last executing test programs:

4m58.001816909s ago: executing program 1 (id=173):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xc}, {0xf, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8d}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa9b79e7a5e0d3762}, 0x40)

4m57.645249698s ago: executing program 1 (id=175):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x402, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004)

4m56.988533564s ago: executing program 1 (id=178):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0xc1})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m56.855442877s ago: executing program 1 (id=180):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)

4m56.581775513s ago: executing program 1 (id=183):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)

4m55.50128876s ago: executing program 3 (id=186):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x1, 0x70bd23, 0x25dfdbf9, {0x0, 0x0, 0xffff, 0x0, 0x3a45}}, 0x20}}, 0x4008894)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)

4m55.49490403s ago: executing program 1 (id=187):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)

4m55.283050835s ago: executing program 3 (id=188):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x3fffff, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})

4m54.64134937s ago: executing program 3 (id=191):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0xffffd8ee}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000014001901000000010000000228"], 0x28}}, 0x4004000)

4m54.422734395s ago: executing program 3 (id=193):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$eJzs3c1qE1EYBuDPWtvYjd0J4mLEjaug3sEgFcQBITILXTlQ3TSiTDejq1yBO/EevBCvwqvoqrtIM0OnP9aNbU7beR4I85KXge9ASLI4J3l3/+PO9qfdD99//YjRKIuViFnsR2wepM6N7rqyyGtx1CwAgKtmMqny1DNwseo6r25FxPqppvyZZCAAAAAAAAAAAAD+m/3/ADA89v9ff3WdVxvd97fj7P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0tmfz+/M//FIPR8AcP58/gPA8Lx+8/ZlXhRbkywbRezNmrIp22vbP39RbD3OFjb7u/aaprx52D9p+6wr7z749nkRNrr+6fG+u38tHj1s+4Pu2aviRL8e20tYPwAAAAAAAAAAAAAAAAAAAFwG4+zQX8/3j8dn9W068vsAJ87vr8a91aUtAwAAAAAAAAAAAAAAAAAAAK603S9fd6rp9H3dh9+nnhlMyC7HGMsIt89+AQhCNU38xgQAAAAAAAAAAAAAAAAAAAPUH/pNPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApNP////FhdRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuhz8BAAD//2OqXbs=")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x800000, 0x0, 0x0, r2}])
socket$kcm(0x2, 0x3, 0x2)

4m53.333852112s ago: executing program 3 (id=197):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000000b00)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000a80)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000440)=""/174, 0xae, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000880)={0x1, {&(0x7f0000000640)=""/108, 0x6c, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)

4m52.332940396s ago: executing program 3 (id=201):
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file7\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x13, 0x152d, &(0x7f0000004bc0)="$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")
syz_emit_ethernet(0x46, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x33)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)

4m51.804884059s ago: executing program 32 (id=201):
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file7\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x13, 0x152d, &(0x7f0000004bc0)="$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")
syz_emit_ethernet(0x46, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x33)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)

4m40.276164057s ago: executing program 33 (id=187):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)

4m16.238375457s ago: executing program 4 (id=330):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x400)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@usrquota}, {@nodiscard}, {@sysvgroups}, {@nomblk_io_submit}, {@init_itable}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==")
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

4m15.212091721s ago: executing program 4 (id=333):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000004c0))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x9, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x5, 0x106c, 0x100, 0x8, 0xffffffffffffe202, 0x380000, 0x2000000000000008, 0x8, 0x8, 0x0, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m14.556159928s ago: executing program 4 (id=337):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10)
writev(r0, &(0x7f0000000c80)=[{&(0x7f0000000880)="798ea3", 0x3}], 0x1)

4m14.348218183s ago: executing program 4 (id=339):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x2aa, &(0x7f0000000c80)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020)

4m14.02008585s ago: executing program 4 (id=343):
syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000e80)={[{@noload}, {@mb_optimize_scan}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xccff}}]}, 0xff, 0x44d, &(0x7f0000001fc0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffd, 0x10c0348, 0xc0be, 0x2, 0xf296, 0x2, 0x0, 0x0, 0x10, 0x3}}, 0x50)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x8, &(0x7f0000000600)=ANY=[], 0x1, 0x1520, &(0x7f0000000a40)="$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")
truncate(&(0x7f0000000340)='./file0/file0\x00', 0x4000000000003)
chdir(0x0)

4m13.868696974s ago: executing program 0 (id=345):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x1, 0x1, 0x7bf, 0x5, 0x6})
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x80f, 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x5, 0x5, 0x6, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x4, 0x81, 0x8, 0x40, 0x1c}, 0xe)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
close(r0)

4m13.589318281s ago: executing program 0 (id=347):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x14, 0x4, 0x8, 0x6, "ff0000000001ffff00"})
r1 = syz_open_pts(r0, 0x141601)
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
write(r1, 0x0, 0x0)

4m13.498312793s ago: executing program 4 (id=348):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m12.81360991s ago: executing program 34 (id=348):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m12.554512986s ago: executing program 0 (id=350):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0xfa})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r2, 0x0, 0xfffffffffffffec0, 0x240007bd, &(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10)
close_range(r0, r2, 0x0)

4m12.38472506s ago: executing program 0 (id=352):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x2aa, &(0x7f0000000c80)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020)

4m12.022511689s ago: executing program 0 (id=355):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8280, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48)
bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x24)

4m11.249051017s ago: executing program 0 (id=358):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000000)=[{r2, 0xbea47af93e5704e6}, {r1, 0x96ca}, {r1, 0xc2a5}], 0x3, 0x0, 0x0, 0x0)
close(r0)

4m10.976787854s ago: executing program 35 (id=358):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000000)=[{r2, 0xbea47af93e5704e6}, {r1, 0x96ca}, {r1, 0xc2a5}], 0x3, 0x0, 0x0, 0x0)
close(r0)

1m18.017365647s ago: executing program 5 (id=1242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m17.217361047s ago: executing program 5 (id=1251):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x7490, &(0x7f0000000300)={0x0, 0xf76b, 0x40, 0xfffffffd, 0x7})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000056c000/0x3000)=nil, &(0x7f0000dbd000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000083b000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000dbd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0xfffffffffffffdd2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xeade, 0x1c881, 0x8, 0xd1})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m17.022219621s ago: executing program 5 (id=1253):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000dea000/0x2000)=nil, &(0x7f000069c000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ca6000/0x3000)=nil, &(0x7f0000bdf000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x383, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x40007, 0x20002f7})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m16.785320987s ago: executing program 5 (id=1254):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file1\x00', 0xaeb7d5e45de987f1, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2)
fsync(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m16.67320806s ago: executing program 5 (id=1255):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9)
mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c)
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

1m16.342209788s ago: executing program 5 (id=1257):
r0 = io_uring_setup(0x4188, &(0x7f0000000240)={0x0, 0x7de2, 0x50, 0x3, 0x112})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2c45, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
flock(r1, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82)
flock(r3, 0x1)
flock(r3, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

1m1.290812511s ago: executing program 36 (id=1257):
r0 = io_uring_setup(0x4188, &(0x7f0000000240)={0x0, 0x7de2, 0x50, 0x3, 0x112})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2c45, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
flock(r1, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82)
flock(r3, 0x1)
flock(r3, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

8.975303813s ago: executing program 7 (id=1582):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0xf2)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)

7.286405494s ago: executing program 7 (id=1587):
fsopen(0x0, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800)

6.19695534s ago: executing program 2 (id=1594):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x22)
fchown(r2, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103)

5.654457333s ago: executing program 2 (id=1596):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc)

5.105213286s ago: executing program 7 (id=1598):
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x1, 0x840004, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x20000}}, 0x50)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)

4.5443906s ago: executing program 2 (id=1600):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r1 = dup(r0)
write$P9_RSTATFS(r1, &(0x7f0000000180)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x7fff, 0x5, 0x1, 0x5, 0x7, 0x200, 0x6}}, 0x43)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "00f8ba7d8207000000000c0000000000096314"})
r2 = syz_open_pts(r0, 0x80)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c15164323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3533ee0878ae95bc7072463c468b22548deb01efd00001ed2c41d078b9cf1fc566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000002666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e020000008103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e0c6a9744480000000077000000000000000000000000000000000000000000000000000000000000978200", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
dup3(r2, r0, 0x80000)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000240)={0x40001000, 0x8, 0x7, 0x8, 0x4, "73893a00fd00000000000000710de6eb00", 0x10000000, 0x2})
read(r0, &(0x7f00000002c0)=""/228, 0xe4)

4.313760825s ago: executing program 7 (id=1601):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

4.257325917s ago: executing program 2 (id=1602):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x20}}, 0x0)

3.793351008s ago: executing program 7 (id=1605):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)

3.72474424s ago: executing program 2 (id=1606):
r0 = socket$inet6_udplite(0xa, 0x2, 0x11)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r3, 0x0, 0xf, 0x8)
pipe2$9p(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
tee(r2, r5, 0x4e, 0x0)
write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
tee(r4, r3, 0x9, 0x8)

3.69379042s ago: executing program 6 (id=1607):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0xd0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r3, 0x1)
flock(r2, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

3.077153955s ago: executing program 8 (id=1609):
io_setup(0x3, &(0x7f0000000380))
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@nobh}, {@auto_da_alloc}, {@jqfmt_vfsold}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
io_setup(0x84e6, &(0x7f00000000c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000abaff9), 0x10)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000010000ffffffe00003"])
openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0)

3.023430286s ago: executing program 7 (id=1610):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.576913867s ago: executing program 2 (id=1611):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f0000000540)=""/157, 0x9d)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fba000)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000f13000/0x4000)=nil, 0x4000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

2.441270981s ago: executing program 6 (id=1612):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4042000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.101082949s ago: executing program 8 (id=1613):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x3f00)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000854)
r1 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.827384435s ago: executing program 6 (id=1614):
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000080)='./file4\x00', 0xa08c44, &(0x7f0000000240)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x89, 0x2c4, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
mount(&(0x7f0000000180)=@sg0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
modify_ldt$read_default(0x2, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

1.661322789s ago: executing program 8 (id=1615):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48})
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448df, 0x0)

634.268504ms ago: executing program 6 (id=1616):
r0 = io_uring_setup(0x1006, &(0x7f0000000100)={0x0, 0x5f3d, 0x40, 0x1, 0x200013a})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
close(r3)
r4 = socket$inet6(0xa, 0x1, 0x0)
listen(r4, 0xb)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000080), &(0x7f0000000840)=r3}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

623.749424ms ago: executing program 8 (id=1617):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xaeea)
r1 = accept4(r0, 0x0, 0x0, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xd4a}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1})
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x4}, &(0x7f0000000240)=0x8)

276.050253ms ago: executing program 6 (id=1618):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

275.032693ms ago: executing program 8 (id=1619):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$caif_stream(0x25, 0x1, 0x4)
accept(r1, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000280)=0x80)
r2 = getpid()
syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000300))
close_range(r0, 0xffffffffffffffff, 0x0)

9.319509ms ago: executing program 6 (id=1620):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000804)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(0x0, 0x1, 0x0)
semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0)

