810): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  817.385122][   T33] audit: type=1800 audit(1790197941.286:811): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  817.691621][T16000] loop6: detected capacity change from 0 to 32768
[  817.740928][T16000] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  819.491914][   T33] audit: type=1800 audit(1790197943.396:812): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  820.073902][ T8739] ocfs2: Unmounting device (7,6) on (node local)
[  820.709294][   T33] audit: type=1800 audit(1790197944.616:813): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  822.423021][   T33] audit: type=1800 audit(1790197946.326:814): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4844 res=0 errno=0
[  822.647370][T16045] netlink: 'syz.1.2913': attribute type 4 has an invalid length.
[  822.653311][T16045] netlink: 'syz.1.2913': attribute type 4 has an invalid length.
[  822.702345][   T33] audit: type=1800 audit(1790197946.606:815): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  825.014379][   T33] audit: type=1800 audit(1790197948.916:816): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  825.996209][   T33] audit: type=1800 audit(1790197949.896:817): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  827.509240][   T33] audit: type=1800 audit(1790197951.416:818): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  827.712293][   T33] audit: type=1800 audit(1790197951.616:819): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2921" name="attr_allow_any_host" dev="configfs" ino=49668 res=0 errno=0
[  827.751394][T16080] nvmet: adding nsid 1 to subsystem testsubsys
[  827.772173][   T33] audit: type=1800 audit(1790197951.676:820): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2921" name="device_path" dev="configfs" ino=49671 res=0 errno=0
[  827.802100][   T33] audit: type=1800 audit(1790197951.706:821): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2921" name="resv_enable" dev="configfs" ino=49672 res=0 errno=0
[  827.802619][   T33] audit: type=1800 audit(1790197951.706:822): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2921" name="enable" dev="configfs" ino=49673 res=0 errno=0
[  827.904426][T16080] 
[  827.906768][T16080] ======================================================
[  827.913794][T16080] WARNING: possible circular locking dependency detected
[  827.920814][T16080] syzkaller #0 Tainted: G             L      
[  827.926876][T16080] ------------------------------------------------------
[  827.933888][T16080] syz.7.2921/16080 is trying to acquire lock:
[  827.939956][T16080] ffff88805a6efab0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10
[  827.950559][T16080] 
[  827.950559][T16080] but task is already holding lock:
[  827.957913][T16080] ffff88806a527868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4c/0x7d0
[  827.966864][T16080] 
[  827.966864][T16080] which lock already depends on the new lock.
[  827.966864][T16080] 
[  827.977269][T16080] 
[  827.977269][T16080] the existing dependency chain (in reverse order) is:
[  827.986287][T16080] 
[  827.986287][T16080] -> #3 (&subsys->lock){+.+.}-{4:4}:
[  827.993769][T16080]        __mutex_lock+0x197/0x15a0
[  827.998895][T16080]        nvmet_ns_device_path_store+0x54/0x160
[  828.005055][T16080]        configfs_write_iter+0x337/0x430
[  828.010707][T16080]        vfs_write+0x612/0xba0
[  828.015473][T16080]        ksys_write+0x150/0x270
[  828.020323][T16080]        do_syscall_64+0x166/0x520
[  828.025443][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.031861][T16080] 
[  828.031861][T16080] -> #2 (&p->frag_sem){++++}-{4:4}:
[  828.039265][T16080]        down_read+0x45/0x320
[  828.043956][T16080]        configfs_write_iter+0x238/0x430
[  828.049592][T16080]        vfs_write+0x612/0xba0
[  828.054350][T16080]        ksys_write+0x150/0x270
[  828.059200][T16080]        do_syscall_64+0x166/0x520
[  828.064520][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.070963][T16080] 
