last executing test programs:

5m42.479637363s ago: executing program 1 (id=1415):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
syz_mount_image$xfs(&(0x7f0000010e40), &(0x7f0000010e80)='./file1\x00', 0x4010, &(0x7f0000010ec0), 0x1, 0x9768, &(0x7f0000010f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000001a680)='./file1\x00', 0xc4842, 0x1ff)
sendfile(r0, r0, 0x0, 0x1)

5m41.511473796s ago: executing program 1 (id=1419):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000780)={[{@rodir}, {@numtail}, {@fat=@time_offset={'time_offset', 0x3d, 0x4e4}}, {@utf8}, {@fat=@nfs}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_win95}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uni_xlate}]}, 0x3, 0x27b, &(0x7f0000000880)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone3(0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
open$dir(&(0x7f0000000040)='./mnt\x00', 0x80000, 0x48)

5m41.047422737s ago: executing program 1 (id=1423):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

5m40.645144776s ago: executing program 1 (id=1426):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

5m39.691047829s ago: executing program 1 (id=1430):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r0, &(0x7f00000059c0)={0x2020}, 0x2020)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20)
preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/152, 0x98}], 0x1, 0x4, 0x10)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

5m39.159464452s ago: executing program 1 (id=1435):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000400)={0x0, 0x1f, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

5m23.739849637s ago: executing program 32 (id=1435):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000400)={0x0, 0x1f, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

4m59.366572065s ago: executing program 4 (id=1657):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m59.000456913s ago: executing program 4 (id=1661):
r0 = socket$kcm(0x10, 0x2, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000340)='\x00'/11, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./sec/tomoyo/query\x00', 0xa00c0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00'})
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000006c0)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec52989eabbaaafeeabfa127263666810e14acf4d9714218b3a06c65664e37fdcb38bd01776f9b94c794b799288ee4c49bad9722", 0x66, r1)
keyctl$revoke(0x3, r6)
sendmsg$nl_route(r4, 0x0, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

4m57.755383573s ago: executing program 4 (id=1673):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000)

4m56.901025654s ago: executing program 4 (id=1667):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000780)='./file0/../file0\x00')
mount$bind(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a1d804, 0x0)
pivot_root(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0/../file0\x00')

4m56.682165498s ago: executing program 4 (id=1671):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040))
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc)

4m56.20345174s ago: executing program 4 (id=1676):
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x5)
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000002840)={0x2c, 0x0, 0xfffffffb})

4m55.940619276s ago: executing program 33 (id=1676):
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x5)
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000002840)={0x2c, 0x0, 0xfffffffb})

3m7.876466717s ago: executing program 5 (id=2496):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1f7)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000001440)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000014c0)='./dev\x00', &(0x7f0000001500)='proc\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001540)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000001580)='./dev/kmsg\x00', &(0x7f00000015c0), 0x2000090, &(0x7f0000001600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

3m6.90223907s ago: executing program 5 (id=2506):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r0, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000000040)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199bf0dde5, 0xdd1, 0x4005, 0xf, 0x800, 0x0, 0x0, 0x2, 0xb3a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x800)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x7, 0x1, 0x0, {0x5, 0x1, 0xe418000000, 0x80000003, 0x4, 0x1, 0x9e9, 0xfffffffe, 0xb876, 0x8000, 0x7893b06e, 0xffffffffffffffff, r1, 0x3d, 0x1, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m6.681510366s ago: executing program 5 (id=2509):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000003c0)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000440)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000480)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m6.183183098s ago: executing program 5 (id=2515):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

3m6.039358821s ago: executing program 5 (id=2516):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x14000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000380)='./file0\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10, 0x3)

3m5.570887352s ago: executing program 5 (id=2523):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000080)='espintcp', 0x8)
write(r1, &(0x7f00000000c0)='\x00\n\x00\x00\x00\x00\x00\x00\x00\x00', 0xa)
read(r2, &(0x7f0000000140)=""/2, 0x2)

3m5.186994761s ago: executing program 34 (id=2523):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000080)='espintcp', 0x8)
write(r1, &(0x7f00000000c0)='\x00\n\x00\x00\x00\x00\x00\x00\x00\x00', 0xa)
read(r2, &(0x7f0000000140)=""/2, 0x2)

1m49.199353372s ago: executing program 6 (id=3098):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid\x87De', 0xfffffffffffffffe)

1m48.784935542s ago: executing program 6 (id=3099):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38)

1m48.596198447s ago: executing program 6 (id=3102):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m48.44392716s ago: executing program 6 (id=3105):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000880)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000008c0)={0x1, 0x0, [{0x1b, 0x0, 0xc00}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m48.051380849s ago: executing program 6 (id=3110):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m46.35289916s ago: executing program 6 (id=3121):
recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xa08, 0x7, 0x3, 0x20004, 0xe8c0, 0x20000000000080, 0x2, 0x400, 0xb, 0x20040000004, 0x2, 0x7f, 0x40, 0x3, 0x4], 0x70000, 0x160a55})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m41.964032124s ago: executing program 0 (id=3151):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120)
syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

1m41.779174428s ago: executing program 0 (id=3152):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x114, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x17, 0x8}, {0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0xe, 0xc71713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x114}}, 0x0)
write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfd6c)

1m41.598676752s ago: executing program 0 (id=3154):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x76, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)

1m41.425109407s ago: executing program 0 (id=3155):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)

1m41.341887929s ago: executing program 0 (id=3156):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m40.461993709s ago: executing program 0 (id=3165):
syz_usb_connect(0x0, 0x3d, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

1m30.847729407s ago: executing program 35 (id=3121):
recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xa08, 0x7, 0x3, 0x20004, 0xe8c0, 0x20000000000080, 0x2, 0x400, 0xb, 0x20040000004, 0x2, 0x7f, 0x40, 0x3, 0x4], 0x70000, 0x160a55})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m25.412368016s ago: executing program 36 (id=3165):
syz_usb_connect(0x0, 0x3d, 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

11.057591708s ago: executing program 7 (id=3519):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80)

11.055993858s ago: executing program 8 (id=3527):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240008d1}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="81", 0x1}], 0x1}, 0x4)

10.267255167s ago: executing program 8 (id=3521):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x3c}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x48, r2, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x50, r2, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x50}}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r2, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

9.605622503s ago: executing program 8 (id=3522):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000100)='./cgroup/../file0\x00', 0x2004401, &(0x7f0000000040), 0x2c, 0x561, &(0x7f0000000b40)="$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")
r1 = gettid()
timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}})
write(0xffffffffffffffff, &(0x7f0000000140)="a14f1742cfa8a23768d2b0d9c15dd00b697f0e8fc9651a98bc350189d0c24d3fd355d744d5f6ed4a71c0534e7d3690c9376d0ca0f6be7e6330f23bed4af852bae8dad84ce3e2598f6b6a4e", 0x4b)
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v1={0x1000000, [{0x81, 0x13ea}]}, 0xc, 0x3)
sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000)

9.605443763s ago: executing program 7 (id=3523):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x121042, 0x15)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r2 = syz_pidfd_open(r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
ppoll(&(0x7f0000000000)=[{r3, 0x3004}], 0x1, 0x0, 0x0, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

9.434478157s ago: executing program 8 (id=3525):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001a40)={0x2c, &(0x7f0000000780)={0x0, 0x7, 0x5, "1e418b615d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000000)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

8.514592568s ago: executing program 7 (id=3526):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x803, 0x2)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

7.15397697s ago: executing program 3 (id=3530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x4000001)
pipe2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001440)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001480)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000001500)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000001580)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001600), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000001640), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001680)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000300)=""/147}, 0x80)

6.139194145s ago: executing program 3 (id=3531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x80)

6.137828465s ago: executing program 7 (id=3539):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x803, 0x2)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

5.111187719s ago: executing program 3 (id=3533):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x30, 0x61, 0x5f, 0x61, 0x61, 0x2e]}}, 0x0, 0x2c, 0x0, 0x1, 0x9}, 0x28)

4.046105914s ago: executing program 3 (id=3535):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000100)='./cgroup/../file0\x00', 0x2004401, &(0x7f0000000040), 0x2c, 0x561, &(0x7f0000000b40)="$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")
r1 = gettid()
timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}})
write(0xffffffffffffffff, &(0x7f0000000140)="a14f1742cfa8a23768d2b0d9c15dd00b697f0e8fc9651a98bc350189d0c24d3fd355d744d5f6ed4a71c0534e7d3690c9376d0ca0f6be7e6330f23bed4af852bae8dad84ce3e2598f6b6a4e", 0x4b)
setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v1={0x1000000, [{0x81, 0x13ea}]}, 0xc, 0x3)
sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000)

3.991231126s ago: executing program 8 (id=3536):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x23, 0x10)
recvmmsg(r1, &(0x7f0000000240), 0x4000087, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/1, 0x1f80}], 0x310, &(0x7f0000000300)=[{&(0x7f0000000340)=""/1, 0x2034afa5}], 0x1, 0x0)

1.868142686s ago: executing program 2 (id=3537):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004"], 0x50)
rename(0x0, &(0x7f00000000c0)='./file0\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x5a63096154571fb7, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xfff1}, {0x16}}}, 0x24}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="080002691ceef6a0b0d82c0004"], 0x50)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80})
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.858441906s ago: executing program 3 (id=3538):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl(r0, 0xc4c85512, &(0x7f0000000200)="000000000200000000000000000000004c696e6520566f6c756d65")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0x5)
mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x81899, 0x0)
umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r2, 0x10000, 0x32, 0x0, 0x0)

1.632340181s ago: executing program 7 (id=3540):
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

1.523330704s ago: executing program 2 (id=3541):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000027c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002800))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002840)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002880)={0x8, 0x0, &(0x7f00000028c0)=[@increfs]})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002900)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002940)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002980)={0x8, 0x0, &(0x7f00000029c0)=[@acquire]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002a00)={0x4c, 0x0, &(0x7f0000002a40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000002b80)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002c00)={0x44, 0x0, &(0x7f0000002c40)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})

1.309284169s ago: executing program 8 (id=3542):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64b6365de974de7a040000000000000000000000496e9000", 0x0, 0x18)

483.260408ms ago: executing program 7 (id=3543):
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r0 = syz_mount_image$erofs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x81, &(0x7f0000000400)=ANY=[@ANYRES8=0x0], 0x81, 0x1d6, &(0x7f0000000440)="$eJzslT/P0lAUxp/bUkiNBlddXhNJ3tfB/kONDA7E0UETjcYNIoVUixjoAEz4KZxdddCVuPA9dFAnB3FzMCbW3PbWXmqBYEpC4vkNt097Drfnnt77AIIg/ls+f/r+8c1xTef6NGqonImff1HTHEXKn1d/Xnrv3X73wvr2Yb641chMV971/SUAi6aKQNyHYXj0SorXxPUelERraKXxB2AwhG5BwX2hXTA8FPqxpAc83zC6nu8ajwZ+hwuLDzYfHD7Us/UtnzN00vpCJsVHk+mTtu+7wxWhiWhOaL24ycuOnygrM2/uXxXLpoIbUn3y90p6Y8VLibChwBa6Doa7Ql9HJelN3BJp/edLSfMBdbZt/Qcskn2dE2Kzfbz0XHVLjoYDaEtxwtvDzHrqLCshNXPG3qLQ5YiDPtvpVyzaWl/1TKlFiuTw7eELvtZRUA9T/wxfMhxL/lSS/MkM+s/M0WR62eu3e27Pfeo49WvWFcu66phdj8EyIzva4H965E+npPm1NbllVsa4HQRDOx7/3DvjCoKhk+O4P7TI/xScXIyrZjl/ctE2Ocsu8MuJCvwKY9YWTRAEQRAEQRAEQRAEQRAE8U8cgSHM0vjrkXMnyv4dAAD//8ZMW7w=")
r1 = openat(r0, &(0x7f0000000640)='./file2\x00', 0x44040, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12012, r1, 0x0)
chown(&(0x7f0000000000)='./cgroup\x00', 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000d00)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x10\x00\x00\x00\x00\x00\x00\x00\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xcc%\x98\xa0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb4vDI\xc8\x91\x87\x1fuYG7}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x8e\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xcaBH\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xcd,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x0e\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6`\x96\xc13\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xb9\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfct\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xa5\xfa\xb9\xc8\x85\x16\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7I\xad\xaap\xddX\x14e\x11\xd8\xb3\xe9\xf2@\x97\xfa\x16\xe9\xb4l\x0e9\xf4\x9e\xefT\xfd\x9d\x18\xba\xaf\xfc\xa4\xa9\x98\xa4\x8fjJ\x7f\x9a\x13\xd8\xd7\x13\x13\x82\xa24@@=\xa4\xc3\xa7*Z\x12k\f\xb3\"u\x9c\x04|\xf3\x0e\x18y\xbb\xf4\r\"%\xb7\f9\xf2\"\x16\xe9\xb6\xaa\xd6\xe04E\xce\xc6\xbd\x91\x02\xd0\x0f\xd7\x05\x05\x19\x9b\xd4=\x19\'(\xdd\xedf\xefZ\xc20H\xf9$;D\x18\xbem\xfe\xf3dV\xe6\x94\x8e\x87\xaa\x02}\xed\x10\x05\xf2\xf3\xff\xdb\x05k\r\xbd\x12d\x95\xbb\xf2\x9b5k\"=x\xdb8\xfd\x85\n^sC\xa6@\x16\xee\xb1\xa4,Nuy\xbc\n7]\xa9oG\x0eN\xe4R\x96\xd0\xfb\xf1f\xc8\xb2\\\xee\xd3\xc7\x99\xf4', 0x0)
mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext2\x00', 0x1, &(0x7f0000000100)='^\x00')
mmap$IORING_OFF_CQ_RING(0x0, 0xfffffff9, 0x0, 0x100010, r0, 0x8000000)
fcntl$addseals(r2, 0x409, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x31, 0xffffffffffffffff, 0x1b5cb000)

382.067161ms ago: executing program 2 (id=3545):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00'})
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000440)=@in={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x2, 0x24004804)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)='A', 0x1}], 0x1}}], 0x1, 0x4000801)

377.263291ms ago: executing program 3 (id=3546):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x7, 0x3, 0x8, 0xffffffaf, 0xc2, "0b066448ef342702154d39ab3d4b4a05742d86", 0x3, 0x4})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
mkdir(0x0, 0xc0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020)
creat(&(0x7f0000000080)='./file0/file0\x00', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

259.398104ms ago: executing program 2 (id=3547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000003c0)=r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1c41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

194.854256ms ago: executing program 2 (id=3548):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRES64=r1], 0x1, 0x3a2, &(0x7f00000001c0)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8")
openat(0xffffffffffffff9c, 0x0, 0x14b442, 0x82)
bind$netlink(r0, &(0x7f0000000bc0)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000ec0)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r2, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x240000d4, &(0x7f0000001e40)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000001e80)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=3549):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'team_slave_1\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x24040084)
userfaultfd(0x80001)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x148)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000240)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee")
ptrace$getregset(0x4205, r2, 0x2, 0x0)
ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000003c0)={0x0})
ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000400)={0xd, 0x9f, 0x6})

kernel console output (not intermixed with test programs):