0s ago: executing program 8 (id=1621):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x24}, 0x94)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

kernel console output (not intermixed with test programs):

ion on journal
[  117.297183][ T6296] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  117.741458][   T28] audit: type=1804 audit(1788987083.119:6): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.152" name="/newroot/41/file1/bus" dev="loop1" ino=17059 res=1 errno=0
[  117.858939][ T6296] (syz.1.152,6296,1):ocfs2_get_clusters:606 ERROR: status = -34
[  117.859062][ T6296] (syz.1.152,6296,1):ocfs2_reflink_remap_extent:4535 ERROR: status = -34
[  117.859090][ T6296] (syz.1.152,6296,1):ocfs2_reflink_remap_blocks:4694 ERROR: status = -34
[  117.859188][ T6296] (syz.1.152,6296,1):ocfs2_remap_file_range:2746 ERROR: status = -34
[  118.241427][ T5777] ocfs2: Unmounting device (7,1) on (node local)
[  118.899181][ T6336] loop3: detected capacity change from 0 to 512
[  118.926792][   T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  118.943673][ T6336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  118.990315][ T6336] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #17: comm syz.3.168: corrupted in-inode xattr: e_name out of bounds
[  119.015631][ T6336] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.168: couldn't read orphan inode 17 (err -117)
[  119.068682][ T6336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.145438][   T23] usb 1-1: Using ep0 maxpacket: 16
[  119.157880][   T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.187074][   T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.206789][ T6336] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.3.168: path (unknown): bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  119.228157][   T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  119.228192][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.228214][   T23] usb 1-1: Product: syz
[  119.228230][   T23] usb 1-1: Manufacturer: syz
[  119.228247][   T23] usb 1-1: SerialNumber: syz
[  119.321486][ T6342] loop2: detected capacity change from 0 to 1024
[  119.443338][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.524950][   T23] usb 1-1: 0:2 : does not exist
[  119.551515][   T23] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  119.663711][   T23] usb 1-1: USB disconnect, device number 3
[  119.740641][ T6348] netlink: 'syz.3.171': attribute type 12 has an invalid length.
[  119.824754][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.875670][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  120.146095][ T6356] netlink: 'syz.1.175': attribute type 1 has an invalid length.
[  120.182717][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.229584][ T6356] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  120.415154][ T6356] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  120.455027][ T6356] bond1 (unregistering): Released all slaves
[  121.421466][ T6384] loop3: detected capacity change from 0 to 512
[  121.469914][ T6353] loop2: detected capacity change from 0 to 32768
[  121.499347][ T6384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  121.503669][ T6353] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.174 (6353)
[  121.621403][ T6353] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  121.653546][ T6384] EXT4-fs (loop3): 1 truncate cleaned up
[  121.660930][ T6384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.703642][ T6353] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  121.808075][ T6353] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  121.900688][ T6353] BTRFS info (device loop2): use zstd compression, level 3
[  121.976256][ T6353] BTRFS info (device loop2): using free space tree
[  122.251526][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.439045][ T6353] BTRFS info (device loop2): enabling ssd optimizations
[  122.520814][ T6353] BTRFS info (device loop2): auto enabling async discard
[  122.624443][ T6414] loop0: detected capacity change from 0 to 128
[  122.699872][ T6414] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  122.781821][ T6414] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  123.087523][ T5775] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  123.157845][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.371162][ T6421] loop3: detected capacity change from 0 to 512
[  123.697018][ T6421] loop3: detected capacity change from 512 to 0
[  123.767825][ T6426] syz.3.193: attempt to access beyond end of device
[  123.767825][ T6426] loop3: rw=1, sector=128, nr_sectors = 4 limit=0
[  123.850631][ T6426] Buffer I/O error on dev loop3, logical block 32, lost sync page write
[  123.869405][ T6429] loop0: detected capacity change from 0 to 256
[  123.896758][ T6426] syz.3.193: attempt to access beyond end of device
[  123.896758][ T6426] loop3: rw=0, sector=128, nr_sectors = 4 limit=0
[  123.930927][ T6426] FAT-fs (loop3): FAT read failed (blocknr 32)
[  123.942568][ T6429] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  123.966401][ T6426] syz.3.193: attempt to access beyond end of device
[  123.966401][ T6426] loop3: rw=0, sector=136, nr_sectors = 4 limit=0
[  123.996152][ T6426] FAT-fs (loop3): unable to read inode block for updating (i_pos 2181)
[  124.360369][ T5776] syz-executor: attempt to access beyond end of device
[  124.360369][ T5776] loop3: rw=524288, sector=136, nr_sectors = 4 limit=0
[  124.415449][ T5776] syz-executor: attempt to access beyond end of device
[  124.415449][ T5776] loop3: rw=524288, sector=140, nr_sectors = 4 limit=0
[  124.451643][ T5776] syz-executor: attempt to access beyond end of device
[  124.451643][ T5776] loop3: rw=524288, sector=144, nr_sectors = 4 limit=0
[  124.485553][ T5776] syz-executor: attempt to access beyond end of device
[  124.485553][ T5776] loop3: rw=524288, sector=148, nr_sectors = 4 limit=0
[  124.515455][ T5776] syz-executor: attempt to access beyond end of device
[  124.515455][ T5776] loop3: rw=524288, sector=152, nr_sectors = 4 limit=0
[  124.544905][ T5776] syz-executor: attempt to access beyond end of device
[  124.544905][ T5776] loop3: rw=524288, sector=156, nr_sectors = 4 limit=0
[  124.602730][ T5776] syz-executor: attempt to access beyond end of device
[  124.602730][ T5776] loop3: rw=524288, sector=160, nr_sectors = 4 limit=0
[  124.655411][ T5776] FAT-fs (loop3): Directory bread(block 34) failed
[  124.662070][ T5776] FAT-fs (loop3): Directory bread(block 35) failed
[  124.695068][ T5776] FAT-fs (loop3): Directory bread(block 36) failed
[  124.712498][ T5776] FAT-fs (loop3): Directory bread(block 37) failed
[  124.735436][ T5776] FAT-fs (loop3): Directory bread(block 38) failed
[  124.742097][ T5776] FAT-fs (loop3): Directory bread(block 39) failed
[  124.765442][ T5776] FAT-fs (loop3): Directory bread(block 40) failed
[  124.772121][ T5776] FAT-fs (loop3): Directory bread(block 41) failed
[  124.868542][ T3004] FAT-fs (loop3): bread failed in fat_clusters_flush
[  124.901797][ T5776] FAT-fs (loop3): unable to read boot sector to mark fs as dirty
[  125.423297][ T3004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.448567][ T3004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.669389][ T3004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.695523][ T3004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.867907][ T3004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.891168][ T3004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.011464][ T6451] loop0: detected capacity change from 0 to 1024
[  126.066559][ T6451] EXT4-fs: Ignoring removed orlov option
[  126.119308][ T3004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.140357][ T3004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.193705][ T6451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.412996][   T28] audit: type=1800 audit(1788987091.819:7): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.203" name="file1" dev="loop0" ino=15 res=0 errno=0
[  127.306235][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.321094][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.332380][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.340951][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.349152][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  127.358067][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.640600][ T6451] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.203: Invalid inode table block 5 in block_group 0
[  128.807619][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.111477][ T6382] x86/PAT: syz.1.183:6382 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  129.399763][ T6462] chnl_net:caif_netlink_parms(): no params data found
[  129.486090][ T5781] Bluetooth: hci1: command tx timeout
[  130.392171][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.425719][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.445840][ T6462] bridge_slave_0: entered allmulticast mode
[  130.462290][ T6462] bridge_slave_0: entered promiscuous mode
[  130.664418][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.671464][ T6487] loop2: detected capacity change from 0 to 40427
[  130.715150][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.736599][ T6462] bridge_slave_1: entered allmulticast mode
[  130.763679][ T6462] bridge_slave_1: entered promiscuous mode
[  130.808710][ T6487] F2FS-fs (loop2): invalid crc value
[  130.848732][ T6487] F2FS-fs (loop2): Found nat_bits in checkpoint
[  130.955325][ T5821] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  130.985585][ T3004] hsr_slave_0: left promiscuous mode
[  131.025702][ T3004] hsr_slave_1: left promiscuous mode
[  131.092778][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.105528][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.137176][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.144662][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.148720][ T5821] usb 1-1: Using ep0 maxpacket: 8
[  131.166121][ T6487] F2FS-fs (loop2): Start checkpoint disabled!
[  131.170326][ T5821] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  131.186309][ T3004] bridge_slave_1: left allmulticast mode
[  131.187270][ T5821] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  131.192001][ T3004] bridge_slave_1: left promiscuous mode
[  131.211675][ T5821] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  131.235586][ T5821] usb 1-1: config 250 has no interface number 0
[  131.242148][ T5821] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  131.256179][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.264940][ T6487] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  131.279419][ T5821] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  131.310451][ T5821] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  131.345035][ T5821] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  131.357299][ T3004] bridge_slave_0: left allmulticast mode
[  131.363000][ T3004] bridge_slave_0: left promiscuous mode
[  131.373698][ T5821] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  131.396069][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.402110][ T5821] usb 1-1: config 250 interface 228 has no altsetting 0
[  131.428317][ T5821] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  131.448354][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  131.472578][ T5821] usb 1-1: Product: syz
[  131.486195][ T5821] usb 1-1: SerialNumber: syz
[  131.509977][ T5821] hub 1-1:250.228: bad descriptor, ignoring hub
[  131.540016][ T5821] hub: probe of 1-1:250.228 failed with error -5
[  131.565685][ T5781] Bluetooth: hci1: command tx timeout
[  131.614164][ T3004] veth1_macvtap: left promiscuous mode
[  131.641588][ T3004] veth0_macvtap: left promiscuous mode
[  131.670141][ T3004] veth1_vlan: left promiscuous mode
[  131.701704][ T3004] veth0_vlan: left promiscuous mode
[  131.742469][ T5821] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  131.962933][ T2958] bio_check_eod: 11 callbacks suppressed
[  131.962951][ T2958] kworker/u4:10: attempt to access beyond end of device
[  131.962951][ T2958] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  132.026600][ T2958] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  132.050838][ T2958] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  132.084105][ T2958] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  132.462267][ T6510] usb 1-1: reset high-speed USB device number 4 using dummy_hcd
[  132.936904][ T5984] syz.2.47 (5984) used greatest stack depth: 17832 bytes left
[  133.174034][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.193015][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  133.356007][   T23] usb 1-1: USB disconnect, device number 4
[  133.397921][   T23] usblp0: removed
[  133.645846][ T5781] Bluetooth: hci1: command tx timeout
[  133.819536][ T3004] team0 (unregistering): Port device team_slave_1 removed
[  133.955954][ T3004] team0 (unregistering): Port device team_slave_0 removed
[  134.089876][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.766200][ T3004] bond0 (unregistering): Released all slaves
[  135.082435][ T6532] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[  135.209139][ T6532] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.280633][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.324524][ T6533] bond1: (slave batadv0): making interface the new active one
[  135.357302][ T6533] bond1: (slave batadv0): Enslaving as an active interface with an up link
[  135.379644][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.408992][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.566193][ T6462] team0: Port device team_slave_0 added
[  135.575059][ T6462] team0: Port device team_slave_1 added
[  135.678096][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.685136][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.713562][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.728422][ T5781] Bluetooth: hci1: command tx timeout
[  135.741747][ T6541] netlink: 'syz.2.224': attribute type 1 has an invalid length.
[  135.837080][ T6541] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.936270][ T6546] bond1: (slave syz_tun): Enslaving as a backup interface with an up link
[  135.977987][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.995421][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.045490][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.291241][ T6462] hsr_slave_0: entered promiscuous mode
[  136.316833][ T6462] hsr_slave_1: entered promiscuous mode
[  136.345758][ T6462] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.372983][ T6462] Cannot create hsr debugfs directory
[  137.063230][ T6462] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  137.091051][ T6462] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  137.133079][ T6462] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  137.165779][ T6462] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  137.255527][   T27] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  137.428653][ T6462] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.472313][   T27] usb 3-1: config 4 has an invalid interface number: 44 but max is 0
[  137.493327][ T6462] 8021q: adding VLAN 0 to HW filter on device team0
[  137.512903][   T27] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  137.549741][   T27] usb 3-1: config 4 has no interface number 0
[  137.580929][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.588199][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.607694][   T27] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  137.647877][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.655104][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.678147][   T27] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  137.689993][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.710833][   T27] usb 3-1: Product: syz
[  137.734052][   T27] usb 3-1: Manufacturer: syz
[  137.757870][   T27] usb 3-1: SerialNumber: syz
[  138.219205][   T27] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  138.287402][   T27] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  138.346558][   T27] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  138.353910][   T27] usb 3-1: media controller created