[  828.070963][T16080] -> #1 (&buffer->mutex){+.+.}-{4:4}:
[  828.078519][T16080]        __mutex_lock+0x197/0x15a0
[  828.083638][T16080]        configfs_read_iter+0x70/0x620
[  828.089115][T16080]        __kernel_read+0x4ca/0x960
[  828.094230][T16080]        integrity_kernel_read+0x89/0xd0
[  828.099863][T16080]        ima_calc_file_hash+0x451/0x890
[  828.105436][T16080]        ima_collect_measurement+0x51b/0xa00
[  828.111419][T16080]        process_measurement+0x1272/0x1c10
[  828.117234][T16080]        ima_file_check+0xdc/0x130
[  828.122356][T16080]        security_file_post_open+0xb3/0x260
[  828.128253][T16080]        path_openat+0x14e9/0x1da0
[  828.133362][T16080]        do_file_open+0x23e/0x4a0
[  828.138384][T16080]        do_sys_openat2+0x115/0x200
[  828.143583][T16080]        __x64_sys_openat+0x138/0x170
[  828.148955][T16080]        do_syscall_64+0x166/0x520
[  828.154085][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.160519][T16080] 
[  828.160519][T16080] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[  828.169115][T16080]        __lock_acquire+0x164c/0x2de0
[  828.174486][T16080]        lock_acquire+0x115/0x350
[  828.179510][T16080]        __mutex_lock+0x197/0x15a0
[  828.184638][T16080]        process_measurement+0x7d0/0x1c10
[  828.190351][T16080]        ima_file_check+0xdc/0x130
[  828.195454][T16080]        security_file_post_open+0xb3/0x260
[  828.201344][T16080]        path_openat+0x14e9/0x1da0
[  828.206469][T16080]        do_file_open+0x23e/0x4a0
[  828.211492][T16080]        filp_open+0x16d/0x1d0
[  828.216257][T16080]        nvmet_file_ns_enable+0x74/0x350
[  828.221893][T16080]        nvmet_ns_enable+0xd4/0x7d0
[  828.227092][T16080]        nvmet_ns_enable_store+0xd7/0x170
[  828.232833][T16080]        configfs_write_iter+0x337/0x430
[  828.238464][T16080]        vfs_write+0x612/0xba0
[  828.243225][T16080]        ksys_write+0x150/0x270
[  828.248085][T16080]        do_syscall_64+0x166/0x520
[  828.253197][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.259605][T16080] 
[  828.259605][T16080] other info that might help us debug this:
[  828.259605][T16080] 
[  828.269823][T16080] Chain exists of:
[  828.269823][T16080]   &ima_iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock
[  828.269823][T16080] 
[  828.283369][T16080]  Possible unsafe locking scenario:
[  828.283369][T16080] 
[  828.290812][T16080]        CPU0                    CPU1
[  828.296168][T16080]        ----                    ----
[  828.301528][T16080]   lock(&subsys->lock);
[  828.305781][T16080]                                lock(&p->frag_sem);
[  828.312452][T16080]                                lock(&subsys->lock);
[  828.319221][T16080]   lock(&ima_iint_mutex_key[depth]);
[  828.324592][T16080] 
[  828.324592][T16080]  *** DEADLOCK ***
[  828.324592][T16080] 
[  828.332728][T16080] locks held by syz.7.2921/16080: 6, last CPU#0:
[  828.339049][T16080]  #0: ffff888079a54630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160
[  828.348100][T16080]  #1: ffff88801d33a460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  828.357066][T16080]  #2: ffff888077021880 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x7e/0x430
[  828.366915][T16080]  #3: ffff88801ff57770 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430
[  828.376666][T16080]  #4: ffffffff8f8feb68 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xc8/0x170
[  828.386849][T16080]  #5: ffff88806a527868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4c/0x7d0
[  828.396241][T16080] 
[  828.396241][T16080] stack backtrace:
[  828.402138][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.7.2921 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  828.413167][T16080] Tainted: [L]=SOFTLOCKUP
[  828.417480][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  828.427528][T16080] Call Trace:
[  828.430802][T16080]  <TASK>
[  828.433748][T16080]  dump_stack_lvl+0xe8/0x150
[  828.438358][T16080]  print_circular_bug+0x2e2/0x300
[  828.443394][T16080]  check_noncircular+0x12f/0x150