25.591560][ T5844] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  425.630326][ T5844] usb 1-1: config 0 interface 0 has no altsetting 0
[  425.648074][ T5844] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00
[  425.670108][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.692473][ T5844] usb 1-1: config 0 descriptor??
[  425.915493][ T7003] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  426.125474][ T7003] usb 6-1: Using ep0 maxpacket: 16
[  426.132849][ T7003] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  426.153470][ T7003] usb 6-1: config 0 interface 0 has no altsetting 0
[  426.158607][ T5844] input: HID 16c0:05e1 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:16C0:05E1.0007/input/input17
[  426.208201][ T7003] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  426.217576][ T7003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.236312][ T7003] usb 6-1: Product: syz
[  426.240541][ T7003] usb 6-1: Manufacturer: syz
[  426.245163][ T7003] usb 6-1: SerialNumber: syz
[  426.293041][ T5844] xinmo 0003:16C0:05E1.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 16c0:05e1] on usb-dummy_hcd.0-1/input0
[  426.301345][ T7003] usb 6-1: config 0 descriptor??
[  426.560317][ T7003] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input18
[  426.718042][    T8] usb 1-1: USB disconnect, device number 26
[  426.925468][ T7003] rc_core: IR keymap rc-imon-pad not found
[  426.931473][ T7003] Registered IR keymap rc-empty
[  426.941984][ T7003] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  426.965423][ T7003] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  426.998732][ T7003] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  427.017813][ T7003] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19
[  427.050674][ T7003] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:8> initialized
[  427.421759][    C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  427.422162][ T5844] usb 6-1: USB disconnect, device number 8
[  427.644507][T11782] ip_tables: iptables: counters copy to user failed while replacing table
[  427.675825][ T7003] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  427.855504][ T7003] usb 1-1: Using ep0 maxpacket: 8
[  427.883340][ T7003] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  427.895540][ T7003] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  427.915945][ T7003] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  427.956253][ T7003] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  427.976534][ T7003] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  428.002266][ T7003] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  428.029489][ T7003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.168299][T11796] FAULT_INJECTION: forcing a failure.
[  428.168299][T11796] name failslab, interval 1, probability 0, space 0, times 0
[  428.205551][T11796] CPU: 0 PID: 11796 Comm: syz.5.1998 Not tainted syzkaller #0
[  428.213095][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  428.223184][T11796] Call Trace:
[  428.226486][T11796]  <TASK>
[  428.229435][T11796]  dump_stack_lvl+0x18c/0x250
[  428.234143][T11796]  ? show_regs_print_info+0x20/0x20
[  428.239370][T11796]  ? load_image+0x420/0x420
[  428.243888][T11796]  ? __might_sleep+0xe0/0xe0
[  428.248488][T11796]  ? __lock_acquire+0x7eb0/0x7eb0
[  428.253548][T11796]  should_fail_ex+0x394/0x4c0
[  428.258240][T11796]  should_failslab+0x9/0x20
[  428.262749][T11796]  slab_pre_alloc_hook+0x59/0x300
[  428.267774][T11796]  ? __kernfs_new_node+0xaa/0x7f0
[  428.272805][T11796]  ? rcu_is_watching+0x15/0xb0
[  428.277579][T11796]  kmem_cache_alloc+0x5a/0x2c0
[  428.282353][T11796]  ? __kernfs_new_node+0xe5/0x7f0
[  428.287395][T11796]  __kernfs_new_node+0xe5/0x7f0
[  428.292259][T11796]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  428.298174][T11796]  ? _raw_spin_unlock+0x40/0x40
[  428.303038][T11796]  ? kernfs_new_node+0x260/0x260
[  428.307990][T11796]  ? pcpu_alloc+0x11e7/0x1880
[  428.312670][T11796]  ? cgroup_rstat_init+0x67/0x1d0
[  428.317719][T11796]  kernfs_new_node+0x14c/0x260
[  428.322495][T11796]  kernfs_create_dir_ns+0x44/0x120
[  428.327619][T11796]  cgroup_mkdir+0x4ae/0xe70
[  428.332138][T11796]  ? __up_read+0x2b8/0x6b0
[  428.336563][T11796]  ? css_task_iter_end+0x2c0/0x2c0
[  428.341686][T11796]  ? up_read+0x20/0x20
[  428.345756][T11796]  ? make_vfsuid+0x67/0xb0
[  428.350189][T11796]  ? generic_permission+0x1ed/0x590
[  428.355396][T11796]  ? kernfs_iop_permission+0x2c4/0x3b0
[  428.360871][T11796]  ? css_task_iter_end+0x2c0/0x2c0
[  428.365983][T11796]  kernfs_iop_mkdir+0x241/0x3e0
[  428.370846][T11796]  vfs_mkdir+0x2a5/0x470
[  428.375094][T11796]  do_mkdirat+0x1dc/0x450
[  428.379427][T11796]  ? vfs_mkdir+0x470/0x470
[  428.383854][T11796]  __x64_sys_mkdirat+0x89/0xa0
[  428.388625][T11796]  do_syscall_64+0x55/0xb0
[  428.393042][T11796]  ? clear_bhb_loop+0x40/0x90
[  428.397722][T11796]  ? clear_bhb_loop+0x40/0x90
[  428.402407][T11796]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  428.408314][T11796] RIP: 0033:0x7fb87df9e559
[  428.412738][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.432357][T11796] RSP: 002b:00007fb87ee35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  428.440875][T11796] RAX: ffffffffffffffda RBX: 00007fb87e225fa0 RCX: 00007fb87df9e559
[  428.448850][T11796] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c
[  428.456828][T11796] RBP: 00007fb87e0358b0 R08: 0000000000000000 R09: 0000000000000000
[  428.464803][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  428.472774][T11796] R13: 00007fb87e226038 R14: 00007fb87e225fa0 R15: 00007fff847da468
[  428.480783][T11796]  </TASK>
[  428.545872][ T7003] usb 1-1: GET_CAPABILITIES returned 0
[  428.551442][ T7003] usbtmc 1-1:16.0: can't read capabilities
[  428.848166][T11780] usbtmc 1-1:16.0: usb_control_msg returned -71
[  428.849022][ T5850] usb 1-1: USB disconnect, device number 27
[  429.116387][T11823] FAULT_INJECTION: forcing a failure.
[  429.116387][T11823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  429.145298][T11823] CPU: 0 PID: 11823 Comm: syz.5.2004 Not tainted syzkaller #0
[  429.152840][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  429.162933][T11823] Call Trace:
[  429.166234][T11823]  <TASK>
[  429.169188][T11823]  dump_stack_lvl+0x18c/0x250
[  429.173904][T11823]  ? show_regs_print_info+0x20/0x20
[  429.179137][T11823]  ? load_image+0x420/0x420
[  429.183671][T11823]  ? __might_fault+0xaa/0x120
[  429.188375][T11823]  ? __lock_acquire+0x7eb0/0x7eb0
[  429.193426][T11823]  ? __virt_addr_valid+0x10c/0x380
[  429.198570][T11823]  should_fail_ex+0x394/0x4c0
[  429.203288][T11823]  _copy_to_user+0x2f/0xa0
[  429.207733][T11823]  bpf_verifier_vlog+0x4e6/0x840
[  429.212740][T11823]  __btf_verifier_log+0xe3/0x140
[  429.217711][T11823]  ? btf_check_sec_info+0x350/0x350
[  429.222952][T11823]  __btf_verifier_log_type+0x4f7/0x690
[  429.228447][T11823]  ? btf_sec_info_cmp+0x5d/0x100
[  429.233419][T11823]  ? btf_int_show+0x2810/0x2810
[  429.238312][T11823]  btf_struct_check_meta+0x410/0xce0
[  429.243639][T11823]  btf_check_all_metas+0x371/0xaf0
[  429.248787][T11823]  btf_parse_type_sec+0xfc/0x1960
[  429.253834][T11823]  ? btf_check_sec_info+0x350/0x350
[  429.259072][T11823]  ? __virt_addr_valid+0x10c/0x380
[  429.264212][T11823]  ? btf_verifier_log+0x1a0/0x1a0
[  429.269270][T11823]  ? btf_parse_hdr+0x545/0x700
[  429.274057][T11823]  ? btf_parse_str_sec+0x20d/0x2a0
[  429.279205][T11823]  btf_new_fd+0x440/0x9e0
[  429.283587][T11823]  ? bpf_btf_show_fdinfo+0x80/0x80
[  429.288741][T11823]  ? capable+0x88/0xe0
[  429.292835][T11823]  __sys_bpf+0x670/0x890
[  429.297101][T11823]  ? bpf_link_show_fdinfo+0x560/0x560
[  429.302512][T11823]  ? lock_chain_count+0x20/0x20
[  429.307405][T11823]  __x64_sys_bpf+0x7c/0x90
[  429.311847][T11823]  do_syscall_64+0x55/0xb0
[  429.316284][T11823]  ? clear_bhb_loop+0x40/0x90
[  429.320999][T11823]  ? clear_bhb_loop+0x40/0x90
[  429.325697][T11823]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.331619][T11823] RIP: 0033:0x7fb87df9e559
[  429.336057][T11823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.355690][T11823] RSP: 002b:00007fb87ee35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  429.364143][T11823] RAX: ffffffffffffffda RBX: 00007fb87e225fa0 RCX: 00007fb87df9e559
[  429.372140][T11823] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  429.380139][T11823] RBP: 00007fb87e0358b0 R08: 0000000000000000 R09: 0000000000000000
[  429.388132][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.396126][T11823] R13: 00007fb87e226038 R14: 00007fb87e225fa0 R15: 00007fff847da468
[  429.404140][T11823]  </TASK>
[  429.744782][T11833] FAULT_INJECTION: forcing a failure.
[  429.744782][T11833] name failslab, interval 1, probability 0, space 0, times 0
[  429.774991][T11833] CPU: 0 PID: 11833 Comm: syz.0.2007 Not tainted syzkaller #0
[  429.782527][T11833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  429.792652][T11833] Call Trace:
[  429.795957][T11833]  <TASK>
[  429.798925][T11833]  dump_stack_lvl+0x18c/0x250
[  429.803643][T11833]  ? show_regs_print_info+0x20/0x20
[  429.808879][T11833]  ? load_image+0x420/0x420
[  429.813422][T11833]  ? __might_sleep+0xe0/0xe0
[  429.818057][T11833]  ? __lock_acquire+0x7eb0/0x7eb0
[  429.823124][T11833]  should_fail_ex+0x394/0x4c0
[  429.827853][T11833]  should_failslab+0x9/0x20
[  429.832399][T11833]  slab_pre_alloc_hook+0x59/0x300
[  429.837463][T11833]  ? afs_lookup_cell+0x580/0x1680
[  429.842678][T11833]  ? afs_lookup_cell+0x580/0x1680
[  429.847751][T11833]  __kmem_cache_alloc_node+0x53/0x250
[  429.853181][T11833]  ? afs_lookup_cell+0x580/0x1680
[  429.858259][T11833]  __kmalloc+0xa7/0x240
[  429.862467][T11833]  afs_lookup_cell+0x580/0x1680
[  429.867384][T11833]  ? afs_net+0x45/0x270
[  429.871585][T11833]  ? __lock_acquire+0x7eb0/0x7eb0
[  429.876649][T11833]  ? afs_find_cell+0x310/0x310
[  429.881476][T11833]  ? afs_net+0x45/0x270
[  429.885679][T11833]  ? afs_net+0x45/0x270
[  429.889879][T11833]  afs_cell_init+0x6e/0x300
[  429.894417][T11833]  proc_simple_write+0x109/0x140
[  429.899412][T11833]  ? proc_remove+0x80/0x80
[  429.903880][T11833]  proc_reg_write+0x1e4/0x2d0
[  429.908694][T11833]  ? proc_reg_llseek+0x280/0x280
[  429.913674][T11833]  vfs_write+0x299/0x9a0
[  429.917980][T11833]  ? file_end_write+0x250/0x250
[  429.922868][T11833]  ? __fget_files+0x28/0x460
[  429.927504][T11833]  ? __fget_files+0x3fc/0x460
[  429.932243][T11833]  ? __fdget_pos+0x2a3/0x330
[  429.936885][T11833]  ? ksys_write+0x74/0x260
[  429.941353][T11833]  ksys_write+0x151/0x260
[  429.945741][T11833]  ? __ia32_sys_read+0x90/0x90
[  429.950551][T11833]  ? lockdep_hardirqs_on+0x98/0x150
[  429.955888][T11833]  do_syscall_64+0x55/0xb0
[  429.960341][T11833]  ? clear_bhb_loop+0x40/0x90
[  429.965062][T11833]  ? clear_bhb_loop+0x40/0x90
[  429.969790][T11833]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.975738][T11833] RIP: 0033:0x7fbb5cd9e559
[  429.980195][T11833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.999835][T11833] RSP: 002b:00007fbb5dd4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  430.008286][T11833] RAX: ffffffffffffffda RBX: 00007fbb5d025fa0 RCX: 00007fbb5cd9e559
[  430.016295][T11833] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000003
[  430.024306][T11833] RBP: 00007fbb5ce358b0 R08: 0000000000000000 R09: 0000000000000000
[  430.032318][T11833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.040327][T11833] R13: 00007fbb5d026038 R14: 00007fbb5d025fa0 R15: 00007ffd778e26a8
[  430.048354][T11833]  </TASK>
[  430.386437][T11853] netlink: 'syz.2.2011': attribute type 1 has an invalid length.
[  430.514477][T11853] 8021q: adding VLAN 0 to HW filter on device bond1
[  430.575309][T11858] bond1: (slave gretap1): making interface the new active one
[  430.590007][T11858] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  431.973013][T11884] rxe_eth0 speed is unknown, defaulting to 1000
[  432.196448][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'.
[  432.340099][T11892] bridge_slave_1 (unregistering): left allmulticast mode
[  432.350364][T11892] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.557053][T11884] C speed is unknown, defaulting to 1000
[  432.586957][T11884] ip6_vti0 speed is unknown, defaulting to 1000
[  432.630418][T11903] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  432.675498][ T7003] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  432.858971][ T7003] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.903583][ T7003] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  432.931462][ T7003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.957180][ T7003] usb 6-1: Product: syz
[  432.970257][ T7003] usb 6-1: Manufacturer: syz
[  432.980895][ T7003] usb 6-1: SerialNumber: syz
[  434.071550][ T7003] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  434.088772][ T7003] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  434.116217][ T7003] cdc_ncm 6-1:1.0: setting rx_max = 2048
[  434.128793][T11934] overlayfs: failed to clone upperpath
[  434.186052][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  434.426186][    T9] usb 1-1: Using ep0 maxpacket: 32
[  434.435125][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.447114][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.457493][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  434.471991][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  434.484075][ T7003] cdc_ncm 6-1:1.0: setting tx_max = 88
[  434.490749][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.521174][    T9] usb 1-1: config 0 descriptor??
[  434.537868][ T7003] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  434.580996][ T7003] usb 6-1: USB disconnect, device number 9
[  434.611176][ T7003] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  435.003650][    T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0008/input/input20
[  435.113274][    T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0008/input/input21
[  435.205893][    T9] kye 0003:0458:5011.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[  435.727255][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'.
[  435.738537][T11975] netlink: 'syz.2.2050': attribute type 11 has an invalid length.
[  435.753481][T11975] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.763261][T11975] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.772735][T11975] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.782018][T11975] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.797608][T11977] usb 1-1: USB disconnect, device number 28
[  435.806818][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'.
[  435.835523][T11975] netlink: 'syz.2.2050': attribute type 11 has an invalid length.
[  436.393618][T12006] overlayfs: failed to clone upperpath
[  437.724927][T12040] syzkaller0: entered promiscuous mode
[  437.740278][T12040] syzkaller0: entered allmulticast mode
[  437.749416][T12040] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  439.888922][T12090] 9pnet_fd: Insufficient options for proto=fd
[  440.076258][ T5787] Bluetooth: hci4: command 0x1003 tx timeout
[  440.084645][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  440.174902][T12053] can0: slcan on ptm0.
[  440.286844][T12052] can0 (unregistered): slcan off ptm0.
[  440.318975][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  441.680711][T12160] fuse: Bad value for 'fd'
[  441.744723][T12162] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  442.256784][T12175] fuse: Bad value for 'fd'
[  442.351442][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2110'.
[  443.106826][T12193] FAULT_INJECTION: forcing a failure.
[  443.106826][T12193] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  443.128026][T12193] CPU: 1 PID: 12193 Comm: syz.0.2117 Not tainted syzkaller #0
[  443.135572][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  443.145661][T12193] Call Trace:
[  443.148975][T12193]  <TASK>
[  443.151933][T12193]  dump_stack_lvl+0x18c/0x250
[  443.156649][T12193]  ? show_regs_print_info+0x20/0x20
[  443.161892][T12193]  ? load_image+0x420/0x420
[  443.166450][T12193]  ? __lock_acquire+0x7eb0/0x7eb0
[  443.171510][T12193]  should_fail_ex+0x394/0x4c0
[  443.176222][T12193]  prepare_alloc_pages+0x1e1/0x5b0
[  443.181372][T12193]  __alloc_pages+0x134/0x460
[  443.186000][T12193]  ? zone_statistics+0x170/0x170
[  443.190973][T12193]  ? lockdep_softirqs_off+0x440/0x440
[  443.196365][T12193]  ? free_zapped_rcu+0x250/0x250
[  443.201317][T12193]  __kmalloc_large_node+0x8c/0x1f0