[  138.410744][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.690012][   T27] DVB: Unable to find symbol dib7000p_attach()
[  138.699815][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.710720][   T27] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  138.735739][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.745148][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.775688][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.791962][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  138.801107][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.921360][ T6608] FAULT_INJECTION: forcing a failure.
[  138.921360][ T6608] name failslab, interval 1, probability 0, space 0, times 0
[  138.941743][ T6608] CPU: 1 PID: 6608 Comm: syz.0.238 Not tainted syzkaller #0
[  138.949138][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  138.959235][ T6608] Call Trace:
[  138.962551][ T6608]  <TASK>
[  138.965506][ T6608]  dump_stack_lvl+0x18c/0x250
[  138.970227][ T6608]  ? show_regs_print_info+0x20/0x20
[  138.975461][ T6608]  ? load_image+0x420/0x420
[  138.979997][ T6608]  ? __might_sleep+0xe0/0xe0
[  138.984619][ T6608]  ? __lock_acquire+0x7d80/0x7d80
[  138.989684][ T6608]  should_fail_ex+0x394/0x4c0
[  138.994398][ T6608]  should_failslab+0x9/0x20
[  138.998944][ T6608]  slab_pre_alloc_hook+0x59/0x300
[  139.004012][ T6608]  kmem_cache_alloc+0x5a/0x2c0
[  139.008820][ T6608]  ? alloc_empty_file+0x9e/0x1d0
[  139.013788][ T6608]  alloc_empty_file+0x9e/0x1d0
[  139.018582][ T6608]  dentry_open+0x4b/0x100
[  139.022950][ T6608]  __se_sys_fsmount+0x781/0x9b0
[  139.027849][ T6608]  ? __x64_sys_fsmount+0x80/0x80
[  139.032816][ T6608]  ? lockdep_hardirqs_on+0x98/0x150
[  139.038061][ T6608]  do_syscall_64+0x55/0xb0
[  139.042514][ T6608]  ? clear_bhb_loop+0x40/0x90
[  139.047227][ T6608]  ? clear_bhb_loop+0x40/0x90
[  139.051940][ T6608]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.057896][ T6608] RIP: 0033:0x7fbacd79e159
[  139.062342][ T6608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.081979][ T6608] RSP: 002b:00007fbace721028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0
[  139.090520][ T6608] RAX: ffffffffffffffda RBX: 00007fbacda25fa0 RCX: 00007fbacd79e159
[  139.098525][ T6608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  139.106520][ T6608] RBP: 00007fbacd83503b R08: 0000000000000000 R09: 0000000000000000
[  139.114522][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.122522][ T6608] R13: 00007fbacda26038 R14: 00007fbacda25fa0 R15: 00007fff3721f778
[  139.130547][ T6608]  </TASK>
[  139.177767][ T1074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  139.209308][ T1074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[  139.235437][   T27] rc_core: IR keymap rc-dib0700-rc5 not found
[  139.241755][   T27] Registered IR keymap rc-empty
[  139.251852][ T1074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.269420][   T27] dvb-usb: could not initialize remote control.
[  139.305524][   T27] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  139.348774][   T27] usb 3-1: USB disconnect, device number 2
[  139.377012][   T27] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  139.406973][ T6462] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.520445][ T6618] sctp: [Deprecated]: syz.2.239 (pid 6618) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.520445][ T6618] Use struct sctp_sack_info instead
[  139.650927][ T1074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  139.674865][ T1074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[  139.713407][ T1074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.869289][ T1074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  139.885916][ T1074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[  139.898602][ T1074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.073099][ T1074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  140.123541][ T1074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[  140.155697][ T1074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.704336][ T6601] chnl_net:caif_netlink_parms(): no params data found
[  140.746607][ T6640] FAULT_INJECTION: forcing a failure.
[  140.746607][ T6640] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  140.783703][ T6640] CPU: 0 PID: 6640 Comm: syz.0.244 Not tainted syzkaller #0
[  140.791097][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.801205][ T6640] Call Trace:
[  140.804550][ T6640]  <TASK>
[  140.807528][ T6640]  dump_stack_lvl+0x18c/0x250
[  140.812260][ T6640]  ? show_regs_print_info+0x20/0x20
[  140.817493][ T6640]  ? load_image+0x420/0x420
[  140.822029][ T6640]  ? __might_fault+0xaa/0x120
[  140.826737][ T6640]  ? __lock_acquire+0x7d80/0x7d80
[  140.831795][ T6640]  ? __virt_addr_valid+0x10c/0x380
[  140.836949][ T6640]  should_fail_ex+0x394/0x4c0
[  140.841668][ T6640]  _copy_from_user+0x2f/0xe0
[  140.846288][ T6640]  memdup_user+0x64/0xc0
[  140.850567][ T6640]  sctp_getsockopt_connectx3+0x1fa/0x480
[  140.856226][ T6640]  ? sctp_getsockopt_local_addrs+0xe90/0xe90
[  140.862251][ T6640]  ? __local_bh_enable_ip+0x13a/0x1c0
[  140.867652][ T6640]  ? _local_bh_enable+0xa0/0xa0
[  140.872537][ T6640]  sctp_getsockopt+0x986/0xb60
[  140.877333][ T6640]  ? sock_recv_errqueue+0x5e0/0x5e0
[  140.882567][ T6640]  do_sock_getsockopt+0x379/0x450
[  140.887633][ T6640]  ? __ia32_sys_setsockopt+0x200/0x200
[  140.893126][ T6640]  ? lockdep_hardirqs_on+0x50/0x150
[  140.898370][ T6640]  __x64_sys_getsockopt+0x1d6/0x280
[  140.903597][ T6640]  ? lockdep_hardirqs_on+0x50/0x150
[  140.908829][ T6640]  ? lockdep_hardirqs_on+0x50/0x150
[  140.914103][ T6640]  do_syscall_64+0x55/0xb0
[  140.918553][ T6640]  ? clear_bhb_loop+0x40/0x90
[  140.923265][ T6640]  ? clear_bhb_loop+0x40/0x90
[  140.927972][ T6640]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.933900][ T6640] RIP: 0033:0x7fbacd79e159
[  140.938350][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.957994][ T6640] RSP: 002b:00007fbace721028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  140.966446][ T6640] RAX: ffffffffffffffda RBX: 00007fbacda25fa0 RCX: 00007fbacd79e159
[  140.974439][ T6640] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005
[  140.982437][ T6640] RBP: 00007fbacd83503b R08: 00002000000000c0 R09: 0000000000000000
[  140.990438][ T6640] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  140.998436][ T6640] R13: 00007fbacda26038 R14: 00007fbacda25fa0 R15: 00007fff3721f778
[  141.006447][ T6640]  </TASK>
[  141.021845][ T5781] Bluetooth: hci2: command tx timeout
[  141.104519][ T6462] veth0_vlan: entered promiscuous mode
[  141.282777][ T6462] veth1_vlan: entered promiscuous mode
[  141.587775][ T6662] loop0: detected capacity change from 0 to 16
[  141.604201][ T6662] erofs: (device loop0): mounted with root inode @ nid 36.
[  141.627250][ T6662] syz.0.248: attempt to access beyond end of device
[  141.627250][ T6662] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16
[  141.649018][ T6662] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096]
[  141.661158][   T28] audit: type=1800 audit(1788987107.069:8): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.248" name="file2" dev="loop0" ino=89 res=0 errno=0
[  141.692190][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.707287][ T6662] syz.0.248: attempt to access beyond end of device
[  141.707287][ T6662] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  141.720812][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.723950][ T6662] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096]
[  141.744235][ T6662] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[8192]
[  141.751835][ T6601] bridge_slave_0: entered allmulticast mode
[  141.757613][ T6662] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[8192]
[  141.803149][ T5820] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  141.821499][ T6601] bridge_slave_0: entered promiscuous mode
[  141.847738][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.871798][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.885712][ T6601] bridge_slave_1: entered allmulticast mode
[  141.900949][ T6601] bridge_slave_1: entered promiscuous mode
[  142.021603][ T5820] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  142.052118][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.085335][ T5820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  142.094420][ T5820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.125980][ T5820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58354, setting to 1024
[  142.156378][ T5820] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  142.169870][ T6601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.185385][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  142.193468][ T5820] usb 3-1: Product: syz
[  142.209730][ T5820] usb 3-1: Manufacturer: syz
[  142.227992][ T6601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.247473][ T5820] cdc_wdm 3-1:1.0: skipping garbage
[  142.262987][ T5820] cdc_wdm 3-1:1.0: skipping garbage
[  142.281475][ T5820] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  142.295504][ T5820] cdc_wdm 3-1:1.0: Unknown control protocol
[  142.347449][ T6462] veth0_macvtap: entered promiscuous mode
[  142.371059][ T6462] veth1_macvtap: entered promiscuous mode
[  142.387014][ T6601] team0: Port device team_slave_0 added
[  142.434955][ T6601] team0: Port device team_slave_1 added
[  142.560085][ T6601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.571835][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.576716][ T6601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.579212][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.611713][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.618391][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.624745][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.631399][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.638346][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.645021][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.651443][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.658119][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.664622][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.671281][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.677852][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.684509][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.690884][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.697542][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.701389][ T6601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.704196][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.720855][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.727527][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  142.734210][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  142.742893][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  142.751857][ T5821] usb 3-1: USB disconnect, device number 3
[  142.779868][ T6601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.788899][ T6601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.855316][ T6601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.898310][ T6675] process 'syz.0.251' launched './file0' with NULL argv: empty string added
[  143.001324][ T6462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.034558][ T6462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.065777][ T6462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.077235][ T6462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.087956][ T5781] Bluetooth: hci2: command tx timeout
[  143.093992][ T6462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.105307][ T6462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.117922][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.132057][ T6675] loop0: detected capacity change from 0 to 2048
[  143.171603][ T6675]  loop0: p1 < > p4 < >
[  143.177267][ T6675] loop0: partition table partially beyond EOD, truncated
[  143.207053][ T6675] loop0: p4 start 42180 is beyond EOD, truncated
[  143.249511][ T6462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.285364][ T6462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.310702][ T6462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.331764][ T6462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.342119][ T6462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.362530][ T6462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.383597][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.519606][ T6462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.567259][ T6462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.605591][ T6462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.614393][ T6462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.661293][ T6601] hsr_slave_0: entered promiscuous mode
[  143.675120][ T6601] hsr_slave_1: entered promiscuous mode
[  143.692259][ T6601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.701674][ T6601] Cannot create hsr debugfs directory
[  143.746983][ T6689] syz_tun: entered allmulticast mode
[  143.836000][ T6686] syz_tun: left allmulticast mode
[  144.080557][ T1074] hsr_slave_0: left promiscuous mode
[  144.104046][ T1074] hsr_slave_1: left promiscuous mode
[  144.118915][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.132322][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.144936][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.156736][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.178925][ T1074] bridge_slave_1: left allmulticast mode
[  144.208375][ T1074] bridge_slave_1: left promiscuous mode
[  144.219205][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.230113][ T1074] bridge_slave_0: left allmulticast mode
[  144.245823][ T1074] bridge_slave_0: left promiscuous mode
[  144.253067][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.433343][ T1074] veth1_macvtap: left promiscuous mode
[  144.465141][ T1074] veth0_macvtap: left promiscuous mode
[  144.476505][ T1074] veth1_vlan: left promiscuous mode
[  144.491477][ T1074] veth0_vlan: left promiscuous mode
[  144.768348][ T6708] loop0: detected capacity change from 0 to 4096
[  144.862935][ T6708] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[  144.896927][ T6708] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  144.916173][ T6708]  loop0:
[  145.165856][ T5781] Bluetooth: hci2: command tx timeout
[  145.946173][ T6725] netlink: 188 bytes leftover after parsing attributes in process `syz.2.263'.
[  145.976944][ T6725] netlink: 105 bytes leftover after parsing attributes in process `syz.2.263'.
[  146.267594][ T6731] loop0: detected capacity change from 0 to 1024
[  146.314347][ T6731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  146.341187][ T6731] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.423064][   T28] audit: type=1800 audit(1788987111.829:9): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.266" name="file1" dev="loop0" ino=15 res=0 errno=0
[  146.448806][ T1074] team0 (unregistering): Port device team_slave_1 removed
[  146.458308][ T6731] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.513228][   T28] audit: type=1800 audit(1788987111.919:10): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.266" name="file1" dev="loop0" ino=15 res=0 errno=0
[  146.514495][ T6731] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.560857][ T6731] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.575686][ T1074] team0 (unregistering): Port device team_slave_0 removed
[  146.582711][ T6730] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.597128][ T6731] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.619065][ T6730] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.668554][ T6731] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.684085][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.720753][ T6731] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.737976][ T6735] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.758195][ T6731] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: comm syz.0.266: lblock 0 mapped to illegal pblock 0 (length 1)