[  828.448332][T16080]  __lock_acquire+0x164c/0x2de0
[  828.453183][T16080]  ? check_noncircular+0xdb/0x150
[  828.458208][T16080]  ? __pfx___schedule+0x10/0x10
[  828.463063][T16080]  ? add_lock_to_list+0xc7/0x100
[  828.468024][T16080]  lock_acquire+0x115/0x350
[  828.472527][T16080]  ? process_measurement+0x7d0/0x1c10
[  828.477898][T16080]  __mutex_lock+0x197/0x15a0
[  828.482492][T16080]  ? process_measurement+0x7d0/0x1c10
[  828.487872][T16080]  ? process_measurement+0x7d0/0x1c10
[  828.493242][T16080]  ? __pfx___mutex_lock+0x10/0x10
[  828.498278][T16080]  ? ima_inode_get+0xcb/0x4d0
[  828.502953][T16080]  process_measurement+0x7d0/0x1c10
[  828.508145][T16080]  ? kasan_quarantine_put+0xbb/0x1f0
[  828.513424][T16080]  ? __pfx_process_measurement+0x10/0x10
[  828.519051][T16080]  ? tomoyo_check_open_permission+0x38e/0x470
[  828.525125][T16080]  ? apparmor_file_open+0x523/0x6c0
[  828.530348][T16080]  ima_file_check+0xdc/0x130
[  828.534934][T16080]  ? file_ra_state_init+0x3d/0xc0
[  828.539950][T16080]  ? __pfx_ima_file_check+0x10/0x10
[  828.545139][T16080]  security_file_post_open+0xb3/0x260
[  828.550504][T16080]  path_openat+0x14e9/0x1da0
[  828.555112][T16080]  do_file_open+0x23e/0x4a0
[  828.559609][T16080]  ? __pfx_do_file_open+0x10/0x10
[  828.564630][T16080]  ? do_getname_kernel+0x54/0x230
[  828.569652][T16080]  ? do_getname_kernel+0x97/0x230
[  828.574681][T16080]  ? __asan_memcpy+0x40/0x70
[  828.579274][T16080]  filp_open+0x16d/0x1d0
[  828.583524][T16080]  ? __pfx_filp_open+0x10/0x10
[  828.588303][T16080]  nvmet_file_ns_enable+0x74/0x350
[  828.593421][T16080]  nvmet_ns_enable+0xd4/0x7d0
[  828.598092][T16080]  ? lock_acquire+0x115/0x350
[  828.602765][T16080]  nvmet_ns_enable_store+0xd7/0x170
[  828.607958][T16080]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
[  828.613769][T16080]  ? down_read+0x2b9/0x320
[  828.618175][T16080]  ? __pfx_nvmet_ns_enable_store+0x10/0x10
[  828.623981][T16080]  configfs_write_iter+0x337/0x430
[  828.629105][T16080]  vfs_write+0x612/0xba0
[  828.633364][T16080]  ? __pfx_vfs_write+0x10/0x10
[  828.638137][T16080]  ? __fget_files+0x3a2/0x420
[  828.642833][T16080]  ? __fget_files+0x2a/0x420
[  828.647428][T16080]  ? fdget+0x1ac/0x250
[  828.651494][T16080]  ksys_write+0x150/0x270
[  828.655834][T16080]  ? __pfx_ksys_write+0x10/0x10
[  828.660687][T16080]  do_syscall_64+0x166/0x520
[  828.665281][T16080]  ? trace_irq_disable+0x3b/0x140
[  828.670339][T16080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.676405][T16080]  ? clear_bhb_loop+0x70/0xc0
[  828.681084][T16080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.686993][T16080] RIP: 0033:0x7f96e4d9e159
[  828.691424][T16080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  828.711025][T16080] RSP: 002b:00007f96e5cbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  828.719451][T16080] RAX: ffffffffffffffda RBX: 00007f96e5025fa0 RCX: 00007f96e4d9e159
[  828.727427][T16080] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000007
[  828.735423][T16080] RBP: 00007f96e4e3506b R08: 0000000000000000 R09: 0000000000000000
[  828.743391][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  828.751358][T16080] R13: 00007f96e5026038 R14: 00007f96e5025fa0 R15: 00007ffd62286678
[  828.759336][T16080]  </TASK>
[  829.636791][   T33] audit: type=1800 audit(1790197953.456:823): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15721 res=0 errno=0
[  829.982575][T16091] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  830.103357][   T33] audit: type=1800 audit(1790197954.006:824): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219205 res=0 errno=0
[  830.737888][   T33] audit: type=1800 audit(1790197954.646:825): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2921" name="img" dev="tmpfs" ino=649 res=0 errno=0
[  830.829124][   T33] audit: type=1800 audit(1790197954.736:826): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15844 res=0 errno=0
[  833.219492][  T192] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 725 sec