[  443.206439][T12193]  ? io_alloc_hash_table+0x2d/0xb0
[  443.211578][T12193]  __kmalloc+0x114/0x240
[  443.215868][T12193]  ? init_hash_table+0xc7/0xe0
[  443.220647][T12193]  io_alloc_hash_table+0x2d/0xb0
[  443.225585][T12193]  io_ring_ctx_alloc+0x160/0xc10
[  443.230555][T12193]  io_uring_create+0x2df/0x1330
[  443.235409][T12193]  ? __might_fault+0xc6/0x120
[  443.240096][T12193]  ? __might_fault+0xaa/0x120
[  443.244775][T12193]  __se_sys_io_uring_setup+0x29f/0x2b0
[  443.250233][T12193]  ? __x64_sys_io_uring_setup+0x60/0x60
[  443.255788][T12193]  ? lockdep_hardirqs_on+0x98/0x150
[  443.260990][T12193]  do_syscall_64+0x55/0xb0
[  443.265406][T12193]  ? clear_bhb_loop+0x40/0x90
[  443.270080][T12193]  ? clear_bhb_loop+0x40/0x90
[  443.274754][T12193]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  443.280670][T12193] RIP: 0033:0x7fbb5cd9e559
[  443.285086][T12193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.304701][T12193] RSP: 002b:00007fbb5dd4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  443.313115][T12193] RAX: ffffffffffffffda RBX: 00007fbb5d025fa0 RCX: 00007fbb5cd9e559
[  443.321088][T12193] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00000000000048fd
[  443.329057][T12193] RBP: 00007fbb5ce358b0 R08: 0000000000000000 R09: 0000000000000000
[  443.337030][T12193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  443.344997][T12193] R13: 00007fbb5d026038 R14: 00007fbb5d025fa0 R15: 00007ffd778e26a8
[  443.352981][T12193]  </TASK>
[  444.586024][T12226] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  445.069091][T12236] overlayfs: failed to clone upperpath
[  445.247885][T12244] overlayfs: failed to clone upperpath
[  445.306848][T12238] ip_tables: iptables: counters copy to user failed while replacing table
[  445.653168][T12258] overlayfs: failed to resolve './file0': -2
[  446.963687][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2154'.
[  448.274858][T12331] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  448.282961][    C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  448.290412][T12331] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  448.303705][    C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  449.108982][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'.
[  449.133011][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'.
[  449.234407][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2172'.
[  452.099108][T12410] overlayfs: failed to clone upperpath
[  452.136598][T12412] netlink: 'syz.5.2189': attribute type 1 has an invalid length.
[  452.223930][T12412] 8021q: adding VLAN 0 to HW filter on device bond1
[  452.323796][T12417] 8021q: adding VLAN 0 to HW filter on device team0
[  452.375350][T12417] bond1: (slave team0): Enslaving as a backup interface with an up link
[  452.770842][T12436] FAULT_INJECTION: forcing a failure.
[  452.770842][T12436] name failslab, interval 1, probability 0, space 0, times 0
[  452.784178][T12436] CPU: 0 PID: 12436 Comm: syz.5.2198 Not tainted syzkaller #0
[  452.791887][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  452.802177][T12436] Call Trace:
[  452.805486][T12436]  <TASK>
[  452.808440][T12436]  dump_stack_lvl+0x18c/0x250
[  452.813187][T12436]  ? show_regs_print_info+0x20/0x20
[  452.818482][T12436]  ? load_image+0x420/0x420
[  452.823003][T12436]  ? __might_sleep+0xe0/0xe0
[  452.827614][T12436]  ? __lock_acquire+0x7eb0/0x7eb0
[  452.832651][T12436]  should_fail_ex+0x394/0x4c0
[  452.837348][T12436]  should_failslab+0x9/0x20
[  452.841861][T12436]  slab_pre_alloc_hook+0x59/0x300
[  452.846892][T12436]  ? d_instantiate+0x6f/0x90
[  452.851489][T12436]  kmem_cache_alloc+0x5a/0x2c0
[  452.856262][T12436]  ? alloc_empty_file+0x9e/0x1d0
[  452.861206][T12436]  alloc_empty_file+0x9e/0x1d0
[  452.865979][T12436]  alloc_file+0x5b/0x600
[  452.870238][T12436]  alloc_file_pseudo+0x184/0x210
[  452.875182][T12436]  ? fput+0x1a0/0x1a0
[  452.879194][T12436]  anon_inode_getfile+0xc5/0x1a0
[  452.884158][T12436]  sync_file_create+0x76/0x1c0
[  452.888968][T12436]  sw_sync_ioctl+0x921/0xaa0
[  452.893566][T12436]  ? __bpf_trace_sync_timeline+0x100/0x100
[  452.899382][T12436]  ? __fget_files+0x28/0x460
[  452.904000][T12436]  ? bpf_lsm_file_ioctl+0x9/0x10
[  452.908954][T12436]  ? security_file_ioctl+0x80/0xa0
[  452.914079][T12436]  ? __bpf_trace_sync_timeline+0x100/0x100
[  452.919895][T12436]  __se_sys_ioctl+0xfd/0x170
[  452.924495][T12436]  do_syscall_64+0x55/0xb0
[  452.928913][T12436]  ? clear_bhb_loop+0x40/0x90
[  452.933593][T12436]  ? clear_bhb_loop+0x40/0x90
[  452.938275][T12436]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.944182][T12436] RIP: 0033:0x7fb87df9e559
[  452.948606][T12436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.968235][T12436] RSP: 002b:00007fb87ee35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  452.976756][T12436] RAX: ffffffffffffffda RBX: 00007fb87e225fa0 RCX: 00007fb87df9e559
[  452.984933][T12436] RDX: 0000200000000b00 RSI: 00000000c0285700 RDI: 0000000000000004
[  452.992930][T12436] RBP: 00007fb87e0358b0 R08: 0000000000000000 R09: 0000000000000000
[  453.000925][T12436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.008919][T12436] R13: 00007fb87e226038 R14: 00007fb87e225fa0 R15: 00007fff847da468
[  453.016927][T12436]  </TASK>
[  453.103787][T12426] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  453.113103][T12426] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  453.122355][T12426] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  453.131502][T12426] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  453.171284][T12437] bridge_slave_0: left promiscuous mode
[  453.177784][T12437] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.201341][T12440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  453.451769][T12452] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f]
[  453.513524][T12452] caller generic_access_phys+0x33f/0x650 mapping multiple BARs
[  453.624953][T12462] size and base must be multiples of 4 kiB
[  453.632994][T12462] CPU: 1 PID: 12462 Comm: syz.5.2208 Not tainted syzkaller #0
[  453.640515][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  453.650614][T12462] Call Trace:
[  453.653946][T12462]  <TASK>
[  453.656908][T12462]  dump_stack_lvl+0x18c/0x250
[  453.661626][T12462]  ? show_regs_print_info+0x20/0x20
[  453.666856][T12462]  ? load_image+0x420/0x420
[  453.671477][T12462]  mtrr_del+0xc3/0xf0
[  453.675503][T12462]  mtrr_ioctl+0xcb6/0x13a0
[  453.679976][T12462]  ? mtrr_close+0x200/0x200
[  453.684539][T12462]  ? __fget_files+0x28/0x460
[  453.689188][T12462]  ? mtrr_close+0x200/0x200
[  453.693736][T12462]  proc_reg_unlocked_ioctl+0x1d2/0x2c0
[  453.699229][T12462]  ? proc_reg_poll+0x290/0x290
[  453.704020][T12462]  __se_sys_ioctl+0xfd/0x170
[  453.708648][T12462]  do_syscall_64+0x55/0xb0
[  453.713104][T12462]  ? clear_bhb_loop+0x40/0x90
[  453.717820][T12462]  ? clear_bhb_loop+0x40/0x90
[  453.722547][T12462]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  453.728480][T12462] RIP: 0033:0x7fb87df9e559
[  453.732940][T12462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.752584][T12462] RSP: 002b:00007fb87ee35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  453.761015][T12462] RAX: ffffffffffffffda RBX: 00007fb87e225fa0 RCX: 00007fb87df9e559
[  453.768991][T12462] RDX: 00002000000001c0 RSI: 00000000400c4d04 RDI: 0000000000000005
[  453.777031][T12462] RBP: 00007fb87e0358b0 R08: 0000000000000000 R09: 0000000000000000
[  453.785005][T12462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.792993][T12462] R13: 00007fb87e226038 R14: 00007fb87e225fa0 R15: 00007fff847da468
[  453.800990][T12462]  </TASK>
[  454.536533][T12484] netlink: 'syz.0.2216': attribute type 4 has an invalid length.
[  454.606380][T12489] netlink: 'syz.0.2216': attribute type 4 has an invalid length.
[  454.701131][T12495] overlayfs: failed to clone upperpath
[  455.372822][T12534] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2229'.
[  456.562701][T12561] netlink: 'syz.0.2242': attribute type 4 has an invalid length.
[  457.297451][T12577] overlayfs: failed to clone upperpath
[  457.577852][T12585] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  457.763946][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  457.763961][   T28] audit: type=1326 audit(1792166657.568:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12593 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x0
[  458.199647][T12608] overlayfs: failed to clone upperpath
[  458.210879][T12609] netlink: 'syz.3.2261': attribute type 10 has an invalid length.
[  458.248143][T12609] team0: Port device dummy0 added
[  458.556358][T12589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  459.174689][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'.
[  460.010477][T12653] overlayfs: failed to clone upperpath
[  460.113762][T12658] overlayfs: failed to clone upperpath
[  460.174492][T12661] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2284'.
[  460.199891][T12661] ip6gre1: entered allmulticast mode
[  460.634123][   T28] audit: type=1326 audit(1792166660.438:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.670040][   T28] audit: type=1326 audit(1792166660.438:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.694979][   T28] audit: type=1326 audit(1792166660.478:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.733065][   T28] audit: type=1326 audit(1792166660.478:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.769290][   T28] audit: type=1326 audit(1792166660.478:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.824251][   T28] audit: type=1326 audit(1792166660.478:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.856172][   T28] audit: type=1326 audit(1792166660.478:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.890404][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'.
[  460.903095][T12674] netlink: 'syz.0.2288': attribute type 12 has an invalid length.
[  460.906803][   T28] audit: type=1326 audit(1792166660.478:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.920114][T12674] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  460.937024][   T28] audit: type=1326 audit(1792166660.478:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.0.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5cd9e559 code=0x7ffc0000
[  460.943952][T12674] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  460.976753][T12674] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  460.985565][T12674] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  461.002666][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'.
[  461.011648][T12677] netlink: 'syz.0.2288': attribute type 12 has an invalid length.
[  464.520410][T12745] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2314'.
[  464.732129][T12751] syzkaller1: entered allmulticast mode
[  465.232887][T12763] rxe_eth0 speed is unknown, defaulting to 1000
[  465.606901][T12763] C speed is unknown, defaulting to 1000
[  465.614137][T12763] ip6_vti0 speed is unknown, defaulting to 1000
[  466.169647][T12774] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  466.176924][T12774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  466.219001][T12780] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[  466.225571][T12780] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  466.238806][T12774] vhci_hcd vhci_hcd.0: Device attached
[  466.280537][T12774] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5)
[  466.287116][T12774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  466.294937][T12780] vhci_hcd vhci_hcd.0: Device attached
[  466.298585][T12774] vhci_hcd vhci_hcd.0: Device attached
[  466.311958][T12774] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  466.325194][T12787] overlayfs: failed to clone upperpath
[  466.354461][T12774] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12)
[  466.361133][T12774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  466.403573][T12774] vhci_hcd vhci_hcd.0: Device attached
[  466.412225][T12780] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(8)
[  466.418797][T12780] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  466.454867][T12780] vhci_hcd vhci_hcd.0: Device attached
[  466.477101][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'.
[  466.495978][T12774] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(14)
[  466.502646][T12774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  466.521093][T12780] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(16)
[  466.526008][   T27] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  466.527728][T12780] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  466.587510][T12774] vhci_hcd vhci_hcd.0: Device attached
[  466.607450][T12780] vhci_hcd vhci_hcd.0: Device attached
[  466.626861][T12781] vhci_hcd: connection closed
[  466.637870][T12778] vhci_hcd: connection reset by peer
[  466.649133][T12784] vhci_hcd: connection closed
[  466.649432][T12790] vhci_hcd: connection closed
[  466.654358][T12788] vhci_hcd: connection closed
[  466.675961][   T42] vhci_hcd: stop threads
[  466.693987][T12796] vhci_hcd: connection closed
[  466.709731][   T42] vhci_hcd: release socket
[  466.738594][T12794] vhci_hcd: connection closed
[  466.752697][   T42] vhci_hcd: disconnect device
[  466.762845][   T42] vhci_hcd: stop threads
[  466.769816][   T42] vhci_hcd: release socket
[  466.774291][   T42] vhci_hcd: disconnect device
[  466.788564][   T42] vhci_hcd: stop threads
[  466.792976][   T42] vhci_hcd: release socket
[  466.807607][   T42] vhci_hcd: disconnect device
[  466.826733][   T42] vhci_hcd: stop threads
[  466.831406][   T42] vhci_hcd: release socket
[  466.844504][   T42] vhci_hcd: disconnect device
[  466.866172][   T42] vhci_hcd: stop threads
[  466.870531][   T42] vhci_hcd: release socket
[  466.891979][   T42] vhci_hcd: disconnect device
[  466.897120][   T42] vhci_hcd: stop threads
[  466.901388][   T42] vhci_hcd: release socket
[  466.928346][   T42] vhci_hcd: disconnect device
[  466.945758][   T42] vhci_hcd: stop threads
[  466.959560][   T42] vhci_hcd: release socket
[  466.965634][   T42] vhci_hcd: disconnect device
[  467.810837][T12825] overlayfs: failed to clone upperpath
[  467.848948][T12827] tipc: Started in network mode
[  467.854773][T12827] tipc: Node identity 7edb4f1717af, cluster identity 4711
[  467.864301][T12827] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  467.874263][T12826] tipc: Resetting bearer <eth:syzkaller0>
[  467.923620][T12826] tipc: Disabling bearer <eth:syzkaller0>
[  468.015681][T12836] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  468.249108][T12848] overlayfs: failed to clone upperpath
[  468.424585][T12851] netlink: 'syz.3.2355': attribute type 10 has an invalid length.
[  468.493801][T12851] 8021q: adding VLAN 0 to HW filter on device team0
[  468.521605][T12851] bond0: (slave team0): Enslaving as an active interface with an up link
[  468.787900][T12863] FAULT_INJECTION: forcing a failure.
[  468.787900][T12863] name failslab, interval 1, probability 0, space 0, times 0
[  468.821831][T12863] CPU: 1 PID: 12863 Comm: syz.5.2359 Not tainted syzkaller #0
[  468.829362][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  468.839450][T12863] Call Trace:
[  468.842750][T12863]  <TASK>
[  468.845728][T12863]  dump_stack_lvl+0x18c/0x250
[  468.850445][T12863]  ? show_regs_print_info+0x20/0x20
[  468.855715][T12863]  ? load_image+0x420/0x420
[  468.860274][T12863]  ? __lock_acquire+0x7eb0/0x7eb0
[  468.865352][T12863]  ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0
[  468.872116][T12863]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  468.878164][T12863]  should_fail_ex+0x394/0x4c0
[  468.882894][T12863]  should_failslab+0x9/0x20
[  468.887444][T12863]  slab_pre_alloc_hook+0x59/0x300
[  468.892507][T12863]  ? pcpu_alloc+0x11e7/0x1880
[  468.897226][T12863]  ? percpu_ref_init+0xc3/0x340
[  468.902115][T12863]  __kmem_cache_alloc_node+0x53/0x250
[  468.907534][T12863]  ? percpu_ref_init+0xc3/0x340
[  468.912409][T12863]  ? blk_cgroup_congested+0x220/0x220
[  468.917802][T12863]  kmalloc_trace+0x2a/0xe0
[  468.922265][T12863]  percpu_ref_init+0xc3/0x340
[  468.926992][T12863]  blkg_alloc+0xf4/0x870
[  468.931275][T12863]  ? lockdep_hardirqs_on+0x98/0x150
[  468.936520][T12863]  blkg_conf_prep+0x60f/0xdc0
[  468.941264][T12863]  tg_set_conf+0xe8/0x3e0
[  468.945649][T12863]  ? tg_prfill_conf_u64+0x80/0x80
[  468.950774][T12863]  ? tg_print_conf_uint+0xe0/0xe0
[  468.956307][T12863]  cgroup_file_write+0x2cd/0x6a0
[  468.961300][T12863]  ? kernfs_fop_write_iter+0x1dc/0x520