[  146.801461][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.195679][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  147.257728][ T5781] Bluetooth: hci2: command tx timeout
[  147.433396][ T1074] bond0 (unregistering): Released all slaves
[  147.651927][ T6725] netlink: 105 bytes leftover after parsing attributes in process `syz.2.263'.
[  147.823387][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.863023][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.032682][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.056106][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.206251][ T6601] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  148.231712][ T6601] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  148.285497][ T6601] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  148.319829][ T6601] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  148.660964][ T6601] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.759729][ T5877] IPVS: starting estimator thread 0...
[  148.779925][ T6601] 8021q: adding VLAN 0 to HW filter on device team0
[  148.836272][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.843545][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.895957][ T6768] IPVS: using max 18 ests per chain, 43200 per kthread
[  148.934409][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.941648][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.933582][ T6601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.395831][ T5818] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  150.582943][ T5818] usb 1-1: Using ep0 maxpacket: 32
[  150.602040][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.636342][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.662234][ T5818] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  150.683542][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.738028][ T5818] usb 1-1: config 0 descriptor??
[  150.757824][ T5818] hub 1-1:0.0: USB hub found
[  150.875598][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  150.980017][ T5818] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  151.034649][ T6601] veth0_vlan: entered promiscuous mode
[  151.068288][ T6601] veth1_vlan: entered promiscuous mode
[  151.096145][   T23] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  151.125402][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.159987][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  151.176725][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.205534][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58354, setting to 1024
[  151.237052][   T23] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  151.255407][   T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  151.273725][   T23] usb 5-1: Product: syz
[  151.278338][   T23] usb 5-1: Manufacturer: syz
[  151.308666][   T23] cdc_wdm 5-1:1.0: skipping garbage
[  151.313974][   T23] cdc_wdm 5-1:1.0: skipping garbage
[  151.339586][   T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  151.357803][   T23] cdc_wdm 5-1:1.0: Unknown control protocol
[  151.386500][ T5818] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0
[  151.454370][ T5818] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0
[  151.620219][ T6601] veth0_macvtap: entered promiscuous mode
[  151.657636][ T6601] veth1_macvtap: entered promiscuous mode
[  151.686223][    C1] wdm_int_callback: 5 callbacks suppressed
[  151.686244][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  151.687497][ T5818] usb 5-1: USB disconnect, device number 2
[  151.692129][    C1] wdm_int_callback: 5 callbacks suppressed
[  151.692146][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  151.716551][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  151.826118][ T6601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.857156][ T6601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.895289][ T6601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.935672][ T6601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.984041][ T6601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.010443][ T6601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.049453][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.096223][ T6601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.128457][ T6831] loop4: detected capacity change from 0 to 1024
[  152.131595][ T6601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.171733][ T6831] EXT4-fs (loop4): inodes count not valid: 1 vs 32
[  152.185562][ T6601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.210118][ T6601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.240073][ T6798] usb 1-1: reset high-speed USB device number 5 using dummy_hcd
[  152.253003][ T6601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.299492][ T6601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.327438][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.380052][ T6601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.425442][ T6601] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.434239][ T6601] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.507886][ T6601] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.730351][   T23] usb 1-1: USB disconnect, device number 5
[  152.742847][ T6798] usbhid 1-1:0.0: reset_resume error -19
[  152.915868][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.959312][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.062819][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.090940][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.862010][ T6871] loop0: detected capacity change from 0 to 512
[  153.914931][ T6871] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  153.989451][ T6871] EXT4-fs error (device loop0): ext4_init_orphan_info:621: comm syz.0.292: orphan file block 0: bad magic
[  154.017868][ T6879] loop2: detected capacity change from 0 to 128
[  154.077758][ T6871] EXT4-fs (loop0): Remounting filesystem read-only
[  154.084762][ T6871] EXT4-fs (loop0): mount failed
[  154.112827][ T6879] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.187295][ T6879] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  154.551399][ T6871] loop0: detected capacity change from 0 to 512
[  154.658399][ T6871] EXT4-fs (loop0): orphan cleanup on readonly fs
[  154.680634][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.699508][ T6871] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.292: bad orphan inode 13
[  154.787504][ T6871] ext4_test_bit(bit=12, block=18) = 1
[  154.800177][ T6871] is_bad_inode(inode)=0
[  154.836614][ T6871] NEXT_ORPHAN(inode)=2130706432
[  154.865826][ T6871] max_ino=32
[  154.869123][ T6871] i_nlink=1
[  154.874098][ T6871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  155.132104][ T6901] ip6erspan0: entered allmulticast mode
[  155.311099][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.510358][ T6906] loop5: detected capacity change from 0 to 256
[  155.687133][ T6906] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  155.749175][ T6906] FAT-fs (loop5): Filesystem has been set read-only
[  155.778120][ T6906] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  155.842012][ T6906] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  156.637550][ T6925] loop5: detected capacity change from 0 to 64
[  157.095817][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'.
[  157.371750][ T6939] overlay: ./file0/file1 is not a directory
[  157.386568][   T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  157.631899][   T27] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  157.685548][   T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.746021][   T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  157.785453][   T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.815393][   T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58354, setting to 1024
[  157.858652][   T27] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  157.877354][   T27] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  157.932439][   T27] usb 6-1: Product: syz
[  157.955319][   T27] usb 6-1: Manufacturer: syz
[  158.011794][   T27] cdc_wdm 6-1:1.0: skipping garbage
[  158.034035][   T27] cdc_wdm 6-1:1.0: skipping garbage
[  158.051662][   T27] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  158.064537][   T27] cdc_wdm 6-1:1.0: Unknown control protocol
[  158.386392][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  158.387682][   T23] usb 6-1: USB disconnect, device number 2
[  158.393061][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  158.405025][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  158.745580][ T5821] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  158.947100][ T5821] usb 5-1: config 4 has an invalid interface number: 44 but max is 0
[  158.976004][ T5821] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  159.011499][ T5821] usb 5-1: config 4 has no interface number 0
[  159.032199][ T5821] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  159.076535][ T5821] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  159.105320][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.141528][ T5821] usb 5-1: Product: syz
[  159.146060][ T5821] usb 5-1: Manufacturer: syz
[  159.150721][ T5821] usb 5-1: SerialNumber: syz
[  159.182186][   T28] audit: type=1326 audit(1788987124.589:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.5.319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d1d59e159 code=0x0
[  159.628637][ T5821] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  159.643802][ T5821] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  159.654903][ T5821] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  159.665358][ T5821] usb 5-1: media controller created
[  159.679989][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.812439][ T5821] DVB: Unable to find symbol dib7000p_attach()
[  159.835747][ T5821] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  159.966231][ T5821] rc_core: IR keymap rc-dib0700-rc5 not found
[  159.986102][ T5821] Registered IR keymap rc-empty
[  160.001430][ T5821] dvb-usb: could not initialize remote control.
[  160.015332][ T5821] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  160.054530][ T5821] usb 5-1: USB disconnect, device number 3
[  160.168727][ T5821] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  161.642603][ T7040] loop4: detected capacity change from 0 to 128
[  161.822129][ T7040] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.898937][ T7040] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.049073][ T7056] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[  162.234966][ T7056] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.297033][ T7040] EXT4-fs warning (device loop4): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 7895779303963491325
[  162.361253][ T5785] udevd[5785]: incorrect ext4dev checksum on /dev/loop4
[  162.421329][ T7059] bond2: (slave geneve2): making interface the new active one
[  162.453720][ T7059] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  162.508897][ T6462] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.553520][ T5785] udevd[5785]: incorrect ext4dev checksum on /dev/loop4
[  163.419963][ T7080] ip_tables: iptables: counters copy to user failed while replacing table
[  163.471189][ T7085] loop4: detected capacity change from 0 to 128
[  163.506117][ T7085] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  163.702405][ T6462] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  163.722268][ T6462] FAT-fs (loop4): Filesystem has been set read-only
[  163.748471][ T6462] VFS: Lookup of 'file0' in vfat loop4 would have caused loop
[  163.780196][ T6462] VFS: Lookup of 'file0' in vfat loop4 would have caused loop
[  164.353218][ T7034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.553872][ T7034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.698437][ T7034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.798883][ T7034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.237665][ T7120] ip_tables: iptables: counters copy to user failed while replacing table
[  165.418035][ T7126] io-wq is not configured for unbound workers
[  165.423122][ T7125] loop0: detected capacity change from 0 to 128
[  165.482524][ T7125] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  165.762031][ T5778] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  165.770860][ T5778] FAT-fs (loop0): Filesystem has been set read-only
[  165.781183][ T5778] VFS: Lookup of 'file0' in vfat loop0 would have caused loop
[  165.802296][ T5778] VFS: Lookup of 'file0' in vfat loop0 would have caused loop
[  165.832795][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  165.843369][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  165.862783][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  165.873182][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  165.883410][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  165.891133][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  166.712646][ T7134] chnl_net:caif_netlink_parms(): no params data found
[  167.116019][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.126272][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.135465][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.146298][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.157035][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  167.164632][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  167.431029][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.446868][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.454176][ T7134] bridge_slave_0: entered allmulticast mode
[  167.477239][ T7134] bridge_slave_0: entered promiscuous mode
[  167.497086][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.511689][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.526246][ T7134] bridge_slave_1: entered allmulticast mode
[  167.541128][ T7134] bridge_slave_1: entered promiscuous mode
[  167.732779][ T7134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.792199][ T7034] hsr_slave_0: left promiscuous mode
[  167.801499][ T7034] hsr_slave_1: left promiscuous mode
[  167.813082][ T7034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.822832][ T7034] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.832887][ T7034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.842828][ T7034] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.851363][ T7034] bridge_slave_1: left allmulticast mode
[  167.862154][ T7034] bridge_slave_1: left promiscuous mode
[  167.868623][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.887034][ T7034] bridge_slave_0: left allmulticast mode
[  167.897346][ T7034] bridge_slave_0: left promiscuous mode
[  167.903337][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.942128][ T7034] veth1_macvtap: left promiscuous mode
[  167.953404][ T7034] veth0_macvtap: left promiscuous mode
[  167.962010][ T7034] veth1_vlan: left promiscuous mode
[  167.975366][ T5781] Bluetooth: hci1: command tx timeout
[  167.983632][ T7034] veth0_vlan: left promiscuous mode
[  169.068628][ T7034] team0 (unregistering): Port device team_slave_1 removed
[  169.131761][ T7034] team0 (unregistering): Port device team_slave_0 removed
[  169.199308][ T7034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.245462][ T5781] Bluetooth: hci3: command tx timeout
[  169.280275][ T7034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.916269][ T7034] bond0 (unregistering): Released all slaves
[  170.027608][ T7134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.065425][ T5781] Bluetooth: hci1: command tx timeout
[  170.149257][ T7134] team0: Port device team_slave_0 added
[  170.160014][ T7134] team0: Port device team_slave_1 added
[  170.216292][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.223313][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.255801][ T7134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.275922][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.283990][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.320015][ T7134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.450910][ T7206] FAULT_INJECTION: forcing a failure.
[  170.450910][ T7206] name failslab, interval 1, probability 0, space 0, times 0
[  170.485555][ T7206] CPU: 1 PID: 7206 Comm: syz.2.367 Not tainted syzkaller #0
[  170.492968][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.503859][ T7206] Call Trace:
[  170.507181][ T7206]  <TASK>
[  170.510162][ T7206]  dump_stack_lvl+0x18c/0x250
[  170.514910][ T7206]  ? show_regs_print_info+0x20/0x20
[  170.520164][ T7206]  ? load_image+0x420/0x420
[  170.524723][ T7206]  ? __might_sleep+0xe0/0xe0
[  170.529375][ T7206]  ? __lock_acquire+0x7d80/0x7d80
[  170.534513][ T7206]  should_fail_ex+0x394/0x4c0
[  170.539262][ T7206]  should_failslab+0x9/0x20
[  170.543829][ T7206]  slab_pre_alloc_hook+0x59/0x300
[  170.548914][ T7206]  ? free_vm_area+0x50/0x50
[  170.553472][ T7206]  ? bpf_prog_alloc_no_stats+0xd7/0x430
[  170.559073][ T7206]  __kmem_cache_alloc_node+0x53/0x250
[  170.564503][ T7206]  ? bpf_prog_alloc_no_stats+0xd7/0x430
[  170.570085][ T7206]  kmalloc_trace+0x2a/0xe0
[  170.574540][ T7206]  bpf_prog_alloc_no_stats+0xd7/0x430
[  170.579949][ T7206]  bpf_prog_alloc+0x3d/0x1a0
[  170.584575][ T7206]  __get_filter+0xf2/0x400
[  170.589044][ T7206]  sk_attach_filter+0x24/0x140
[  170.593843][ T7206]  sk_setsockopt+0x2226/0x2b20
[  170.598648][ T7206]  ? sockopt_capable+0x60/0x60
[  170.603451][ T7206]  ? aa_sk_perm+0x83c/0x970
[  170.607986][ T7206]  ? __fget_files+0x28/0x460
[  170.612615][ T7206]  ? aa_af_perm+0x330/0x330
[  170.617155][ T7206]  ? __fget_files+0x28/0x460
[  170.621812][ T7206]  ? aa_sock_opt_perm+0x74/0x100
[  170.626778][ T7206]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  170.632351][ T7206]  ? security_socket_setsockopt+0x7e/0xa0
[  170.638096][ T7206]  do_sock_setsockopt+0x11b/0x1a0
[  170.643153][ T7206]  __x64_sys_setsockopt+0x182/0x200
[  170.648385][ T7206]  do_syscall_64+0x55/0xb0
[  170.652828][ T7206]  ? clear_bhb_loop+0x40/0x90
[  170.657531][ T7206]  ? clear_bhb_loop+0x40/0x90
[  170.662238][ T7206]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  170.668161][ T7206] RIP: 0033:0x7f0d68b9e159
[  170.672609][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.692728][ T7206] RSP: 002b:00007f0d69ab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  170.701181][ T7206] RAX: ffffffffffffffda RBX: 00007f0d68e25fa0 RCX: 00007f0d68b9e159
[  170.709185][ T7206] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004
[  170.717186][ T7206] RBP: 00007f0d68c3503b R08: 0000000000000010 R09: 0000000000000000
[  170.725202][ T7206] R10: 0000200000fbe000 R11: 0000000000000246 R12: 0000000000000000
[  170.733208][ T7206] R13: 00007f0d68e26038 R14: 00007f0d68e25fa0 R15: 00007ffc1d0cbc98
[  170.741224][ T7206]  </TASK>
[  170.809421][ T7134] hsr_slave_0: entered promiscuous mode
[  170.827550][ T7134] hsr_slave_1: entered promiscuous mode
[  171.132689][ T7158] chnl_net:caif_netlink_parms(): no params data found
[  171.326339][ T5781] Bluetooth: hci3: command tx timeout
[  171.483526][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.491145][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.499119][ T7158] bridge_slave_0: entered allmulticast mode
[  171.508065][ T7158] bridge_slave_0: entered promiscuous mode
[  171.517878][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.525473][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.532751][ T7158] bridge_slave_1: entered allmulticast mode
[  171.541154][ T7158] bridge_slave_1: entered promiscuous mode
[  171.551999][ T7134] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  171.598170][ T7134] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  171.627694][ T7134] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  171.659396][ T7158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.682426][ T7158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.694563][ T7134] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  171.788022][ T7158] team0: Port device team_slave_0 added
[  171.843008][ T7158] team0: Port device team_slave_1 added
[  171.902022][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.925308][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.976970][ T7158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.016828][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.024586][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.058295][ T7158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.125499][ T5781] Bluetooth: hci1: command tx timeout
[  172.172411][ T7158] hsr_slave_0: entered promiscuous mode
[  172.180404][ T7158] hsr_slave_1: entered promiscuous mode
[  172.192580][ T7158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.201126][ T7158] Cannot create hsr debugfs directory
[  172.367754][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.421807][ T7134] 8021q: adding VLAN 0 to HW filter on device team0
[  172.499126][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.506431][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.576654][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.583894][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.766814][ T7158] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  172.783298][ T7158] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  172.806906][ T7158] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  172.879718][ T7158] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  172.924185][ T7255] capability: warning: `syz.2.372' uses deprecated v2 capabilities in a way that may be insecure
[  172.993046][ T7134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.289330][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.359247][ T7158] 8021q: adding VLAN 0 to HW filter on device team0
[  173.405537][ T5781] Bluetooth: hci3: command tx timeout
[  173.430764][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.438032][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.483274][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.490539][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.621508][ T7134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.081885][ T7287] mmap: syz.2.376 (7287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  174.198857][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.206065][ T5781] Bluetooth: hci1: command tx timeout
[  174.332510][ T7134] veth0_vlan: entered promiscuous mode
[  174.380045][ T7134] veth1_vlan: entered promiscuous mode
[  174.450753][ T7134] veth0_macvtap: entered promiscuous mode
[  174.490899][ T7134] veth1_macvtap: entered promiscuous mode
[  174.555627][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.574375][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.605664][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.625711][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.645813][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.665586][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.697343][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.721986][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.753672][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.773934][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.812927][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.847474][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.879927][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.914871][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.986128][ T7134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.025300][ T7134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.034105][ T7134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.085413][ T7134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.304835][ T7037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.328875][ T7037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.421713][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.467331][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.486713][ T5781] Bluetooth: hci3: command tx timeout
[  175.570171][ T7158] veth0_vlan: entered promiscuous mode
[  175.639760][ T7158] veth1_vlan: entered promiscuous mode
[  175.745587][ T7158] veth0_macvtap: entered promiscuous mode
[  175.783892][ T7158] veth1_macvtap: entered promiscuous mode
[  175.842190][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.864476][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.880816][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.915352][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.961641][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.988310][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.013684][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.031399][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.043471][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.071569][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.083503][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.109537][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.132688][ T7322] loop6: detected capacity change from 0 to 16
[  176.140456][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.186634][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.218473][ T7322] erofs: (device loop6): mounted with root inode @ nid 36.
[  176.235960][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.265679][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.267732][ T7322] syz.6.377: attempt to access beyond end of device
[  176.267732][ T7322] loop6: rw=0, sector=824, nr_sectors = 8 limit=16
[  176.301436][ T7322] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 19 of nid 36
[  176.308197][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.339100][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.443380][ T7158] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.485787][ T7158] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.494582][ T7158] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.538765][ T7158] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.882817][ T7034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.915960][ T7034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.988976][ T7037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.004090][ T7037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.504198][ T7356] tipc: Failed to remove unknown binding: 66,0,0/0:728992216/728992218
[  177.541662][ T7356] tipc: Failed to remove unknown binding: 66,0,0/0:728992216/728992217
[  177.708561][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.387'.
[  177.914439][ T7368] netlink: 'syz.6.390': attribute type 1 has an invalid length.
[  178.495447][ T5765] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  178.675668][ T5765] usb 3-1: Using ep0 maxpacket: 32
[  178.683449][ T5765] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  178.699068][ T5765] usb 3-1: config 0 has no interface number 0
[  178.713702][ T5765] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  178.734465][ T5765] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  178.761729][ T5765] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  178.778833][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.795364][ T5765] usb 3-1: Product: syz
[  178.805725][ T5765] usb 3-1: Manufacturer: syz
[  178.815665][ T5765] usb 3-1: SerialNumber: syz
[  178.828135][ T5765] usb 3-1: config 0 descriptor??
[  178.835087][ T7398] ref_ctr_offset mismatch. inode: 0xa4 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008
[  178.850795][ T5765] smsc95xx v2.0.0
[  178.864941][ T5765] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  178.886619][ T5765] smsc95xx: probe of 3-1:0.67 failed with error -22
[  179.630889][ T5818] usb 3-1: USB disconnect, device number 4
[  180.035039][ T7433] loop7: detected capacity change from 0 to 16
[  180.057345][ T7433] erofs: (device loop7): mounted with root inode @ nid 36.
[  180.074123][ T7433] syz.7.407: attempt to access beyond end of device
[  180.074123][ T7433] loop7: rw=0, sector=824, nr_sectors = 8 limit=16
[  180.098187][ T7433] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 19 of nid 36
[  182.051226][   T28] audit: type=1326 audit(1788987147.459:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.134972][   T28] audit: type=1326 audit(1788987147.459:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.182160][   T28] audit: type=1326 audit(1788987147.469:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.214570][   T28] audit: type=1326 audit(1788987147.469:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.306492][   T28] audit: type=1326 audit(1788987147.469:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.388439][   T28] audit: type=1326 audit(1788987147.469:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.474525][   T28] audit: type=1326 audit(1788987147.479:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.555571][   T28] audit: type=1326 audit(1788987147.479:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.580262][ T7506] loop2: detected capacity change from 0 to 2048
[  182.625559][ T7506] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  182.673522][   T28] audit: type=1326 audit(1788987147.489:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  182.713132][ T7506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.784028][   T28] audit: type=1326 audit(1788987147.489:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  183.231342][ T7523] loop2: detected capacity change from 0 to 16
[  183.258855][ T7523] erofs: (device loop2): mounted with root inode @ nid 36.
[  183.312336][ T7523] syz.2.431: attempt to access beyond end of device
[  183.312336][ T7523] loop2: rw=0, sector=824, nr_sectors = 8 limit=16
[  183.368570][ T7523] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 19 of nid 36
[  184.044117][ T7542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  184.051948][ T7542] IPv6: NLM_F_CREATE should be set when creating new route
[  184.059306][ T7542] IPv6: NLM_F_CREATE should be set when creating new route
[  184.066631][ T7542] IPv6: NLM_F_CREATE should be set when creating new route
[  184.895735][ T7561] Illegal XDP return value 4294967282 on prog  (id 58) dev syz_tun, expect packet loss!
[  185.914548][ T7589] fuse: Bad value for 'fd'
[  187.336562][   T28] kauditd_printk_skb: 99 callbacks suppressed
[  187.336577][   T28] audit: type=1326 audit(1788987152.749:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  187.415332][   T28] audit: type=1326 audit(1788987152.779:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  187.505557][   T28] audit: type=1326 audit(1788987152.789:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  187.627745][   T28] audit: type=1326 audit(1788987152.799:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  187.705488][   T28] audit: type=1326 audit(1788987152.799:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  187.773275][   T28] audit: type=1326 audit(1788987152.799:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  187.886116][   T28] audit: type=1326 audit(1788987152.809:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  188.024358][   T28] audit: type=1326 audit(1788987152.809:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  188.142096][   T28] audit: type=1326 audit(1788987152.809:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  188.230587][   T28] audit: type=1326 audit(1788987152.809:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.7.455" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe89f39e159 code=0x7ffc0000
[  189.506136][ T7694] ref_ctr increment failed for inode: 0xbe offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807ad91300