[  468.966803][T12863]  ? cgroup_seqfile_stop+0xd0/0xd0
[  468.971956][T12863]  ? __virt_addr_valid+0x10c/0x380
[  468.975130][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'.
[  468.977086][T12863]  ? __virt_addr_valid+0x10c/0x380
[  468.977182][T12863]  ? cgroup_seqfile_stop+0xd0/0xd0
[  468.977206][T12863]  kernfs_fop_write_iter+0x3a4/0x520
[  468.977234][T12863]  vfs_write+0x474/0x9a0
[  469.005948][T12863]  ? file_end_write+0x250/0x250
[  469.010804][T12863]  ? __fget_files+0x3fc/0x460
[  469.015488][T12863]  ? __fdget_pos+0x2a3/0x330
[  469.020074][T12863]  ? ksys_write+0x74/0x260
[  469.024487][T12863]  ksys_write+0x151/0x260
[  469.028818][T12863]  ? __ia32_sys_read+0x90/0x90
[  469.033606][T12863]  ? lockdep_hardirqs_on+0x98/0x150
[  469.038825][T12863]  do_syscall_64+0x55/0xb0
[  469.043266][T12863]  ? clear_bhb_loop+0x40/0x90
[  469.047948][T12863]  ? clear_bhb_loop+0x40/0x90
[  469.052663][T12863]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  469.058556][T12863] RIP: 0033:0x7fb87df9e559
[  469.062978][T12863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.082684][T12863] RSP: 002b:00007fb87ee35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  469.091103][T12863] RAX: ffffffffffffffda RBX: 00007fb87e225fa0 RCX: 00007fb87df9e559
[  469.099084][T12863] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000003
[  469.107058][T12863] RBP: 00007fb87e0358b0 R08: 0000000000000000 R09: 0000000000000000
[  469.115031][T12863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.123016][T12863] R13: 00007fb87e226038 R14: 00007fb87e225fa0 R15: 00007fff847da468
[  469.131023][T12863]  </TASK>
[  469.965795][ T7003] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  470.157374][ T7003] usb 6-1: not running at top speed; connect to a high speed hub
[  470.198622][ T7003] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  470.219678][ T7003] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  470.245468][ T7003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.281651][ T7003] usb 6-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  470.321354][T12910] overlayfs: failed to clone upperpath
[  470.491257][ T7003] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  470.502874][ T7003] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  470.520718][ T7003] uvcvideo 6-1:1.1: Failed to initialize the device (-71).
[  470.536499][ T7003] usb 6-1: USB disconnect, device number 10
[  471.396083][ T5910] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  471.527209][T12938] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.591602][ T5910] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  471.618148][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.650355][ T5910] usb 6-1: config 0 descriptor??
[  471.675935][   T27] vhci_hcd: vhci_device speed not set
[  471.684301][ T5910] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  471.852912][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'.
[  472.093778][T12955] netlink: 'syz.0.2393': attribute type 1 has an invalid length.
[  472.150136][T12955] 8021q: adding VLAN 0 to HW filter on device bond1
[  472.268233][T12959] bond1: (slave veth5): Enslaving as an active interface with a down link
[  472.546459][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2397'.
[  472.573844][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2397'.
[  472.824810][T12982] overlayfs: failed to clone upperpath
[  472.918732][ T5910] gspca_stv06xx: I2C: Read error writing address: -71
[  472.948466][ T5910] usb 6-1: USB disconnect, device number 11
[  473.970059][T13003] FAULT_INJECTION: forcing a failure.
[  473.970059][T13003] name failslab, interval 1, probability 0, space 0, times 0
[  474.018083][T13003] CPU: 0 PID: 13003 Comm: syz.5.2411 Not tainted syzkaller #0
[  474.025613][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  474.035694][T13003] Call Trace:
[  474.038999][T13003]  <TASK>
[  474.041961][T13003]  dump_stack_lvl+0x18c/0x250
[  474.046678][T13003]  ? show_regs_print_info+0x20/0x20
[  474.051904][T13003]  ? load_image+0x420/0x420
[  474.056454][T13003]  ? __might_sleep+0xe0/0xe0
[  474.061086][T13003]  ? __lock_acquire+0x7eb0/0x7eb0
[  474.066151][T13003]  should_fail_ex+0x394/0x4c0
[  474.070873][T13003]  should_failslab+0x9/0x20
[  474.075411][T13003]  slab_pre_alloc_hook+0x59/0x300
[  474.080460][T13003]  ? __lock_acquire+0x1431/0x7eb0
[  474.085518][T13003]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  474.091305][T13003]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  474.097056][T13003]  __kmem_cache_alloc_node+0x53/0x250
[  474.102476][T13003]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  474.108230][T13003]  __kmalloc+0xa7/0x240
[  474.112437][T13003]  tomoyo_realpath_from_path+0xe6/0x5c0
[  474.118019][T13003]  tomoyo_check_open_permission+0x224/0x460
[  474.123927][T13003]  ? tomoyo_check_open_permission+0x1cf/0x460
[  474.130001][T13003]  ? tomoyo_check_path_number_acl+0x280/0x280
[  474.136092][T13003]  ? __asan_memset+0x22/0x40
[  474.140703][T13003]  ? __rwlock_init+0x150/0x150
[  474.145493][T13003]  ? tomoyo_file_open+0xed/0x180
[  474.150451][T13003]  security_file_open+0x62/0xa0
[  474.155318][T13003]  do_dentry_open+0x32b/0x14b0
[  474.160106][T13003]  ? __asan_memcpy+0x40/0x70
[  474.164701][T13003]  path_openat+0x284f/0x3270
[  474.169327][T13003]  ? do_filp_open+0x430/0x430
[  474.174010][T13003]  do_filp_open+0x1f2/0x430
[  474.178524][T13003]  ? vfs_tmpfile+0x620/0x620
[  474.183163][T13003]  ? _raw_spin_unlock+0x28/0x40
[  474.188046][T13003]  ? alloc_fd+0x590/0x640
[  474.192416][T13003]  do_sys_openat2+0x134/0x1d0
[  474.197133][T13003]  ? do_sys_open+0xe0/0xe0
[  474.201584][T13003]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  474.207602][T13003]  ? lock_chain_count+0x20/0x20
[  474.212497][T13003]  __x64_sys_openat+0x139/0x160
[  474.217387][T13003]  do_syscall_64+0x55/0xb0
[  474.221809][T13003]  ? clear_bhb_loop+0x40/0x90
[  474.226487][T13003]  ? clear_bhb_loop+0x40/0x90
[  474.231166][T13003]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  474.237073][T13003] RIP: 0033:0x7fb87df5ed8e
[  474.241493][T13003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  474.261110][T13003] RSP: 002b:00007fb87ee34f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  474.269534][T13003] RAX: ffffffffffffffda RBX: 00007fb87ee356c0 RCX: 00007fb87df5ed8e
[  474.277511][T13003] RDX: 0000000000000000 RSI: 00007fb87e034fde RDI: ffffffffffffff9c
[  474.285491][T13003] RBP: 00007fb87e0358b0 R08: 0000000000000000 R09: 0000000000000000
[  474.293470][T13003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.301440][T13003] R13: 00007fb87e226038 R14: 00007fb87e225fa0 R15: 00007fff847da468
[  474.309431][T13003]  </TASK>
[  474.333871][T13003] ERROR: Out of memory at tomoyo_realpath_from_path.
[  474.569848][T13012] FAULT_INJECTION: forcing a failure.
[  474.569848][T13012] name failslab, interval 1, probability 0, space 0, times 0
[  474.603708][T13012] CPU: 0 PID: 13012 Comm: syz.5.2415 Not tainted syzkaller #0
[  474.611249][T13012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  474.621333][T13012] Call Trace:
[  474.624639][T13012]  <TASK>
[  474.627590][T13012]  dump_stack_lvl+0x18c/0x250
[  474.632312][T13012]  ? show_regs_print_info+0x20/0x20
[  474.637543][T13012]  ? load_image+0x420/0x420
[  474.642086][T13012]  ? __might_sleep+0xe0/0xe0
[  474.646709][T13012]  ? __lock_acquire+0x7eb0/0x7eb0
[  474.651787][T13012]  should_fail_ex+0x394/0x4c0
[  474.656508][T13012]  should_failslab+0x9/0x20
[  474.661047][T13012]  slab_pre_alloc_hook+0x59/0x300
[  474.666102][T13012]  ? smb3_parse_devname+0x5dc/0x7b0
[  474.671356][T13012]  ? smb3_parse_devname+0x5dc/0x7b0
[  474.676559][T13012]  __kmem_cache_alloc_node+0x53/0x250
[  474.681959][T13012]  ? smb3_parse_devname+0x5dc/0x7b0
[  474.687151][T13012]  __kmalloc_node_track_caller+0xa4/0x230
[  474.692903][T13012]  kstrdup+0x3b/0x80
[  474.696796][T13012]  smb3_parse_devname+0x5dc/0x7b0
[  474.701819][T13012]  smb3_fs_context_parse_param+0x68d/0x7970
[  474.707713][T13012]  ? __se_sys_fsconfig+0x6de/0x850
[  474.712825][T13012]  ? __lock_acquire+0x7eb0/0x7eb0
[  474.717846][T13012]  ? smb3_fs_context_free+0x60/0x60
[  474.723039][T13012]  ? __virt_addr_valid+0x10c/0x380
[  474.728149][T13012]  ? __might_fault+0xaa/0x120
[  474.732826][T13012]  ? security_fs_context_parse_param+0xb5/0xe0
[  474.738984][T13012]  vfs_parse_fs_param+0x1a0/0x420
[  474.744018][T13012]  __se_sys_fsconfig+0x70a/0x850
[  474.748967][T13012]  ? __x64_sys_fsconfig+0xc0/0xc0
[  474.754000][T13012]  ? lockdep_hardirqs_on+0x98/0x150
[  474.759200][T13012]  ? __x64_sys_fsconfig+0x20/0xc0
[  474.764331][T13012]  do_syscall_64+0x55/0xb0
[  474.768757][T13012]  ? clear_bhb_loop+0x40/0x90
[  474.773524][T13012]  ? clear_bhb_loop+0x40/0x90
[  474.778219][T13012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  474.784131][T13012] RIP: 0033:0x7fb87df9e559
[  474.788549][T13012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.808260][T13012] RSP: 002b:00007fb87ee35028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  474.816681][T13012] RAX: ffffffffffffffda RBX: 00007fb87e225fa0 RCX: 00007fb87df9e559
[  474.824662][T13012] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000005
[  474.832641][T13012] RBP: 00007fb87e0358b0 R08: 0000000000000000 R09: 0000000000000000
[  474.840616][T13012] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000
[  474.848593][T13012] R13: 00007fb87e226038 R14: 00007fb87e225fa0 R15: 00007fff847da468
[  474.856583][T13012]  </TASK>
[  474.863961][T13012] CIFS: VFS: Unable to allocate memory for devname
[  475.150663][T13020] kvm: pic: non byte write
[  475.162886][T13020] kvm: pic: non byte write
[  475.758234][T13034] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2424'.
[  475.860880][T13036] syz_tun: entered allmulticast mode
[  475.882886][T13036] syz_tun: left allmulticast mode
[  476.044054][T13038] raw_sendmsg: syz.5.2426 forgot to set AF_INET. Fix it!
[  476.218100][T13041] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2427'.
[  476.440952][T13046] netlink: 'syz.5.2430': attribute type 4 has an invalid length.
[  476.533004][T13047] netlink: 'syz.5.2430': attribute type 4 has an invalid length.
[  477.283755][   T27] IPVS: starting estimator thread 0...
[  477.385851][T13066] IPVS: using max 17 ests per chain, 40800 per kthread
[  478.193095][T13074] 9pnet_fd: Insufficient options for proto=fd
[  478.425901][T13061] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.676931][T13061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.713647][T13061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.923019][T13061] veth1_vlan: left allmulticast mode
[  478.928709][T13061] macvlan1: left allmulticast mode
[  479.018141][T13061] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.027200][T13061] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.043472][T13061] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.052472][T13061] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.147269][T13061] vlan2: left allmulticast mode
[  479.152203][T13061] bridge_slave_0: left allmulticast mode
[  479.167454][T13061] gretap1: left promiscuous mode
[  479.182426][T13080] netlink: 'syz.2.2442': attribute type 1 has an invalid length.
[  479.246098][T13080] 8021q: adding VLAN 0 to HW filter on device bond2
[  479.291004][T13081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.300104][T13081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.310528][T13081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.319503][T13081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.332380][T13081] bond2: (slave geneve2): making interface the new active one
[  479.343570][T13081] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  479.701135][T13095] netlink: 'syz.2.2447': attribute type 1 has an invalid length.
[  480.269218][T13095] bond3: entered promiscuous mode
[  480.274449][T13095] 8021q: adding VLAN 0 to HW filter on device bond3
[  480.332543][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.353466][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.375548][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.392505][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.404246][T13097] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  480.422781][T13097] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  480.439995][T13097] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  480.953475][T13100] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.961235][T13100] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.457733][T13100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.494494][T13100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.799988][T13100] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.809022][T13100] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.818808][T13100] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.827745][T13100] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.913141][T13100] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.922380][T13100] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.931653][T13100] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.940741][T13100] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  482.359209][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2464'.
[  482.415997][T13148] tipc: Disabling bearer <eth:syz_tun>
[  482.944705][T13175] fuse: Bad value for 'fd'
[  483.029277][T13177] overlayfs: failed to clone upperpath
[  483.610432][T13168] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  483.625847][T13168] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  483.976030][T13210] overlayfs: failed to clone upperpath
[  484.805544][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  484.805560][   T28] audit: type=1804 audit(1792166684.598:98): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2496" name="/newroot/159/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=188 res=1 errno=0
[  484.912950][T13240] ip_tables: iptables: counters copy to user failed while replacing table
[  484.928038][   T28] audit: type=1326 audit(1792166684.738:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.2.2500" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff214d9e559 code=0x0
[  484.956552][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout
[  485.679199][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout
[  486.897488][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'.
[  487.004927][T13301] macvlan0: entered promiscuous mode
[  487.010975][T13301] macvlan0: entered allmulticast mode
[  487.018309][T13301] bond4: entered promiscuous mode
[  487.024212][T13301] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  487.052384][T13301] bond4: left promiscuous mode
[  487.921994][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  487.937677][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  487.947741][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  487.967212][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  487.974916][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  487.983188][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  488.104376][T13322] rxe_eth0 speed is unknown, defaulting to 1000
[  488.485639][T13343] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  488.520445][T13322] C speed is unknown, defaulting to 1000
[  488.541715][T13322] ip6_vti0 speed is unknown, defaulting to 1000
[  489.420442][T13322] chnl_net:caif_netlink_parms(): no params data found
[  489.811335][T13322] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.846294][T13322] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.853888][T13322] bridge_slave_0: entered allmulticast mode
[  489.897456][T13322] bridge_slave_0: entered promiscuous mode
[  489.923617][T13322] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.948789][T13322] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.958734][T13322] bridge_slave_1: entered allmulticast mode
[  489.969956][T13322] bridge_slave_1: entered promiscuous mode
[  490.045264][T13322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.069733][T13322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.086068][ T5787] Bluetooth: hci0: command tx timeout
[  490.160056][T13322] team0: Port device team_slave_0 added
[  490.179388][T13322] team0: Port device team_slave_1 added