[  189.692260][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.701596][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.520498][ T7620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.606371][ T7620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.191120][ T7620] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.202184][ T7620] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.212639][ T7620] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.221854][ T7620] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.095010][ T7757] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  194.612114][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.618901][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.664711][   T28] kauditd_printk_skb: 44 callbacks suppressed
[  194.664727][   T28] audit: type=1326 audit(1788987160.069:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.6.488" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a7699e159 code=0x0
[  195.977843][    C0] hrtimer: interrupt took 1138500 ns
[  196.016142][ T7828] tipc: Started in network mode
[  196.027970][ T7828] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  196.046204][ T7828] tipc: Enabled bearer <eth:macvtap0>, priority 27
[  196.379843][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.503'.
[  196.394293][ T7832] IPVS: Scheduler module ip_vs_ not found
[  196.890571][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.507'.
[  196.948241][ T7853] 8021q: adding VLAN 0 to HW filter on device team1
[  197.178756][ T5830] tipc: Node number set to 9480874
[  197.652673][ T7864] tipc: Started in network mode
[  197.676818][ T7864] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  197.706890][ T7864] tipc: Enabled bearer <eth:macvtap0>, priority 27
[  197.796397][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.515'.
[  198.685594][ T5830] tipc: Node number set to 9480874
[  200.115019][ T7938] syz.6.534 uses obsolete (PF_INET,SOCK_PACKET)
[  200.138096][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'.
[  200.247942][ T7939] bond0: (slave bond_slave_1): Releasing backup interface
[  201.866863][   T28] audit: type=1326 audit(1788987167.269:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.2.538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7fc00000
[  202.755232][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  206.935446][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[  207.392928][ T8078] tipc: Started in network mode
[  207.411617][ T8078] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  208.471549][ T8078] tipc: Enabled bearer <eth:macvtap0>, priority 27
[  208.816493][ T5839] tipc: Node number set to 9480874
[  220.377574][ T8263] bond2: entered allmulticast mode
[  220.762269][ T8263] macvlan2: entered promiscuous mode
[  220.790353][ T8263] macvlan2: entered allmulticast mode
[  220.846464][ T8263] bond2: (slave macvlan2): Opening slave failed
[  224.797748][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.624'.
[  225.188306][ T8343] netlink: 'syz.2.626': attribute type 11 has an invalid length.
[  225.502320][ T8349] fuse: Bad value for 'fd'
[  226.583567][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  226.685901][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  226.746584][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  226.758943][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  226.773267][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  226.816080][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  226.855830][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  226.879671][ T8374] bond1: entered allmulticast mode
[  226.919128][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  226.969839][ T8379] macvlan2: entered promiscuous mode
[  227.011023][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  227.029496][ T8379] macvlan2: entered allmulticast mode
[  227.076347][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  227.111573][ T8379] bond1: (slave macvlan2): Opening slave failed
[  227.495260][    T0] NOHZ tick-stop error: local softirq work is pending, handler #286!!!
[  227.605214][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  228.601217][ T8402] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  230.232556][ T8431] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  230.366302][ T8431] CIFS: Attempting to mount //127.0.0.1/share
[  230.398788][ T8431] CIFS: VFS: Error connecting to socket. Aborting operation.
[  230.408607][ T8431] CIFS: VFS: cifs_mount failed w/return code = -111
[  231.767353][ T5839] IPVS: starting estimator thread 0...
[  231.865108][ T8461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.653'.
[  231.874467][ T8461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.653'.
[  231.885537][ T8462] IPVS: using max 16 ests per chain, 38400 per kthread
[  233.631335][ T7690] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  233.759577][ T7690] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  234.099048][ T7690] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  234.315573][ T8484] ceph: No mds server is up or the cluster is laggy
[  234.632235][   T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  237.174012][   T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  237.466605][   T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  237.875955][ T8550] ceph: No mds server is up or the cluster is laggy
[  237.977398][   T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  238.194253][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.679'.
[  240.151199][ T8621] overlayfs: failed to clone lowerpath
[  240.182005][ T8621] overlayfs: failed to clone lowerpath
[  242.514884][ T8662] fuse: Bad value for 'fd'
[  242.841352][ T8672] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  244.369265][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.7.717'.
[  244.954143][ T8733] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  245.990354][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'.
[  249.052594][ T8819] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  251.216151][ T8866] netlink: 'syz.7.748': attribute type 1 has an invalid length.
[  251.430805][ T8866] 8021q: adding VLAN 0 to HW filter on device bond1
[  251.487220][ T8869] 8021q: adding VLAN 0 to HW filter on device bond1
[  251.522323][ T8869] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  251.608504][ T8869] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  251.736199][ T8872] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  251.775911][ T8872] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  251.859205][ T8880] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  253.189482][ T8908] overlayfs: failed to clone lowerpath
[  253.215900][ T8908] overlayfs: failed to clone lowerpath
[  255.120756][ T8938] netlink: 14 bytes leftover after parsing attributes in process `syz.5.760'.
[  255.978394][ T8938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.051613][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  256.065352][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.349258][ T8938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.385117][ T8938] bond0 (unregistering): Released all slaves
[  256.419469][ T8959] netlink: 'syz.6.774': attribute type 1 has an invalid length.
[  256.664066][ T8959] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.806515][ T8960] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  256.877973][ T8962] bond2: entered allmulticast mode
[  256.903825][ T8962] syz_tun: entered allmulticast mode
[  258.684065][ T8998] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  258.728822][ T8998] batman_adv: batadv0: Adding interface: gretap1
[  258.755290][ T8998] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.839007][ T8998] batman_adv: batadv0: Interface activated: gretap1
[  259.093943][ T9003] netlink: 136 bytes leftover after parsing attributes in process `syz.2.790'.
[  259.763968][ T9014] netlink: 15143 bytes leftover after parsing attributes in process `syz.2.793'.
[  261.973793][ T5780] Bluetooth: hci0: hardware error 0x00
[  262.734505][ T9038] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[  262.942703][ T9038] 8021q: adding VLAN 0 to HW filter on device bond3
[  263.097054][ T9040] bond1: (slave syz_tun): Removing an active aggregator
[  263.110683][ T9040] bond1: (slave syz_tun): Releasing backup interface
[  263.137647][ T9040] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[  263.226883][ T9042] bond3: entered allmulticast mode
[  263.232105][ T9042] syz_tun: entered allmulticast mode
[  263.245536][ T5786] Bluetooth: hci2: command 0x0406 tx timeout
[  264.049468][ T5780] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  264.103169][ T5839] libceph: connect (1)[c::]:6789 error -101
[  264.126325][ T5839] libceph: mon0 (1)[c::]:6789 connect error
[  264.151649][ T5839] libceph: connect (1)[c::]:6789 error -101
[  264.159708][ T5839] libceph: mon0 (1)[c::]:6789 connect error
[  264.196648][ T7689] libceph: connect (1)[c::]:6789 error -101
[  264.217598][ T7689] libceph: mon0 (1)[c::]:6789 connect error
[  264.426997][ T5839] libceph: connect (1)[c::]:6789 error -101
[  264.434719][ T5839] libceph: mon0 (1)[c::]:6789 connect error
[  264.505870][ T7689] libceph: connect (1)[c::]:6789 error -101
[  264.522590][ T7689] libceph: mon0 (1)[c::]:6789 connect error
[  264.913275][ T9053] ceph: No mds server is up or the cluster is laggy
[  264.915771][ T9056] ceph: No mds server is up or the cluster is laggy
[  265.272577][  T969] IPVS: starting estimator thread 0...
[  265.388684][ T9072] IPVS: using max 17 ests per chain, 40800 per kthread
[  265.542009][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.814'.
[  265.662558][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.817'.
[  267.008911][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'.
[  268.812209][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.834'.
[  268.970729][ T9119] 8021q: adding VLAN 0 to HW filter on device bond3
[  268.985574][ T9121] macvlan2: entered promiscuous mode
[  268.992451][ T9121] macvlan2: entered allmulticast mode
[  269.000409][ T9121] bond3: entered promiscuous mode
[  269.006792][ T9121] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  269.015796][ T9121] bond3: left promiscuous mode
[  270.826600][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.849'.
[  272.854792][ T9170] IPVS: You probably need to specify IP address on multicast interface.
[  272.896159][ T9170] IPVS: Error connecting to the multicast addr
[  275.659085][ T9240] overlayfs: failed to clone upperpath
[  277.745194][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  277.855188][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  278.826664][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.894'.
[  280.278297][ T9325] netlink: 120 bytes leftover after parsing attributes in process `syz.7.905'.
[  282.070277][ T9362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  282.945834][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.923'.
[  283.092508][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.923'.
[  283.196003][ T9373] bond4 (unregistering): Released all slaves
[  284.155232][    T0] NOHZ tick-stop error: local softirq work is pending, handler #284!!!
[  284.214281][ T9404] netlink: 'syz.7.934': attribute type 2 has an invalid length.
[  284.222695][ T9404] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.934'.
[  285.383053][ T9424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.940'.
[  286.807437][ T9440] overlayfs: failed to clone upperpath
[  288.845623][ T5780] Bluetooth: hci1: command 0x0406 tx timeout
[  290.082298][ T9485] loop5: detected capacity change from 0 to 512
[  291.713843][ T9485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.470627][ T9485] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  293.857082][ T9519] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.961: iget: bad i_size value: 2533274857506816
[  293.969320][ T5780] Bluetooth: hci3: command 0x0406 tx timeout
[  294.374912][ T6601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.040579][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.983'.
[  296.928174][ T9542] IPVS: You probably need to specify IP address on multicast interface.
[  296.949354][ T9542] IPVS: Error connecting to the multicast addr
[  297.533891][ T9576] trusted_key: syz.7.993 sent an empty control message without MSG_MORE.
[  299.808433][ T9590] IPVS: You probably need to specify IP address on multicast interface.
[  299.823761][ T9590] IPVS: Error connecting to the multicast addr
[  300.341150][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1013'.
[  300.826610][ T9634] netlink: 'syz.6.1018': attribute type 1 has an invalid length.
[  300.891508][ T9634] 8021q: adding VLAN 0 to HW filter on device bond4
[  300.991938][ T9639] 8021q: adding VLAN 0 to HW filter on device bond4
[  301.003467][ T9639] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  301.016175][ T9639] bond4: (slave wireguard0): Error -95 calling set_mac_address
[  301.340279][ T9641] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  301.396866][ T9641] bond4: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  302.041971][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1026'.
[  302.781781][ T9675] overlayfs: failed to clone upperpath
[  302.798200][ T9675] overlayfs: failed to clone upperpath
[  303.348692][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1034'.
[  303.413026][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1034'.
[  304.178403][ T9689] netlink: 'syz.2.1035': attribute type 1 has an invalid length.
[  304.258094][ T9689] 8021q: adding VLAN 0 to HW filter on device bond4
[  304.425719][ T9692] 8021q: adding VLAN 0 to HW filter on device bond4
[  304.432883][ T9692] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  304.512863][ T9692] bond4: (slave wireguard0): Error -95 calling set_mac_address
[  304.644726][ T9689] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  304.673271][ T9689] bond4: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  308.713024][ T9749] overlayfs: failed to clone upperpath
[  310.113967][ T9762] netlink: 'syz.5.1051': attribute type 1 has an invalid length.
[  311.045884][ T9762] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.301344][ T9769] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.310775][ T9769] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  311.326053][ T9769] bond0: (slave wireguard0): Error -95 calling set_mac_address
[  311.566902][ T9776] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  311.662939][ T9776] bond0: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  311.716533][ T9784] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1071'.
[  311.756412][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1070'.
[  311.929965][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'.
[  312.032208][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1070'.
[  312.241466][ T9788] bond2 (unregistering): Released all slaves
[  312.968550][ T9799] overlayfs: failed to clone upperpath
[  313.312993][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'.
[  313.382015][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'.
[  313.832708][ T9810] sctp: [Deprecated]: syz.2.1080 (pid 9810) Use of int in max_burst socket option deprecated.
[  313.832708][ T9810] Use struct sctp_assoc_value instead
[  314.769197][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1085'.
[  314.965511][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'.
[  314.993870][ T9826] bond5 (unregistering): Released all slaves
[  315.270236][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1079'.
[  317.491493][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.501753][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  317.540014][ T9863] loop5: detected capacity change from 0 to 512
[  317.860374][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.868267][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.301570][ T9863] EXT4-fs (loop5): 1 truncate cleaned up
[  318.947413][ T9863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.103277][   T28] audit: type=1800 audit(1788987284.509:177): pid=9863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1099" name="file0" dev="loop5" ino=13 res=0 errno=0