[  490.233055][T13322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.244309][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.290477][T13322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.303075][T13383] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  490.349321][T13322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.357319][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.397660][T13322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  490.422797][T13383] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  490.582070][T13322] hsr_slave_0: entered promiscuous mode
[  490.626383][T13322] hsr_slave_1: entered promiscuous mode
[  490.666549][T13322] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  490.687466][T13322] Cannot create hsr debugfs directory
[  491.161028][T13322] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  491.200552][T13322] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  491.237212][T13322] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  491.280353][T13322] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  492.156532][ T5787] Bluetooth: hci0: command tx timeout
[  493.140683][T13322] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.200557][T13322] 8021q: adding VLAN 0 to HW filter on device team0
[  493.253266][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.260506][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.301066][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.308285][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.915269][T13322] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.235760][ T5787] Bluetooth: hci0: command tx timeout
[  494.615184][T13322] veth0_vlan: entered promiscuous mode
[  494.649087][T13322] veth1_vlan: entered promiscuous mode
[  494.726259][T13322] veth0_macvtap: entered promiscuous mode
[  494.748576][T13322] veth1_macvtap: entered promiscuous mode
[  494.787753][T13322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.815463][T13322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.847091][T13322] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.870584][T13322] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.910498][T13322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.943860][T13322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.971612][T13322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.995652][T13322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.208862][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.246107][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.313341][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.327716][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.666482][T13478] netlink: 'syz.0.2573': attribute type 1 has an invalid length.
[  495.786598][T13478] 8021q: adding VLAN 0 to HW filter on device bond2
[  495.904537][T13484] bond2: (slave gretap1): making interface the new active one
[  495.957355][T13484] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  496.315479][ T5787] Bluetooth: hci0: command tx timeout
[  498.664764][T13548] lo: entered allmulticast mode
[  498.694115][T13547] lo: left allmulticast mode
[  500.477002][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  500.845530][ T5850] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  501.035504][ T5850] usb 7-1: Using ep0 maxpacket: 16
[  501.047826][ T5850] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  501.065484][ T5850] usb 7-1: config 0 interface 0 has no altsetting 0
[  501.084485][ T5850] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  501.097624][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.115846][ T5850] usb 7-1: Product: syz
[  501.125452][ T5850] usb 7-1: Manufacturer: syz
[  501.130134][ T5850] usb 7-1: SerialNumber: syz
[  501.147771][ T5850] usb 7-1: config 0 descriptor??
[  501.382074][    C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  501.402678][ T5850] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22
[  501.452319][ T5850] imon:send_packet: packet tx failed (-71)
[  501.469877][T13592] overlayfs: failed to clone upperpath
[  501.485474][ T5850] imon 7-1:0.0: panel buttons/knobs setup failed
[  501.665514][ T5850] rc_core: IR keymap rc-imon-pad not found
[  501.671437][ T5850] Registered IR keymap rc-empty
[  501.678669][ T5850] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  501.689159][ T5850] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  501.699365][ T5850] imon:send_packet: packet tx failed (-71)
[  501.715553][ T5850] imon 7-1:0.0: remote input dev register failed
[  501.722003][ T5850] imon 7-1:0.0: imon_init_intf0: rc device setup failed
[  501.738952][ T5850] imon 7-1:0.0: unable to initialize intf0, err 0
[  501.745702][ T5850] imon:imon_probe: failed to initialize context!
[  501.752238][ T5850] imon 7-1:0.0: unable to register, err -19
[  501.762422][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.777545][ T5850] usb 7-1: USB disconnect, device number 2
[  502.145497][ T5850] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  502.325784][ T5850] usb 7-1: Using ep0 maxpacket: 16
[  502.332735][ T5850] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  502.344628][ T5850] usb 7-1: config 0 interface 0 has no altsetting 0
[  502.353530][ T5850] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  502.362672][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.371096][ T5850] usb 7-1: Product: syz
[  502.375270][ T5850] usb 7-1: Manufacturer: syz
[  502.379927][ T5850] usb 7-1: SerialNumber: syz
[  502.389494][ T5850] usb 7-1: config 0 descriptor??
[  502.639626][ T5850] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24
[  502.945585][ T5850] rc_core: IR keymap rc-imon-pad not found
[  502.951479][ T5850] Registered IR keymap rc-empty
[  502.958188][ T5850] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  502.968378][ T5850] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  503.066486][ T5850] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  503.079276][ T5850] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input25
[  503.091999][ T5850] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:3> initialized
[  503.479483][    C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  503.481104][ T5844] usb 7-1: USB disconnect, device number 3
[  506.155566][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  506.549394][T13624] TC_ACT_REPEAT abuse ?
[  507.381251][T13647] netlink: 'syz.2.2621': attribute type 12 has an invalid length.
[  507.390147][T13647] netlink: 'syz.2.2621': attribute type 29 has an invalid length.
[  507.398971][T13647] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2621'.
[  507.408637][T13647] netlink: 'syz.2.2621': attribute type 1 has an invalid length.
[  507.417605][T13647] netlink: 'syz.2.2621': attribute type 2 has an invalid length.
[  507.426204][T13647] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2621'.
[  507.437841][T13651] netlink: 'syz.2.2621': attribute type 12 has an invalid length.
[  507.450180][T13651] netlink: 'syz.2.2621': attribute type 29 has an invalid length.
[  507.458337][T13651] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2621'.
[  507.467913][T13651] netlink: 'syz.2.2621': attribute type 1 has an invalid length.
[  507.475799][T13651] netlink: 'syz.2.2621': attribute type 2 has an invalid length.
[  507.483814][T13651] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2621'.
[  507.797024][T13660] netlink: 'syz.6.2633': attribute type 12 has an invalid length.
[  507.804909][T13660] netlink: 'syz.6.2633': attribute type 29 has an invalid length.
[  507.828589][T13660] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2633'.
[  507.855440][T13660] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2633'.
[  507.879055][T13660] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2633'.
[  507.895514][T13660] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2633'.
[  511.295002][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'.
[  511.466208][T13697] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2639'.
[  511.779761][T13707] overlayfs: failed to resolve './file0': -2
[  512.121218][T13716] overlayfs: failed to clone upperpath
[  513.072764][T13751] overlayfs: failed to resolve './file0': -2
[  513.276226][T13761] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  514.495968][  T789] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  514.676333][  T789] usb 7-1: Using ep0 maxpacket: 16
[  514.690959][  T789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.709511][  T789] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.734456][  T789] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.756244][  T789] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  514.786176][  T789] usb 7-1: config 0 interface 0 has no altsetting 0
[  514.792879][  T789] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  514.815918][  T789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.848705][  T789] usb 7-1: config 0 descriptor??
[  514.909786][T13810] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  515.302556][  T789] logitech-djreceiver 0003:046D:C53A.0009: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0
[  515.603081][    T9] usb 7-1: USB disconnect, device number 4
[  515.835926][T13843] __nla_validate_parse: 4 callbacks suppressed
[  515.835977][T13843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2687'.
[  516.535522][ T5869] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  516.717632][ T5869] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  516.735401][ T5869] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  516.755982][ T5869] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  516.787966][ T5869] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  516.805424][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.813498][ T5869] usb 7-1: Product: syz
[  516.842102][ T5869] usb 7-1: Manufacturer: syz
[  516.847494][ T5869] usb 7-1: SerialNumber: syz
[  516.870350][ T5869] hub 7-1:1.0: bad descriptor, ignoring hub
[  516.876990][ T5869] hub: probe of 7-1:1.0 failed with error -5
[  517.096858][ T5869] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  517.826696][T13856] usb 7-1: reset high-speed USB device number 5 using dummy_hcd
[  517.835206][T13856] usb 7-1: device reset changed ep0 maxpacket size!
[  517.856024][   T27] usb 7-1: USB disconnect, device number 5
[  517.865271][   T27] usblp0: removed
[  518.046058][   T27] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  518.236511][   T27] usb 7-1: Using ep0 maxpacket: 16
[  518.267198][   T27] usb 7-1: config 0 has no interfaces?
[  518.278676][   T27] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  518.305917][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.317333][   T27] usb 7-1: Product: syz
[  518.321588][   T27] usb 7-1: Manufacturer: syz
[  518.345902][   T27] usb 7-1: SerialNumber: syz
[  518.353240][   T27] usb 7-1: config 0 descriptor??
[  518.630477][   T27] usb 7-1: USB disconnect, device number 6
[  519.277018][T13888] validate_nla: 14 callbacks suppressed
[  519.277065][T13888] netlink: 'syz.0.2711': attribute type 1 has an invalid length.
[  519.328596][T13888] 8021q: adding VLAN 0 to HW filter on device bond3
[  519.383449][T13888] 8021q: adding VLAN 0 to HW filter on device team0
[  519.404990][T13888] bond3: (slave team0): Enslaving as a backup interface with an up link
[  519.524662][T13896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2705'.
[  519.819446][T13905] overlayfs: failed to clone upperpath
[  519.961699][T13911] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  524.194577][   T28] audit: type=1800 audit(1792166723.998:100): pid=13959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2728" name="file1" dev="overlay" ino=227 res=0 errno=0
[  525.129873][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2737'.
[  525.452807][T14007] overlayfs: failed to clone upperpath
[  525.538806][T14003] bridge_slave_0: left allmulticast mode
[  525.544515][T14003] bridge_slave_0: left promiscuous mode
[  525.598703][T14003] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.852971][T14021] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f]
[  525.881854][T14021] caller generic_access_phys+0x33f/0x650 mapping multiple BARs
[  526.058635][T14034] size and base must be multiples of 4 kiB
[  526.099820][T14034] CPU: 0 PID: 14034 Comm: syz.6.2748 Not tainted syzkaller #0
[  526.107357][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  526.117438][T14034] Call Trace:
[  526.120734][T14034]  <TASK>
[  526.123678][T14034]  dump_stack_lvl+0x18c/0x250
[  526.128383][T14034]  ? show_regs_print_info+0x20/0x20
[  526.133593][T14034]  ? load_image+0x420/0x420
[  526.138548][T14034]  mtrr_del+0xc3/0xf0
[  526.142539][T14034]  mtrr_ioctl+0xcb6/0x13a0
[  526.146963][T14034]  ? mtrr_close+0x200/0x200
[  526.151483][T14034]  ? __fget_files+0x28/0x460
[  526.156093][T14034]  ? mtrr_close+0x200/0x200
[  526.160597][T14034]  proc_reg_unlocked_ioctl+0x1d2/0x2c0
[  526.166059][T14034]  ? proc_reg_poll+0x290/0x290
[  526.170835][T14034]  __se_sys_ioctl+0xfd/0x170
[  526.175441][T14034]  do_syscall_64+0x55/0xb0
[  526.179872][T14034]  ? clear_bhb_loop+0x40/0x90
[  526.184593][T14034]  ? clear_bhb_loop+0x40/0x90
[  526.189276][T14034]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.195178][T14034] RIP: 0033:0x7f595f39e559
[  526.199598][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.219214][T14034] RSP: 002b:00007f5960331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  526.227637][T14034] RAX: ffffffffffffffda RBX: 00007f595f625fa0 RCX: 00007f595f39e559
[  526.235628][T14034] RDX: 00002000000001c0 RSI: 00000000400c4d04 RDI: 0000000000000005
[  526.243607][T14034] RBP: 00007f595f4358b0 R08: 0000000000000000 R09: 0000000000000000
[  526.251580][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  526.259552][T14034] R13: 00007f595f626038 R14: 00007f595f625fa0 R15: 00007ffe7490d138
[  526.267537][T14034]  </TASK>
[  526.363016][T14036] FAULT_INJECTION: forcing a failure.
[  526.363016][T14036] name failslab, interval 1, probability 0, space 0, times 0
[  526.417226][T14036] CPU: 1 PID: 14036 Comm: syz.0.2751 Not tainted syzkaller #0
[  526.424755][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  526.434842][T14036] Call Trace:
[  526.438142][T14036]  <TASK>
[  526.441091][T14036]  dump_stack_lvl+0x18c/0x250
[  526.445805][T14036]  ? show_regs_print_info+0x20/0x20
[  526.451038][T14036]  ? load_image+0x420/0x420
[  526.455587][T14036]  ? __might_sleep+0xe0/0xe0
[  526.460219][T14036]  ? __lock_acquire+0x7eb0/0x7eb0
[  526.465292][T14036]  should_fail_ex+0x394/0x4c0
[  526.470018][T14036]  should_failslab+0x9/0x20
[  526.474564][T14036]  slab_pre_alloc_hook+0x59/0x300
[  526.479631][T14036]  ? d_instantiate+0x6f/0x90
[  526.484262][T14036]  kmem_cache_alloc+0x5a/0x2c0
[  526.489072][T14036]  ? alloc_empty_file+0x9e/0x1d0
[  526.494050][T14036]  alloc_empty_file+0x9e/0x1d0
[  526.498850][T14036]  alloc_file+0x5b/0x600
[  526.503127][T14036]  alloc_file_pseudo+0x184/0x210
[  526.508102][T14036]  ? fput+0x1a0/0x1a0
[  526.512126][T14036]  anon_inode_getfile+0xc5/0x1a0
[  526.517112][T14036]  sync_file_create+0x76/0x1c0
[  526.521908][T14036]  sw_sync_ioctl+0x921/0xaa0
[  526.526531][T14036]  ? __bpf_trace_sync_timeline+0x100/0x100
[  526.532350][T14036]  ? __fget_files+0x28/0x460
[  526.536972][T14036]  ? bpf_lsm_file_ioctl+0x9/0x10
[  526.541912][T14036]  ? security_file_ioctl+0x80/0xa0
[  526.547028][T14036]  ? __bpf_trace_sync_timeline+0x100/0x100
[  526.552832][T14036]  __se_sys_ioctl+0xfd/0x170
[  526.557430][T14036]  do_syscall_64+0x55/0xb0
[  526.561849][T14036]  ? clear_bhb_loop+0x40/0x90
[  526.566526][T14036]  ? clear_bhb_loop+0x40/0x90
[  526.571203][T14036]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.577103][T14036] RIP: 0033:0x7fbb5cd9e559
[  526.581515][T14036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.601124][T14036] RSP: 002b:00007fbb5dd4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  526.609539][T14036] RAX: ffffffffffffffda RBX: 00007fbb5d025fa0 RCX: 00007fbb5cd9e559
[  526.617508][T14036] RDX: 0000200000000b00 RSI: 00000000c0285700 RDI: 0000000000000004
[  526.625478][T14036] RBP: 00007fbb5ce358b0 R08: 0000000000000000 R09: 0000000000000000
[  526.633449][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  526.641413][T14036] R13: 00007fbb5d026038 R14: 00007fbb5d025fa0 R15: 00007ffd778e26a8
[  526.649489][T14036]  </TASK>
[  527.419331][   T59] hsr_slave_0: left promiscuous mode
[  527.426349][   T59] hsr_slave_1: left promiscuous mode
[  527.457338][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.499194][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.509181][   T59] bridge_slave_1: left allmulticast mode