[  319.252446][ T9863] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  319.459937][ T9863] EXT4-fs error (device loop5): ext4_free_branches:1043: inode #13: block 234881024: comm syz.5.1099: Read failure
[  319.526269][ T9851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.566659][ T9877] overlayfs: failed to clone upperpath
[  319.664128][ T9851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.329782][ T6601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.922319][ T9851] tipc: Resetting bearer <eth:macvtap0>
[  321.270952][ T9851] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.295251][ T9851] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.325438][ T9851] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.355626][ T9851] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.636512][ T9851] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  321.736913][ T9851] bond1: left allmulticast mode
[  321.756453][ T9851] bond2: left allmulticast mode
[  321.774336][ T9851] syz_tun: left allmulticast mode
[  321.780598][ T9851] batman_adv: batadv0: Interface deactivated: gretap1
[  322.021050][ T9898] syz_tun: entered allmulticast mode
[  322.043203][ T9898] dvmrp6: entered allmulticast mode
[  322.058671][ T9897] syz_tun: left allmulticast mode
[  322.758942][ T9916] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[  323.392759][ T9939] netlink: 'syz.2.1128': attribute type 11 has an invalid length.
[  323.405672][ T9938] netlink: 'syz.7.1127': attribute type 10 has an invalid length.
[  323.458554][ T9938] 8021q: adding VLAN 0 to HW filter on device team0
[  323.498036][ T9938] bond0: (slave team0): Enslaving as an active interface with an up link
[  326.140794][ T9980] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1144'.
[  326.338502][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1145'.
[  326.720526][ T9994] overlayfs: failed to clone upperpath
[  327.269482][T10002] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551615ÿÿ
[  327.298819][T10005] netlink: 'syz.2.1154': attribute type 1 has an invalid length.
[  327.396972][T10005] 8021q: adding VLAN 0 to HW filter on device bond5
[  327.598379][T10008] 8021q: adding VLAN 0 to HW filter on device bond5
[  327.644379][T10008] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  327.705453][T10008] bond5: (slave wireguard0): Error -95 calling set_mac_address
[  327.781773][T10005] bond5: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  329.720713][T10039] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1166'.
[  329.993591][T10047] netlink: 'syz.5.1168': attribute type 1 has an invalid length.
[  330.046680][T10047] 8021q: adding VLAN 0 to HW filter on device bond1
[  330.146946][T10051] 8021q: adding VLAN 0 to HW filter on device bond1
[  330.154167][T10051] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  330.214399][T10051] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  330.559296][T10047] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  331.358587][T10067] loop5: detected capacity change from 0 to 4096
[  331.439807][T10067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.148772][ T6601] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.918707][T10099] netlink: 'syz.7.1186': attribute type 1 has an invalid length.
[  332.985230][T10099] netlink: 63763 bytes leftover after parsing attributes in process `syz.7.1186'.
[  333.422102][T10104] loop5: detected capacity change from 0 to 1024
[  333.576697][T10104] Bluetooth: MGMT ver 1.22
[  334.033537][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1191'.
[  334.352018][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1191'.
[  334.417679][T10114] bond2 (unregistering): Released all slaves
[  335.590092][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1206'.
[  335.704404][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1206'.
[  335.718870][T10142] bond2 (unregistering): Released all slaves
[  336.372541][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1215'.
[  336.749806][T10163] netlink: 'syz.6.1216': attribute type 1 has an invalid length.
[  336.872017][T10163] 8021q: adding VLAN 0 to HW filter on device bond5
[  337.007406][T10164] 8021q: adding VLAN 0 to HW filter on device bond5
[  337.047723][T10164] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  337.077505][T10164] bond5: (slave wireguard0): Error -95 calling set_mac_address
[  337.615645][T10165] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  337.637291][T10165] bond5: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  337.980488][T10193] loop5: detected capacity change from 0 to 64
[  338.049357][T10193] hfs: get root inode failed
[  339.837936][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1242'.
[  340.135791][T10246] netlink: 'syz.7.1245': attribute type 11 has an invalid length.
[  340.161807][T10239] team0 (unregistering): Port device team_slave_0 removed
[  340.209479][T10239] team0 (unregistering): Port device team_slave_1 removed
[  340.252400][T10248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1246'.
[  340.740429][T10262] netlink: 'syz.6.1252': attribute type 1 has an invalid length.
[  340.950811][T10262] 8021q: adding VLAN 0 to HW filter on device bond6
[  341.104064][T10267] bond6: (slave gretap2): making interface the new active one
[  341.131645][T10267] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  341.657076][T10278] overlayfs: failed to clone upperpath
[  342.331049][T10288] overlayfs: failed to resolve './cgroup': -2
[  343.068128][T10294] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.076139][T10294] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.709389][T10302] ip_tables: iptables: counters copy to user failed while replacing table
[  344.083596][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.185728][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.341539][T10294] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.361172][T10294] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.388182][T10294] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.411254][T10294] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.646016][T10294] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  347.000948][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'.
[  347.187089][T10339] netlink: 'syz.2.1278': attribute type 11 has an invalid length.
[  348.581104][ T5819] IPVS: starting estimator thread 0...
[  348.675527][T10361] IPVS: using max 17 ests per chain, 40800 per kthread
[  349.314747][   T28] audit: type=1326 audit(1788987314.719:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.395904][   T28] audit: type=1326 audit(1788987314.719:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.439457][   T28] audit: type=1326 audit(1788987314.719:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.470786][   T28] audit: type=1326 audit(1788987314.729:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.505559][   T28] audit: type=1326 audit(1788987314.729:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.535305][   T28] audit: type=1326 audit(1788987314.729:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.564580][   T28] audit: type=1326 audit(1788987314.729:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.601523][   T28] audit: type=1326 audit(1788987314.729:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.639353][   T28] audit: type=1326 audit(1788987314.729:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  349.668283][   T28] audit: type=1326 audit(1788987314.729:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.2.1289" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d68b9e159 code=0x7ffc0000
[  350.512720][T10390] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  350.533913][T10390] bond2: left allmulticast mode
[  350.542150][T10390] bond3: left allmulticast mode
[  352.630536][T10460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1325'.
[  354.411516][T10495] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  355.917757][T10525] ceph: No mds server is up or the cluster is laggy
[  355.924797][ T5819] libceph: connect (1)[c::]:6789 error -101
[  355.954785][ T5819] libceph: mon0 (1)[c::]:6789 connect error
[  356.216053][T10531] overlayfs: failed to clone upperpath
[  356.456450][T10535] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1351'.
[  356.961038][T10549] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  356.995241][T10549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1356'.
[  357.405631][T10552] tipc: Failed to remove unknown binding: 66,0,0/9480874:3954189238/3954189240
[  357.444980][T10552] tipc: Failed to remove unknown binding: 66,0,0/9480874:3954189238/3954189239
[  357.473693][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  357.486341][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  357.495881][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  357.505733][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  357.513892][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  357.522056][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  357.990380][T10553] chnl_net:caif_netlink_parms(): no params data found
[  358.190447][T10568] netlink: 'syz.2.1362': attribute type 1 has an invalid length.
[  358.282896][T10568] 8021q: adding VLAN 0 to HW filter on device bond6
[  358.373208][T10571] bond6: (slave gretap2): making interface the new active one
[  358.383597][T10571] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  358.498383][T10553] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.508301][T10553] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.535726][T10553] bridge_slave_0: entered allmulticast mode
[  358.559611][T10553] bridge_slave_0: entered promiscuous mode
[  358.597765][T10553] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.618062][T10553] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.636904][T10553] bridge_slave_1: entered allmulticast mode
[  358.660297][T10553] bridge_slave_1: entered promiscuous mode
[  358.772320][T10553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.806114][T10553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.940953][T10553] team0: Port device team_slave_0 added
[  358.966607][T10553] team0: Port device team_slave_1 added
[  359.052590][T10553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.063483][T10553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.099358][T10553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.114338][T10553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.128057][T10553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.163603][T10553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.294187][T10553] hsr_slave_0: entered promiscuous mode
[  359.323263][T10553] hsr_slave_1: entered promiscuous mode
[  359.348312][T10553] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.360030][T10553] Cannot create hsr debugfs directory
[  359.648080][ T5781] Bluetooth: hci2: command tx timeout
[  360.056186][T10553] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  360.074213][T10553] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  360.092006][T10553] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  360.110038][T10553] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  360.348729][T10553] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.396702][T10553] 8021q: adding VLAN 0 to HW filter on device team0
[  360.430192][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.438371][ T7670] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.467079][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.474350][ T7678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.991588][T10553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.390100][T10553] veth0_vlan: entered promiscuous mode
[  361.410404][T10553] veth1_vlan: entered promiscuous mode
[  361.460223][T10553] veth0_macvtap: entered promiscuous mode
[  361.473816][T10553] veth1_macvtap: entered promiscuous mode
[  361.500611][T10553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.511700][T10553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.524527][T10553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.535330][T10553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.547417][T10553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.569579][T10553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.583950][T10553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.594033][T10553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.604985][T10553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.619496][T10553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.635460][T10553] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.644245][T10553] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.654921][T10553] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.666762][T10553] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.725836][ T5781] Bluetooth: hci2: command tx timeout
[  361.826864][ T7657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.848989][ T7657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.911787][ T7678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.921399][ T7678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.805738][ T5781] Bluetooth: hci2: command tx timeout
[  363.947050][T10651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  364.086410][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1386'.
[  364.250159][T10654] bond0: (slave team0): Releasing backup interface
[  364.294891][T10654] team0 (unregistering): Port device team_slave_0 removed
[  364.333232][T10654] team0 (unregistering): Port device team_slave_1 removed
[  365.888744][ T5781] Bluetooth: hci2: command tx timeout
[  367.140701][T10697] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.1402'.
[  367.167424][T10697] netlink: zone id is out of range
[  367.185745][T10697] netlink: zone id is out of range
[  367.207691][T10697] netlink: zone id is out of range
[  367.243147][T10697] netlink: zone id is out of range
[  367.280772][T10697] netlink: zone id is out of range
[  367.305445][T10697] netlink: zone id is out of range
[  367.335825][T10697] netlink: zone id is out of range
[  367.341671][T10697] netlink: zone id is out of range
[  367.385415][T10697] netlink: zone id is out of range
[  367.398970][T10697] netlink: zone id is out of range
[  369.202712][T10717] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  370.126167][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1412'.
[  375.092023][   T28] kauditd_printk_skb: 24 callbacks suppressed
[  375.092043][   T28] audit: type=1326 audit(1788987340.499:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.8.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dd679e159 code=0x0
[  376.001048][T10797] net_ratelimit: 115 callbacks suppressed
[  376.001067][T10797] ip_tables: iptables: counters copy to user failed while replacing table
[  376.368953][T10805] netlink: 'syz.2.1439': attribute type 1 has an invalid length.
[  376.458841][T10805] ifb1: entered promiscuous mode
[  376.635385][T10810] netlink: 'syz.2.1439': attribute type 1 has an invalid length.
[  377.927454][ T5436] veth0_vlan: left promiscuous mode
[  378.038090][ T5436] veth0_vlan: entered promiscuous mode
[  378.060702][T10832] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  378.933329][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  378.954782][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  379.415576][T10861] bond1: option arp_interval: invalid value (18446744073709551611)
[  379.485390][T10861] bond1: option arp_interval: allowed values 0 - 2147483647
[  379.548268][T10861] bond1 (unregistering): Released all slaves
[  380.133508][T10880] loop8: detected capacity change from 0 to 128
[  380.319066][T10880] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8)
[  380.333636][T10880] FAT-fs (loop8): Filesystem has been set read-only
[  384.993867][T10937] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.001766][T10937] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.235678][T10961] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1473'.