[  527.514864][   T59] bridge_slave_1: left promiscuous mode
[  527.521940][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.532750][   T59] bridge_slave_0: left allmulticast mode
[  527.540237][   T59] bridge_slave_0: left promiscuous mode
[  527.547462][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.826825][   T59] bond1 (unregistering): (slave team0): Removing an active aggregator
[  527.846389][   T59] bond1 (unregistering): (slave team0): Releasing backup interface
[  527.862013][   T59] bond1 (unregistering): Released all slaves
[  528.573419][   T59] team0 (unregistering): Port device team_slave_1 removed
[  528.654274][   T59] team0 (unregistering): Port device team_slave_0 removed
[  528.722924][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  528.783202][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  529.269140][   T59] bond0 (unregistering): Released all slaves
[  529.355301][T14073] netlink: 'syz.3.2766': attribute type 4 has an invalid length.
[  529.393791][T14074] netlink: 'syz.3.2766': attribute type 4 has an invalid length.
[  529.419954][T14076] bridge_slave_0: left allmulticast mode
[  529.426370][T14076] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.485065][T14081] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f]
[  529.556189][T14081] caller generic_access_phys+0x33f/0x650 mapping multiple BARs
[  529.656257][   T28] audit: type=1326 audit(1792166729.458:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x0
[  529.901761][   T59] IPVS: stop unused estimator thread 0...
[  530.713568][T14118] netlink: 'syz.6.2773': attribute type 4 has an invalid length.
[  530.795099][T14122] overlayfs: failed to clone upperpath
[  531.236239][T14133] overlayfs: failed to get inode (-116)
[  531.260483][T14133] overlayfs: failed to get inode (-116)
[  531.510224][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'.
[  533.706466][T14243] netlink: 'syz.0.2800': attribute type 32 has an invalid length.
[  534.858012][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'.
[  535.083364][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'.
[  535.105740][T14294] netlink: 'syz.2.2807': attribute type 12 has an invalid length.
[  535.134025][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'.
[  535.154929][T14294] netlink: 'syz.2.2807': attribute type 12 has an invalid length.
[  535.792811][T14323] syz_tun: entered promiscuous mode
[  535.804199][T14323] vlan2: entered promiscuous mode
[  535.961638][T14328] dummy0: left promiscuous mode
[  535.997602][T14328] team0: Port device dummy0 removed
[  536.010922][T14328] bond0: (slave bond_slave_0): Releasing backup interface
[  536.034064][T14328] bond0: (slave bond_slave_1): Releasing backup interface
[  536.053898][T14328] team0: Port device team_slave_0 removed
[  536.080773][T14328] team0: Port device team_slave_1 removed
[  536.088142][T14328] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.100318][T14328] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.109621][T14328] bond0: (slave netdevsim0): Releasing backup interface
[  536.119922][T14328] bond1: (slave gretap1): Releasing active interface
[  536.134650][T14328] bond2: (slave geneve2): Releasing active interface
[  536.152248][T14328] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.179889][T14328] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.204298][T14328] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.220706][T14328] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.985916][T14367] overlayfs: failed to clone upperpath
[  537.614463][T14382] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  538.542854][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2839'.
[  539.010702][T14420] overlayfs: failed to get inode (-116)
[  539.036748][T14420] overlayfs: failed to look up (file0) for ino (-116)
[  539.204418][ T5787] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  539.588644][T14438] tipc: Started in network mode
[  539.594629][T14438] tipc: Node identity c6d7a48b59ac, cluster identity 4711
[  539.603184][T14438] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  539.613240][T14440] overlayfs: failed to clone lowerpath
[  539.620052][T14437] tipc: Resetting bearer <eth:syzkaller0>
[  539.659777][T14437] tipc: Disabling bearer <eth:syzkaller0>
[  539.714752][T14443] overlayfs: failed to clone upperpath
[  539.863346][T14448] netlink: 'syz.6.2857': attribute type 10 has an invalid length.
[  539.947620][T14448] 8021q: adding VLAN 0 to HW filter on device team0
[  539.961304][T14448] bond0: (slave team0): Enslaving as an active interface with an up link
[  540.658400][T14471] vlan3: entered promiscuous mode
[  540.674932][T14471] syz_tun: entered promiscuous mode
[  541.067764][T14490] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  541.307420][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'.
[  541.347649][T14500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2875'.
[  541.501887][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2878'.
[  541.523775][T14505] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  541.532844][T14505] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  541.541633][T14505] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  541.550413][T14505] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  541.562895][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2878'.
[  541.722703][T14519] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  542.433878][T14540] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  543.852080][T14599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2908'.
[  543.932573][T14603] syz_tun: entered allmulticast mode
[  543.956556][T14603] syz_tun: left allmulticast mode
[  544.534183][T14605] overlayfs: failed to clone upperpath
[  545.068055][T14629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2917'.
[  547.488909][T14710] ubi0: attaching mtd0
[  547.521595][T14710] ubi0: scanning is finished
[  547.534704][T14710] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  547.690363][T14710] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  548.182638][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2945'.
[  548.365474][T14751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  550.196350][T14834] netlink: 'syz.2.2966': attribute type 4 has an invalid length.
[  550.222859][T14837] 9pnet_fd: Insufficient options for proto=fd
[  550.246184][T14834] netlink: 'syz.2.2966': attribute type 4 has an invalid length.
[  550.281930][ T5910] C speed is unknown, defaulting to 1000
[  551.699087][T14901] syz_tun: entered allmulticast mode
[  551.819323][T14901] syz_tun: left allmulticast mode
[  555.397047][ T5844] C speed is unknown, defaulting to 1000
[  556.120259][T15001] netlink: 'syz.6.3023': attribute type 1 has an invalid length.
[  556.147807][T15001] 8021q: adding VLAN 0 to HW filter on device bond1
[  556.185056][T15001] bond1: (slave syz_tun): Enslaving as a backup interface with an up link
[  556.749409][T15022] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  557.234140][T15045] ip_tables: iptables: counters copy to user failed while replacing table
[  557.261829][    T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  557.297093][    T9] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  557.480303][T15050] fido_id[15050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  557.753266][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3040'.
[  558.599006][T15084] FAULT_INJECTION: forcing a failure.
[  558.599006][T15084] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  558.631155][T15084] CPU: 0 PID: 15084 Comm: syz.0.3049 Not tainted syzkaller #0
[  558.638692][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  558.648780][T15084] Call Trace:
[  558.652098][T15084]  <TASK>
[  558.655055][T15084]  dump_stack_lvl+0x18c/0x250
[  558.659783][T15084]  ? show_regs_print_info+0x20/0x20
[  558.665020][T15084]  ? load_image+0x420/0x420
[  558.669569][T15084]  ? __lock_acquire+0x7eb0/0x7eb0
[  558.674634][T15084]  ? rds_conn_create_outgoing+0x43/0x60
[  558.680358][T15084]  ? ____sys_sendmsg+0x61b/0x980
[  558.685466][T15084]  ? ___sys_sendmsg+0x2a6/0x360
[  558.690355][T15084]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  558.695437][T15084]  should_fail_ex+0x394/0x4c0
[  558.700157][T15084]  prepare_alloc_pages+0x1e1/0x5b0
[  558.705289][T15084]  __alloc_pages+0x134/0x460
[  558.709894][T15084]  ? zone_statistics+0x170/0x170
[  558.714846][T15084]  ? alloc_pages+0x4e1/0x740
[  558.719447][T15084]  ? __init_waitqueue_head+0xa8/0x140
[  558.724825][T15084]  get_zeroed_page+0x17/0x40
[  558.729436][T15084]  rds_cong_from_addr+0xd5/0x360
[  558.734380][T15084]  ? rds_cong_get_maps+0x1f/0xb0
[  558.739334][T15084]  rds_cong_get_maps+0x28/0xb0
[  558.744109][T15084]  __rds_conn_create+0x987/0x1fe0
[  558.749151][T15084]  ? __rds_conn_create+0x2f3/0x1fe0
[  558.754363][T15084]  ? rds_conn_create+0x60/0x60
[  558.759142][T15084]  rds_conn_create_outgoing+0x43/0x60
[  558.764523][T15084]  rds_sendmsg+0xf98/0x1db0
[  558.769111][T15084]  ? rds_send_sndbuf_remove+0x230/0x230
[  558.774659][T15084]  ? aa_af_perm+0x330/0x330
[  558.779171][T15084]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  558.785606][T15084]  ? aa_sock_msg_perm+0x94/0x150
[  558.790571][T15084]  ? apparmor_socket_sendmsg+0x8e/0x330
[  558.796132][T15084]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  558.801422][T15084]  ? security_socket_sendmsg+0x80/0xa0
[  558.806890][T15084]  ? rds_send_sndbuf_remove+0x230/0x230
[  558.812448][T15084]  ____sys_sendmsg+0x61b/0x980
[  558.817229][T15084]  ? __sys_sendmsg_sock+0x30/0x30
[  558.822277][T15084]  ? __import_iovec+0x3fa/0x850
[  558.827162][T15084]  ? import_iovec+0x73/0xa0
[  558.831689][T15084]  ___sys_sendmsg+0x2a6/0x360
[  558.836406][T15084]  ? __sys_sendmsg+0x2b0/0x2b0
[  558.841230][T15084]  __se_sys_sendmsg+0x1d0/0x2c0
[  558.846099][T15084]  ? __x64_sys_sendmsg+0x80/0x80
[  558.851058][T15084]  ? lockdep_hardirqs_on+0x98/0x150
[  558.856268][T15084]  do_syscall_64+0x55/0xb0
[  558.860681][T15084]  ? clear_bhb_loop+0x40/0x90
[  558.865383][T15084]  ? clear_bhb_loop+0x40/0x90
[  558.870070][T15084]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  558.875972][T15084] RIP: 0033:0x7fbb5cd9e559
[  558.880385][T15084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.900003][T15084] RSP: 002b:00007fbb5dd4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  558.908425][T15084] RAX: ffffffffffffffda RBX: 00007fbb5d025fa0 RCX: 00007fbb5cd9e559
[  558.916410][T15084] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  558.924395][T15084] RBP: 00007fbb5ce358b0 R08: 0000000000000000 R09: 0000000000000000
[  558.932374][T15084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  558.940353][T15084] R13: 00007fbb5d026038 R14: 00007fbb5d025fa0 R15: 00007ffd778e26a8
[  558.948346][T15084]  </TASK>
[  559.232883][T15090] netlink: 'syz.0.3052': attribute type 1 has an invalid length.
[  559.487812][T15101] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  559.513746][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3055'.
[  559.585936][  T789] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  559.766467][  T789] usb 7-1: Using ep0 maxpacket: 32
[  559.774106][  T789] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.804527][  T789] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.837521][  T789] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  559.846931][  T789] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  559.856407][  T789] usb 7-1: Product: syz
[  559.860700][  T789] usb 7-1: Manufacturer: syz
[  559.883208][  T789] hub 7-1:4.0: USB hub found
[  560.106304][  T789] hub 7-1:4.0: config failed, can't read hub descriptor (err -22)
[  560.176956][  T789] usb 7-1: USB disconnect, device number 7
[  560.717920][  T789] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  560.928340][  T789] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  560.943527][  T789] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.968996][  T789] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  560.984637][  T789] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  561.002779][  T789] usb 7-1: Product: syz
[  561.011053][  T789] usb 7-1: Manufacturer: syz
[  561.031822][  T789] hub 7-1:4.0: USB hub found
[  561.111504][T15125] ceph: No mds server is up or the cluster is laggy
[  561.121878][ T5790] Bluetooth: hci1: command 0x0c1a tx timeout
[  561.236819][  T789] hub 7-1:4.0: 1 port detected
[  561.674469][T15154] netlink: 'syz.3.3075': attribute type 1 has an invalid length.
[  561.707908][T15154] 8021q: adding VLAN 0 to HW filter on device bond1
[  561.902292][T15166] overlayfs: failed to clone upperpath
[  561.913247][T15168] overlayfs: failed to clone upperpath
[  562.060523][  T789] hub 7-1:4.0: activate --> -90
[  562.478523][  T789] hub 7-1:4.0: hub_ext_port_status failed (err = -71)
[  562.488880][ T5844] usb 7-1: USB disconnect, device number 8
[  562.498807][  T789] usb 7-1-port1: connect-debounce failed
[  563.144918][   T28] audit: type=1326 audit(1792166762.948:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15222 comm="syz.3.3097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x0
[  563.203652][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.207189][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout
[  563.393603][T15232] FAULT_INJECTION: forcing a failure.
[  563.393603][T15232] name failslab, interval 1, probability 0, space 0, times 0
[  563.425428][T15232] CPU: 0 PID: 15232 Comm: syz.6.3098 Not tainted syzkaller #0
[  563.432964][T15232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  563.443054][T15232] Call Trace:
[  563.446361][T15232]  <TASK>
[  563.449318][T15232]  dump_stack_lvl+0x18c/0x250
[  563.454033][T15232]  ? show_regs_print_info+0x20/0x20
[  563.459275][T15232]  ? load_image+0x420/0x420
[  563.463824][T15232]  ? __lock_acquire+0x7eb0/0x7eb0
[  563.468895][T15232]  should_fail_ex+0x394/0x4c0
[  563.473624][T15232]  should_failslab+0x9/0x20
[  563.478172][T15232]  slab_pre_alloc_hook+0x59/0x300
[  563.483233][T15232]  ? key_alloc+0x34a/0x1030
[  563.487770][T15232]  ? key_alloc+0x34a/0x1030
[  563.492302][T15232]  __kmem_cache_alloc_node+0x53/0x250
[  563.497718][T15232]  ? slab_post_alloc_hook+0x86/0x4d0
[  563.503039][T15232]  ? key_alloc+0x34a/0x1030
[  563.507595][T15232]  __kmalloc_node_track_caller+0xa4/0x230
[  563.513364][T15232]  kmemdup+0x2b/0x70
[  563.517305][T15232]  key_alloc+0x34a/0x1030
[  563.521684][T15232]  keyring_alloc+0x45/0xb0
[  563.526143][T15232]  lookup_user_key+0x4aa/0x1140
[  563.531029][T15232]  ? lookup_user_key_possessed+0x40/0x40
[  563.536675][T15232]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  563.542663][T15232]  ? __might_fault+0xaa/0x120
[  563.547346][T15232]  ? _copy_from_user+0xa5/0xe0
[  563.552119][T15232]  __se_sys_request_key+0x228/0x350
[  563.557339][T15232]  ? __x64_sys_request_key+0xb0/0xb0
[  563.562635][T15232]  ? lockdep_hardirqs_on+0x98/0x150
[  563.567842][T15232]  do_syscall_64+0x55/0xb0
[  563.572253][T15232]  ? clear_bhb_loop+0x40/0x90
[  563.576926][T15232]  ? clear_bhb_loop+0x40/0x90
[  563.581601][T15232]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  563.587523][T15232] RIP: 0033:0x7f595f39e559
[  563.591944][T15232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.611650][T15232] RSP: 002b:00007f5960331028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  563.620169][T15232] RAX: ffffffffffffffda RBX: 00007f595f625fa0 RCX: 00007f595f39e559
[  563.628156][T15232] RDX: 0000200000001fee RSI: 0000000000000000 RDI: 0000200000000040
[  563.636132][T15232] RBP: 00007f595f4358b0 R08: 0000000000000000 R09: 0000000000000000
[  563.644105][T15232] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[  563.652080][T15232] R13: 00007f595f626038 R14: 00007f595f625fa0 R15: 00007ffe7490d138
[  563.660068][T15232]  </TASK>
[  566.215246][   T28] audit: type=1800 audit(1792166766.018:103): pid=15295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3127" name="file1" dev="overlay" ino=3924 res=0 errno=0
[  571.633893][T15399] bond0: (slave team0): Releasing backup interface
[  571.651510][T15399] team0: Port device dummy0 removed
[  571.657704][T15399] bridge_slave_1: left allmulticast mode
[  571.663514][T15399] bridge_slave_1: left promiscuous mode
[  571.670366][T15399] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.684280][T15399] bond0: (slave bond_slave_0): Releasing backup interface
[  571.695277][T15399] bond0: (slave bond_slave_1): Releasing backup interface