[  386.694486][T10937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.808453][T10937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.286162][T10937] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.308179][T10937] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.320517][T10937] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.332869][T10937] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.588258][T10952] netlink: 'syz.2.1469': attribute type 2 has an invalid length.
[  388.601684][T10964] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1474'.
[  390.231193][T11018] overlayfs: failed to clone upperpath
[  391.873108][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'.
[  392.631836][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1511'.
[  392.662232][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1511'.
[  393.190775][T11089] overlayfs: failed to clone upperpath
[  394.008187][T11099] netlink: 'syz.6.1516': attribute type 1 has an invalid length.
[  394.295332][   T28] audit: type=1326 audit(1788987359.679:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.2.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d68b9e159 code=0x0
[  394.322634][T11099] 8021q: adding VLAN 0 to HW filter on device bond7
[  394.618627][T11108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.633971][T11108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.646128][T11108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.666835][T11108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.752410][T11108] bond7: (slave geneve2): making interface the new active one
[  394.968917][T11108] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  395.482140][T11121] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1
[  395.545876][T11121] ref_ctr increment failed for inode: 0x766 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ad91c80
[  395.588031][T11120] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1
[  395.625840][T11120] ref_ctr increment failed for inode: 0x766 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ad91c80
[  401.520305][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1545'.
[  401.651346][T11205] 8021q: VLANs not supported on ip6gre0
[  404.337789][T11246] loop8: detected capacity change from 0 to 32768
[  404.380019][T11246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1558 (11246)
[  404.450024][T11246] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  404.478558][T11246] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  404.535523][T11246] BTRFS warning (device loop8): excessive commit interval 3581
[  404.555581][T11246] BTRFS info (device loop8): force zlib compression, level 3
[  404.585591][T11246] BTRFS info (device loop8): metadata ratio 107050
[  404.597142][T11246] BTRFS info (device loop8): turning on flush-on-commit
[  404.623632][T11246] BTRFS info (device loop8): max_inline at 4096
[  404.659581][T11246] BTRFS info (device loop8): using free space tree
[  404.799633][T11246] BTRFS info (device loop8): enabling ssd optimizations
[  405.146485][T10553] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  406.822808][   T28] audit: type=1326 audit(1788987372.219:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11325 comm="syz.8.1571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dd679e159 code=0x0
[  409.606227][T11383] syz.2.1584 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  410.899414][T11406] lo: entered promiscuous mode
[  410.948275][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1587'.
[  411.533091][T11423] loop8: detected capacity change from 0 to 1024
[  411.583815][T11406] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.621311][T11423] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  411.705465][T11423] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  411.818030][T11423] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  411.882465][T11423] EXT4-fs error (device loop8): ext4_ext_check_inode:532: inode #3: comm syz.8.1592: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  411.975800][T11423] EXT4-fs (loop8): no journal found
[  411.981769][T11423] EXT4-fs (loop8): can't get journal size
[  412.040884][T11423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  412.299188][T11404] lo: left promiscuous mode
[  412.408994][T10553] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.587978][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1602'.
[  413.882123][T11462] syzkaller1: entered promiscuous mode
[  413.915383][T11462] syzkaller1: entered allmulticast mode
[  414.694627][T11480] loop8: detected capacity change from 0 to 512
[  414.720597][T11480] EXT4-fs: Ignoring removed nobh option
[  414.791523][T11480] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  414.896453][T11480] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1609: invalid indirect mapped block 256 (level 2)
[  415.012510][T11480] EXT4-fs (loop8): 2 truncates cleaned up
[  415.027987][T11480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.604171][T10553] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.789067][T11494] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1613'.
[  415.825501][T11494] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1613'.
[  416.198346][T11500] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  522.765066][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  522.772148][    C1] rcu: 	0-...!: (1 GPs behind) idle=a444/1/0x4000000000000000 softirq=42690/42691 fqs=3
[  522.783590][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=56361, q=39 ncpus=2)
[  522.791277][    C1] Sending NMI from CPU 1 to CPUs 0:
[  522.796536][    C0] NMI backtrace for cpu 0
[  522.796549][    C0] CPU: 0 PID: 11512 Comm: syz.7.1610 Not tainted syzkaller #0
[  522.796566][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  522.796576][    C0] RIP: 0010:kasan_check_range+0x6/0x290
[  522.796606][    C0] Code: c6 48 89 c7 e8 6b b0 b0 08 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 <48> 85 f6 0f 84 b4 01 00 00 55 41 57 41 56 41 55 41 54 53 4c 8d 04
[  522.796620][    C0] RSP: 0018:ffffc900000078b8 EFLAGS: 00000046
[  522.796635][    C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81689ffa
[  522.796647][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911ef500
[  522.796657][    C0] RBP: ffffc90000007b08 R08: dffffc0000000000 R09: 0000000000000001
[  522.796669][    C0] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: 0000000000044000
[  522.796681][    C0] R13: ffff88802b43bc00 R14: 0000000000000000 R15: 0000000000000000
[  522.796692][    C0] FS:  00007fe8a03376c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  522.796706][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  522.796718][    C0] CR2: 00007fe8a0336ff8 CR3: 0000000066437000 CR4: 00000000003506f0
[  522.796733][    C0] Call Trace:
[  522.796741][    C0]  <IRQ>
[  522.796747][    C0]  __lock_acquire+0x56a/0x7d80
[  522.796794][    C0]  ? verify_lock_unused+0x140/0x140
[  522.796816][    C0]  ? verify_lock_unused+0x140/0x140
[  522.796840][    C0]  ? debug_objects_fill_pool+0x8b/0x790
[  522.796866][    C0]  lock_acquire+0x19e/0x420
[  522.796884][    C0]  ? debug_object_deactivate+0x67/0x380
[  522.796906][    C0]  ? debug_object_activate+0x309/0x500
[  522.796929][    C0]  ? __rwlock_init+0x150/0x150
[  522.796950][    C0]  ? read_lock_is_recursive+0x20/0x20
[  522.796972][    C0]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  522.796991][    C0]  _raw_spin_lock_irqsave+0xb4/0x100
[  522.797007][    C0]  ? debug_object_deactivate+0x67/0x380
[  522.797028][    C0]  ? _raw_spin_lock+0x40/0x40
[  522.797053][    C0]  debug_object_deactivate+0x67/0x380
[  522.797078][    C0]  __hrtimer_run_queues+0x2cc/0xc10
[  522.797097][    C0]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  522.797118][    C0]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  522.797147][    C0]  ? hrtimer_interrupt+0x980/0x980
[  522.797165][    C0]  ? read_tsc+0x9/0x20
[  522.797183][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  522.797208][    C0]  hrtimer_interrupt+0x39d/0x980
[  522.797236][    C0]  __sysvec_apic_timer_interrupt+0xfb/0x3b0
[  522.797259][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  522.797285][    C0]  </IRQ>
[  522.797289][    C0]  <TASK>
[  522.797294][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  522.797316][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120
[  522.797333][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> eb 77 c3 f6 65 8b 05 0c 36 6a 75 85 c0 74 3c 48 c7 04 24 0e 36
[  522.797347][    C0] RSP: 0018:ffffc9000d067c80 EFLAGS: 00000206
[  522.797360][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: b303a75e7bba9600
[  522.797372][    C0] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: 0000000000000001
[  522.797384][    C0] RBP: ffffc9000d067d10 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5
[  522.797396][    C0] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: dffffc0000000000
[  522.797408][    C0] R13: dffffc0000000000 R14: ffffffff8d14b900 R15: 1ffff92001a0cf90
[  522.797429][    C0]  ? _raw_spin_unlock+0x40/0x40
[  522.797445][    C0]  ? __asan_memcpy+0x40/0x70
[  522.797470][    C0]  do_settimeofday64+0x591/0x750
[  522.797493][    C0]  ? ctnetlink_del_expect+0x41/0x680
[  522.797512][    C0]  ? __x64_sys_clock_settime+0x25e/0x2a0
[  522.797529][    C0]  ? get_device_system_crosststamp+0x910/0x910
[  522.797553][    C0]  ? ctnetlink_del_expect+0x41/0x680
[  522.797572][    C0]  ? security_settime64+0x7b/0xa0
[  522.797592][    C0]  ? do_sys_settimeofday64+0x163/0x250
[  522.797615][    C0]  __x64_sys_clock_settime+0x25e/0x2a0
[  522.797633][    C0]  ? lock_chain_count+0x20/0x20
[  522.797651][    C0]  ? exit_itimers+0x500/0x500
[  522.797668][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  522.797693][    C0]  do_syscall_64+0x55/0xb0
[  522.797711][    C0]  ? clear_bhb_loop+0x40/0x90
[  522.797731][    C0]  ? clear_bhb_loop+0x40/0x90
[  522.797751][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  522.797771][    C0] RIP: 0033:0x7fe89f39e159
[  522.797786][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  522.797799][    C0] RSP: 002b:00007fe8a0337028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
[  522.797815][    C0] RAX: ffffffffffffffda RBX: 00007fe89f626090 RCX: 00007fe89f39e159
[  522.797827][    C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000
[  522.797837][    C0] RBP: 00007fe89f43503b R08: 0000000000000000 R09: 0000000000000000
[  522.797847][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  522.797857][    C0] R13: 00007fe89f626128 R14: 00007fe89f626090 R15: 00007ffd5174f1a8
[  522.797876][    C0]  </TASK>
[  522.798529][    C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g56361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  523.301740][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  523.311737][    C1] rcu: RCU grace-period kthread stack dump:
[  523.317651][    C1] task:rcu_preempt     state:R  running task     stack:26664 pid:17    ppid:2      flags:0x00004000
[  523.328471][    C1] Call Trace:
[  523.331784][    C1]  <TASK>
[  523.334759][    C1]  __schedule+0x15ae/0x4660
[  523.339317][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  523.344387][    C1]  ? lock_chain_count+0x20/0x20
[  523.349287][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  523.354535][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  523.360466][    C1]  ? asan.module_dtor+0x20/0x20
[  523.365368][    C1]  ? rcu_is_watching+0x15/0xb0
[  523.370196][    C1]  schedule+0xbd/0x170
[  523.374312][    C1]  schedule_timeout+0x188/0x2d0
[  523.379199][    C1]  ? console_conditional_schedule+0x40/0x40
[  523.385127][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  523.391059][    C1]  ? update_process_times+0x1b0/0x1b0
[  523.396480][    C1]  ? prepare_to_swait_event+0x344/0x360
[  523.402084][    C1]  rcu_gp_fqs_loop+0x30d/0x1590
[  523.406985][    C1]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  523.413176][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  523.418240][    C1]  ? rcu_gp_init+0x1530/0x1530
[  523.423036][    C1]  ? rcu_gp_cleanup+0xade/0xc30
[  523.427926][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  523.433156][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  523.438406][    C1]  rcu_gp_kthread+0x9d/0x3b0
[  523.443038][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  523.448187][    C1]  ? __kthread_parkme+0x71/0x1c0
[  523.453162][    C1]  ? __kthread_parkme+0x15b/0x1c0
[  523.458226][    C1]  kthread+0x2fa/0x390
[  523.462331][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  523.467478][    C1]  ? kthread_blkcg+0xd0/0xd0
[  523.472113][    C1]  ret_from_fork+0x48/0x80
[  523.476576][    C1]  ? kthread_blkcg+0xd0/0xd0
[  523.481228][    C1]  ret_from_fork_asm+0x11/0x20
[  523.486051][    C1]  </TASK>
[  523.489125][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  523.495491][    C1] CPU: 1 PID: 7657 Comm: kworker/u4:43 Not tainted syzkaller #0
[  523.503171][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  523.513273][    C1] Workqueue: events_unbound toggle_allocation_gate
[  523.519836][    C1] RIP: 0010:smp_call_function_many_cond+0xd85/0x1190
[  523.526555][    C1] Code: 45 8b 34 24 44 89 f6 83 e6 01 31 ff e8 14 01 0b 00 41 83 e6 01 49 be 00 00 00 00 00 fc ff df 75 07 e8 4f fd 0a 00 eb 38 f3 90 <42> 0f b6 04 33 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 33 fd
[  523.546197][    C1] RSP: 0018:ffffc900050df780 EFLAGS: 00000293
[  523.552326][    C1] RAX: ffffffff817c853d RBX: 1ffff110171c87a5 RCX: ffff88807e660000
[  523.560339][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  523.568346][    C1] RBP: ffffc900050df900 R08: ffffffff911ef507 R09: 1ffffffff223dea0
[  523.576356][    C1] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: ffff8880b8e43d28
[  523.584361][    C1] R13: ffff8880b8f3d380 R14: dffffc0000000000 R15: 0000000000000000
[  523.592373][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  523.601335][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  523.607958][    C1] CR2: 00007f0d68beb840 CR3: 000000000cf32000 CR4: 00000000003506e0
[  523.615966][    C1] Call Trace:
[  523.619328][    C1]  <TASK>
[  523.622328][    C1]  ? smp_call_function_many+0x40/0x40
[  523.627749][    C1]  ? text_poke+0xc0/0xc0
[  523.632231][    C1]  ? __mutex_trylock_common+0x160/0x270
[  523.637836][    C1]  ? trace_raw_output_contention_end+0xd0/0xd0
[  523.644043][    C1]  ? text_poke_sync+0x30/0x30
[  523.648763][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  523.653930][    C1]  ? kmem_cache_alloc_bulk+0x12a/0x5a0
[  523.659445][    C1]  text_poke_bp_batch+0x31e/0x980
[  523.664519][    C1]  ? text_poke_loc_init+0x7c0/0x7c0
[  523.669757][    C1]  ? mutex_lock_nested+0x20/0x20
[  523.674737][    C1]  ? text_poke_queue+0x134/0x190
[  523.679716][    C1]  ? arch_jump_label_transform_queue+0x93/0x100
[  523.686050][    C1]  ? __jump_label_update+0x39a/0x3c0
[  523.691399][    C1]  text_poke_finish+0x30/0x50
[  523.696126][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  523.702163][    C1]  static_key_enable_cpuslocked+0x123/0x240
[  523.708111][    C1]  static_key_enable+0x1a/0x20
[  523.712926][    C1]  ? process_scheduled_works+0x975/0x1600
[  523.718712][    C1]  toggle_allocation_gate+0xa8/0x260
[  523.724040][    C1]  ? show_object+0x70/0x70
[  523.728492][    C1]  ? read_lock_is_recursive+0x20/0x20
[  523.733911][    C1]  ? process_scheduled_works+0x975/0x1600
[  523.739680][    C1]  ? process_scheduled_works+0x975/0x1600
[  523.745464][    C1]  process_scheduled_works+0xa60/0x1600
[  523.751106][    C1]  ? worker_attach_to_pool+0x370/0x370
[  523.756630][    C1]  ? assign_work+0x3cc/0x5d0
[  523.761281][    C1]  worker_thread+0xa5e/0xfe0
[  523.765941][    C1]  kthread+0x2fa/0x390
[  523.770042][    C1]  ? pr_cont_work+0x550/0x550
[  523.774770][    C1]  ? kthread_blkcg+0xd0/0xd0
[  523.779404][    C1]  ret_from_fork+0x48/0x80
[  523.783858][    C1]  ? kthread_blkcg+0xd0/0xd0
[  523.788484][    C1]  ret_from_fork_asm+0x11/0x20
[  523.793302][    C1]  </TASK>