[  571.733956][T15399] team0: Port device C removed
[  571.759184][T15399] team0: Port device team_slave_1 removed
[  571.765952][T15399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  571.788951][T15399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.814804][T15399] team0: Port device macvlan1 removed
[  582.200679][T13322] bond1: (slave syz_tun): Removing an active aggregator
[  582.226189][T13322] bond1: (slave syz_tun): Releasing backup interface
[  582.394935][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  582.416387][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  582.424687][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  582.441809][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  582.441943][   T42] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  582.477187][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  582.484950][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  582.510321][   T42] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.529927][   T28] audit: type=1326 audit(1792166782.338:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  582.613476][   T28] audit: type=1326 audit(1792166782.338:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  582.674441][   T42] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  582.683941][   T28] audit: type=1326 audit(1792166782.368:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  582.712400][   T42] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.719941][   T28] audit: type=1326 audit(1792166782.368:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  582.757758][   T28] audit: type=1326 audit(1792166782.368:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  582.793619][T15463] rxe_eth0 speed is unknown, defaulting to 1000
[  582.818353][   T28] audit: type=1326 audit(1792166782.368:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  582.877781][   T42] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  582.898484][   T42] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.902414][   T28] audit: type=1326 audit(1792166782.368:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  582.967358][   T28] audit: type=1326 audit(1792166782.368:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  583.042153][   T28] audit: type=1326 audit(1792166782.368:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  583.073333][   T28] audit: type=1326 audit(1792166782.368:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15465 comm="syz.3.3185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07bb19e559 code=0x7ffc0000
[  583.100108][   T42] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  583.131965][   T42] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.217393][T15463] C speed is unknown, defaulting to 1000
[  583.224509][T15463] ip6_vti0 speed is unknown, defaulting to 1000
[  583.517389][   T42] tipc: Left network mode
[  584.211567][T15463] chnl_net:caif_netlink_parms(): no params data found
[  584.558474][ T5790] Bluetooth: hci0: command tx timeout
[  584.852150][T15463] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.874193][T15463] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.884844][T15463] bridge_slave_0: entered allmulticast mode
[  584.901926][T15463] bridge_slave_0: entered promiscuous mode
[  584.914073][T15463] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.927798][T15463] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.935201][T15463] bridge_slave_1: entered allmulticast mode
[  584.950391][T15463] bridge_slave_1: entered promiscuous mode
[  585.099575][T15463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.133108][T15463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.370474][T15463] team0: Port device team_slave_0 added
[  585.417603][T15463] team0: Port device team_slave_1 added
[  585.613881][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'.
[  585.673828][T15536] vlan4: entered allmulticast mode
[  585.679119][T15536] bond0: entered allmulticast mode
[  585.690902][T15539] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3198'.
[  585.841853][T15539] bond0 (unregistering): Released all slaves
[  585.957828][T15463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.964834][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  585.999480][T15463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.044227][   T42] hsr_slave_0: left promiscuous mode
[  586.063887][   T42] hsr_slave_1: left promiscuous mode
[  586.079925][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.102363][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.132572][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.151210][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.176824][   T42] bridge_slave_1: left allmulticast mode
[  586.182557][   T42] bridge_slave_1: left promiscuous mode
[  586.214326][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.299656][   T42] veth1_macvtap: left promiscuous mode
[  586.305253][   T42] veth0_macvtap: left promiscuous mode
[  586.323998][   T42] veth1_vlan: left promiscuous mode
[  586.346371][   T42] veth0_vlan: left promiscuous mode
[  586.636211][ T5790] Bluetooth: hci0: command tx timeout
[  586.965579][   T42] bond1 (unregistering): Released all slaves
[  587.084435][T15567] xt_hashlimit: max too large, truncated to 1048576
[  587.706771][T15576] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3212'.
[  587.848408][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  587.882316][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  587.901791][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  587.918205][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  587.927387][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  587.943806][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  588.437904][   T42] team0 (unregistering): Port device team_slave_1 removed
[  588.499498][   T42] team0 (unregistering): Port device team_slave_0 removed
[  588.558234][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.614906][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  588.724132][ T5787] Bluetooth: hci0: command tx timeout
[  588.983200][   T42] bond0 (unregistering): (slave team0): Releasing backup interface
[  589.032629][   T42] bond0 (unregistering): Released all slaves
[  589.081489][T15463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  589.088666][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  589.115147][T15463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  589.294568][T15582] ip_tables: iptables: counters copy to user failed while replacing table
[  589.296720][T15463] hsr_slave_0: entered promiscuous mode
[  589.366477][T15463] hsr_slave_1: entered promiscuous mode
[  589.387806][T15463] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  589.402707][T15463] Cannot create hsr debugfs directory
[  589.452949][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3216'.
[  589.513903][T15578] rxe_eth0 speed is unknown, defaulting to 1000
[  589.861929][T15578] C speed is unknown, defaulting to 1000
[  589.885000][T15578] ip6_vti0 speed is unknown, defaulting to 1000
[  589.910141][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3218'.
[  590.077486][ T5787] Bluetooth: hci4: command tx timeout
[  590.133932][T15463] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  590.177544][T15463] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  590.230918][T15463] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  590.328223][T15463] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  590.541108][T15463] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.733343][T15463] 8021q: adding VLAN 0 to HW filter on device team0
[  590.778483][T15578] chnl_net:caif_netlink_parms(): no params data found
[  590.796184][ T5787] Bluetooth: hci0: command tx timeout
[  590.814395][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.821614][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.856377][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.863558][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.117702][T15578] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.125007][T15578] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.133229][T15578] bridge_slave_0: entered allmulticast mode
[  591.141323][T15578] bridge_slave_0: entered promiscuous mode
[  591.202692][T15578] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.225980][T15578] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.257986][T15578] bridge_slave_1: entered allmulticast mode
[  591.265163][T15578] bridge_slave_1: entered promiscuous mode
[  591.371014][T15578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.440147][T15578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.450562][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout
[  591.533149][T15578] team0: Port device team_slave_0 added
[  591.548336][T15644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3227'.
[  591.561839][T15578] team0: Port device team_slave_1 added
[  591.607348][T15578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.614504][T15578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.676296][T15578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  591.699254][T15578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  591.728707][T15578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.779456][T15578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  591.844351][T15578] hsr_slave_0: entered promiscuous mode
[  591.852065][T15578] hsr_slave_1: entered promiscuous mode
[  591.860064][T15578] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  591.869234][T15578] Cannot create hsr debugfs directory
[  592.021887][T15463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.156926][ T5787] Bluetooth: hci4: command tx timeout
[  592.514558][T15578] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  592.545207][T15578] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  592.579102][T15578] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  592.627219][T15578] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  592.800103][T15463] veth0_vlan: entered promiscuous mode
[  592.847329][T15578] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.859361][T15463] veth1_vlan: entered promiscuous mode
[  592.927432][T15578] 8021q: adding VLAN 0 to HW filter on device team0
[  592.950600][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.957828][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  592.974737][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.981988][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.021821][T15463] veth0_macvtap: entered promiscuous mode
[  593.144141][T15463] veth1_macvtap: entered promiscuous mode
[  593.228780][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.274766][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.299012][T15463] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.340488][T15463] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.390065][T15463] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.403863][T15463] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.414042][T15463] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.423918][T15463] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.644890][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.666814][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.723578][T15578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.748769][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.769802][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.236122][ T5787] Bluetooth: hci4: command tx timeout
[  594.520610][T15578] veth0_vlan: entered promiscuous mode
[  594.569562][T15738] ip_tables: iptables: counters copy to user failed while replacing table
[  594.583620][T15578] veth1_vlan: entered promiscuous mode
[  594.700798][T15578] veth0_macvtap: entered promiscuous mode
[  594.741590][T15578] veth1_macvtap: entered promiscuous mode
[  594.802951][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.827677][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.843629][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.867775][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.902704][T15578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.950443][T15578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.963419][T15578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.985143][T15578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.027167][T15578] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.039535][T15578] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.050540][T15578] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.060961][T15578] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.233986][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.253812][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.301713][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.318056][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.624116][   T28] kauditd_printk_skb: 34 callbacks suppressed
[  595.624131][   T28] audit: type=1326 audit(1792166795.428:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.7.3247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3c8b9e559 code=0x0
[  595.660048][T15747] ceph: No mds server is up or the cluster is laggy
[  595.963930][T15781] syzkaller0: entered promiscuous mode
[  595.973442][T15781] syzkaller0: entered allmulticast mode
[  596.315971][ T5787] Bluetooth: hci4: command tx timeout
[  597.057102][T15823] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  597.067830][T15823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3258'.
[  597.302926][T15829] md: invalid raid superblock magic on ram1
[  597.310870][T15829] md: ram1 does not have a valid v0.0 superblock, not importing!
[  597.319068][T15829] md: md_import_device returned -22
[  597.528627][   T28] audit: type=1326 audit(1792166797.338:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.3.3262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07bb19e559 code=0x0
[  597.718184][T15848] tipc: Started in network mode
[  597.723206][T15848] tipc: Node identity 2000004, cluster identity 4711
[  597.745011][T15848] tipc: Node number set to 33554436
[  597.996716][T15855] netlink: 'syz.2.3274': attribute type 11 has an invalid length.
[  598.060011][T15858] syzkaller0: entered promiscuous mode
[  598.065759][T15858] syzkaller0: entered allmulticast mode
[  601.831576][T15926] ceph: No mds server is up or the cluster is laggy
[  602.835928][ T5910] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  602.911281][T15960] overlayfs: failed to clone upperpath
[  603.040602][ T5910] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  603.065988][ T5910] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.100614][ T5910] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  603.120817][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.144924][ T5910] usb 9-1: Product: syz
[  603.155972][ T5910] usb 9-1: Manufacturer: syz
[  603.160634][ T5910] usb 9-1: SerialNumber: syz
[  603.800351][T15993] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[  605.346078][ T5910] cdc_ncm 9-1:1.0: bind() failure
[  605.396830][ T5910] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  605.466709][ T5910] cdc_ncm 9-1:1.1: bind() failure
[  605.611151][ T5850] usb 9-1: USB disconnect, device number 2
[  607.072498][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025bf2c00: rx timeout, send abort
[  607.577378][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025bf0000: rx timeout, send abort
[  607.591831][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025bf2c00: abort rx timeout. Force session deactivation
[  608.096359][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025bf0000: abort rx timeout. Force session deactivation
[  610.310442][T16130] syz.7.3337: attempt to access beyond end of device
[  610.310442][T16130] nbd7: rw=4096, sector=128, nr_sectors = 8 limit=0
[  610.324869][T16130] gfs2: error 10 reading superblock
[  611.761487][ T5787] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  615.000710][T16234] FAULT_INJECTION: forcing a failure.
[  615.000710][T16234] name failslab, interval 1, probability 0, space 0, times 0
[  615.042473][T16234] CPU: 1 PID: 16234 Comm: syz.8.3362 Not tainted syzkaller #0
[  615.050014][T16234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  615.060114][T16234] Call Trace:
[  615.063419][T16234]  <TASK>
[  615.066375][T16234]  dump_stack_lvl+0x18c/0x250
[  615.071095][T16234]  ? show_regs_print_info+0x20/0x20
[  615.076324][T16234]  ? load_image+0x420/0x420
[  615.080869][T16234]  ? __might_sleep+0xe0/0xe0
[  615.085495][T16234]  ? __lock_acquire+0x7eb0/0x7eb0
[  615.090555][T16234]  should_fail_ex+0x394/0x4c0
[  615.095275][T16234]  should_failslab+0x9/0x20
[  615.099816][T16234]  slab_pre_alloc_hook+0x59/0x300
[  615.104880][T16234]  ? page_pool_create+0x71/0x5c0
[  615.109933][T16234]  __kmem_cache_alloc_node+0x53/0x250
[  615.115355][T16234]  ? page_pool_create+0x71/0x5c0
[  615.120331][T16234]  kmalloc_node_trace+0x26/0xe0
[  615.125230][T16234]  page_pool_create+0x71/0x5c0
[  615.130042][T16234]  bpf_test_run_xdp_live+0x203/0x1b30
[  615.135999][T16234]  ? 0xffffffffa0005fc0
[  615.140186][T16234]  ? 0xffffffffa0005fc0
[  615.144363][T16234]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  615.150295][T16234]  ? xdp_convert_md_to_buff+0x330/0x330
[  615.155886][T16234]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  615.162152][T16234]  ? _copy_from_user+0xa5/0xe0
[  615.166940][T16234]  ? bpf_test_init+0x119/0x140
[  615.171717][T16234]  ? xdp_convert_md_to_buff+0x5b/0x330
[  615.177181][T16234]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  615.182561][T16234]  ? __lock_acquire+0x7eb0/0x7eb0
[  615.187604][T16234]  ? dev_put+0x80/0x80
[  615.191695][T16234]  ? dev_put+0x80/0x80
[  615.195779][T16234]  bpf_prog_test_run+0x31f/0x390
[  615.200734][T16234]  __sys_bpf+0x49d/0x890
[  615.204988][T16234]  ? bpf_link_show_fdinfo+0x560/0x560
[  615.210377][T16234]  ? lock_chain_count+0x20/0x20
[  615.215240][T16234]  __x64_sys_bpf+0x7c/0x90
[  615.219661][T16234]  do_syscall_64+0x55/0xb0
[  615.224084][T16234]  ? clear_bhb_loop+0x40/0x90
[  615.228762][T16234]  ? clear_bhb_loop+0x40/0x90
[  615.233571][T16234]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  615.239488][T16234] RIP: 0033:0x7fd3d6d9e559
[  615.243920][T16234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.263546][T16234] RSP: 002b:00007fd3d7c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  615.271971][T16234] RAX: ffffffffffffffda RBX: 00007fd3d7025fa0 RCX: 00007fd3d6d9e559
[  615.279966][T16234] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  615.287959][T16234] RBP: 00007fd3d6e358b0 R08: 0000000000000000 R09: 0000000000000000
[  615.295944][T16234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  615.303929][T16234] R13: 00007fd3d7026038 R14: 00007fd3d7025fa0 R15: 00007ffc02d8a988
[  615.311923][T16234]  </TASK>
[  615.649621][T16245] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  616.174653][T16260] syz.8.3367: attempt to access beyond end of device
[  616.174653][T16260] nbd8: rw=4096, sector=128, nr_sectors = 8 limit=0
[  616.189106][T16260] gfs2: error 10 reading superblock
[  620.766069][T16334] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[  620.788751][T16334] kvm: requested 166781 ns i8254 timer period limited to 200000 ns
[  620.805229][T16334] kvm: requested 175162 ns i8254 timer period limited to 200000 ns
[  620.821877][T16334] kvm: requested 64533 ns i8254 timer period limited to 200000 ns
[  620.841947][T16334] kvm: requested 44419 ns i8254 timer period limited to 200000 ns
[  620.897138][T16334] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  620.959978][T16334] kvm: requested 191923 ns i8254 timer period limited to 200000 ns
[  624.855459][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  633.492827][    T9] IPVS: starting estimator thread 0...
[  633.606011][T16490] IPVS: using max 17 ests per chain, 40800 per kthread
[  635.163032][T16517] netlink: 'syz.3.3433': attribute type 3 has an invalid length.
[  635.185368][T16517] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3433'.
[  641.266248][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  641.366437][T16583] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  641.495389][    T9] usb 9-1: Using ep0 maxpacket: 32
[  641.507924][    T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  641.589765][    T9] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  641.599448][    T9] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  641.649473][    T9] usb 9-1: Product: syz
[  641.653690][    T9] usb 9-1: Manufacturer: syz
[  641.667679][    T9] usb 9-1: SerialNumber: syz
[  641.696523][    T9] usb 9-1: config 0 descriptor??
[  641.726085][T16573] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  641.766956][    T9] hub 9-1:0.0: bad descriptor, ignoring hub
[  641.772929][    T9] hub: probe of 9-1:0.0 failed with error -5
[  642.608125][ T5869] usb 9-1: USB disconnect, device number 3
[  645.818963][T13098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  645.865885][T13098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.099637][T13098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.141450][T13098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.341242][T13098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.372727][T13098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.620047][T13098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.650939][T13098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.702942][T16633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  646.714196][T16633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  646.730280][T16633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  646.749020][T16633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  646.763236][T16633] geneve2: entered promiscuous mode
[  646.809544][T16647] syzkaller0: entered promiscuous mode
[  646.904888][T16647] syzkaller0: entered allmulticast mode
[  647.740460][ T5844] IPVS: starting estimator thread 0...
[  647.833011][T16659] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  647.836000][T16656] IPVS: using max 23 ests per chain, 55200 per kthread
[  648.135447][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  649.666406][T13098] tipc: Left network mode
[  649.849757][ T5844] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  650.081878][ T5844] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  650.105824][ T5844] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  650.132918][ T5844] usb 9-1: config 0 interface 0 has no altsetting 0
[  650.147802][ T5844] usb 9-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  650.176154][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.201499][ T5844] usb 9-1: config 0 descriptor??
[  650.848179][ T5844] sony 0003:054C:0268.000B: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  650.869127][T13098] bond2: (slave gretap1): Releasing active interface
[  650.881415][ T5844] sony 0003:054C:0268.000B: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.8-1/input0
[  650.894451][ T5844] sony 0003:054C:0268.000B: failed to claim input
[  650.967512][ T5844] usb 9-1: USB disconnect, device number 5
[  651.010707][T16697] fido_id[16697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  653.118196][T13098] hsr_slave_0: left promiscuous mode
[  653.181243][T13098] hsr_slave_1: left promiscuous mode
[  653.203290][T13098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  653.228711][T13098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  654.212663][T13098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  654.227063][T13098] bridge_slave_1: left allmulticast mode
[  654.246051][T13098] bridge_slave_1: left promiscuous mode
[  654.251852][T13098] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.269300][T13098] bridge_slave_0: left allmulticast mode
[  654.275183][T13098] bridge_slave_0: left promiscuous mode
[  654.284690][T13098] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.327803][T13098] veth1_macvtap: left promiscuous mode
[  654.333593][T13098] veth0_macvtap: left promiscuous mode
[  655.028383][T13098] bond3 (unregistering): (slave team0): Removing an active aggregator
[  655.046400][T13098] bond3 (unregistering): (slave team0): Releasing backup interface
[  655.066568][T13098] bond3 (unregistering): Released all slaves
[  655.442294][T13098] bond2 (unregistering): Released all slaves
[  655.488850][T13098] bond1 (unregistering): (slave veth5): Releasing active interface
[  655.707339][T13098] bond1 (unregistering): Released all slaves
[  656.410483][T13098] team0 (unregistering): Port device team_slave_1 removed
[  656.468706][T13098] team0 (unregistering): Port device team_slave_0 removed
[  656.532204][T13098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  656.588748][T13098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  657.000856][T13098] bond0 (unregistering): Released all slaves
[  657.066165][T16724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.088880][T16724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  657.098719][T16724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  657.107501][T16724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  657.116894][T16724] geneve3: entered promiscuous mode
[  657.836478][T16763] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3504'.
[  657.852423][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3504'.
[  658.375542][T13098] IPVS: stop unused estimator thread 0...
[  658.616898][    T9] IPVS: starting estimator thread 0...
[  658.795759][T16779] IPVS: using max 17 ests per chain, 40800 per kthread
[  659.926917][T16802] geneve2: entered promiscuous mode
[  664.235681][ T5869] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  664.445828][ T5869] usb 9-1: Using ep0 maxpacket: 32
[  664.474110][ T5869] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  664.505391][ T5869] usb 9-1: config 0 has no interface number 0
[  664.563846][ T5869] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  664.580798][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.615653][ T5869] usb 9-1: Product: syz
[  664.628042][ T5869] usb 9-1: Manufacturer: syz
[  664.649806][ T5869] usb 9-1: SerialNumber: syz
[  664.679928][ T5869] usb 9-1: config 0 descriptor??
[  664.709368][ T5869] smsc95xx v2.0.0
[  664.938031][T16909] netlink: 'syz.3.3529': attribute type 1 has an invalid length.
[  665.001147][T16909] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.038678][T16897] geneve2: entered promiscuous mode
[  665.082180][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'.
[  665.125676][ T5869] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  665.185099][T16912] bond0: (slave bridge3): making interface the new active one
[  665.201053][ T5869] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  665.237820][T16912] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  668.442553][ T5869] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71
[  668.455213][ T5869] smsc95xx: probe of 9-1:0.67 failed with error -71
[  668.466731][ T5869] usb 9-1: USB disconnect, device number 6
[  672.245987][T16986] netlink: 'syz.3.3546': attribute type 8 has an invalid length.
[  672.262676][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3546'.
[  672.293190][T16986] bond0: entered promiscuous mode
[  672.310394][T16986] bridge3: entered promiscuous mode
[  672.324593][T16986] gretap0: entered promiscuous mode
[  672.358252][T16986] team0: entered promiscuous mode
[  672.370050][T16986] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  672.398320][T16986] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network
[  672.431050][T16986] hsr1: entered promiscuous mode
[  672.455983][   T49] ------------[ cut here ]------------
[  672.462319][   T49] WARNING: CPU: 0 PID: 49 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830
[  672.471858][   T49] Modules linked in:
[  672.475865][   T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0
[  672.483264][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  672.493493][   T49] Workqueue: iou_exit io_ring_exit_work
[  672.499625][   T49] RIP: 0010:io_ring_exit_work+0x3b9/0x830
[  672.505922][   T49] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 01 04 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 41 0f fd f6 e9 b1 fd ff ff e8 37 0f fd f6 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00
[  672.525945][   T49] RSP: 0018:ffffc90000b9fa40 EFLAGS: 00010293
[  672.532377][   T49] RAX: ffffffff8a8a8179 RBX: ffff888025756000 RCX: ffff88801e259e00
[  672.540427][   T49] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  672.548463][   T49] RBP: ffffc90000b9fbb0 R08: ffffc90000b9f9c7 R09: 1ffff92000173f38
[  672.556970][   T49] R10: dffffc0000000000 R11: fffff52000173f39 R12: dffffc0000000000
[  672.564983][   T49] R13: 00000001000090aa R14: 00000001000090ae R15: ffff888025756510
[  672.573026][   T49] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  672.582274][   T49] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  672.589100][   T49] CR2: 00007f39318724e8 CR3: 00000000600df000 CR4: 00000000003506f0
[  672.597156][   T49] Call Trace:
[  672.600459][   T49]  <TASK>
[  672.603426][   T49]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  672.609353][   T49]  ? _raw_spin_unlock_irq+0x23/0x50
[  672.614588][   T49]  ? process_scheduled_works+0x975/0x1600
[  672.620395][   T49]  ? process_scheduled_works+0x975/0x1600
[  672.626211][   T49]  process_scheduled_works+0xa60/0x1600
[  672.631822][   T49]  ? worker_attach_to_pool+0x370/0x370
[  672.637357][   T49]  ? assign_work+0x3cc/0x5d0
[  672.638603][T16997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  672.641967][   T49]  worker_thread+0xa5e/0xfe0
[  672.642056][   T49]  kthread+0x2fa/0x390
[  672.642074][   T49]  ? pr_cont_work+0x550/0x550
[  672.665962][   T49]  ? kthread_blkcg+0xd0/0xd0
[  672.670577][   T49]  ret_from_fork+0x48/0x80
[  672.675021][   T49]  ? kthread_blkcg+0xd0/0xd0
[  672.679718][   T49]  ret_from_fork_asm+0x11/0x20
[  672.684570][   T49]  </TASK>
[  672.687654][   T49] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  672.694953][   T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0
[  672.702342][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  672.712502][   T49] Workqueue: iou_exit io_ring_exit_work
[  672.718088][   T49] Call Trace:
[  672.721383][   T49]  <TASK>
[  672.724335][   T49]  dump_stack_lvl+0x18c/0x250
[  672.729036][   T49]  ? show_regs_print_info+0x20/0x20
[  672.734256][   T49]  ? load_image+0x420/0x420
[  672.738804][   T49]  panic+0x2ca/0x720
[  672.742731][   T49]  ? bpf_jit_dump+0xd0/0xd0
[  672.747272][   T49]  ? ret_from_fork_asm+0x11/0x20
[  672.752281][   T49]  __warn+0x2e0/0x470
[  672.756291][   T49]  ? io_ring_exit_work+0x3b9/0x830
[  672.761438][   T49]  ? io_ring_exit_work+0x3b9/0x830
[  672.766576][   T49]  report_bug+0x2be/0x4f0
[  672.771013][   T49]  ? io_ring_exit_work+0x3b9/0x830
[  672.776149][   T49]  ? io_ring_exit_work+0x3b9/0x830
[  672.781290][   T49]  ? io_ring_exit_work+0x3bb/0x830
[  672.786429][   T49]  handle_bug+0xcf/0x120
[  672.790686][   T49]  exc_invalid_op+0x1a/0x50
[  672.795187][   T49]  asm_exc_invalid_op+0x1a/0x20
[  672.800039][   T49] RIP: 0010:io_ring_exit_work+0x3b9/0x830
[  672.805763][   T49] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 01 04 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 41 0f fd f6 e9 b1 fd ff ff e8 37 0f fd f6 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00
[  672.825372][   T49] RSP: 0018:ffffc90000b9fa40 EFLAGS: 00010293
[  672.831444][   T49] RAX: ffffffff8a8a8179 RBX: ffff888025756000 RCX: ffff88801e259e00
[  672.839412][   T49] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  672.847376][   T49] RBP: ffffc90000b9fbb0 R08: ffffc90000b9f9c7 R09: 1ffff92000173f38
[  672.855343][   T49] R10: dffffc0000000000 R11: fffff52000173f39 R12: dffffc0000000000
[  672.863315][   T49] R13: 00000001000090aa R14: 00000001000090ae R15: ffff888025756510
[  672.871286][   T49]  ? io_ring_exit_work+0x3b9/0x830
[  672.876446][   T49]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  672.882263][   T49]  ? _raw_spin_unlock_irq+0x23/0x50
[  672.887475][   T49]  ? process_scheduled_works+0x975/0x1600
[  672.893213][   T49]  ? process_scheduled_works+0x975/0x1600
[  672.898959][   T49]  process_scheduled_works+0xa60/0x1600
[  672.904533][   T49]  ? worker_attach_to_pool+0x370/0x370
[  672.910000][   T49]  ? assign_work+0x3cc/0x5d0
[  672.914595][   T49]  worker_thread+0xa5e/0xfe0
[  672.919228][   T49]  kthread+0x2fa/0x390
[  672.923362][   T49]  ? pr_cont_work+0x550/0x550
[  672.928040][   T49]  ? kthread_blkcg+0xd0/0xd0
[  672.932627][   T49]  ret_from_fork+0x48/0x80
[  672.937038][   T49]  ? kthread_blkcg+0xd0/0xd0
[  672.941625][   T49]  ret_from_fork_asm+0x11/0x20
[  672.946397][   T49]  </TASK>
[  672.949654][   T49] Kernel Offset: disabled
[  672.954073][   T49] Rebooting in 86400 seconds..