last executing test programs:

4m30.225572772s ago: executing program 0 (id=9):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000)
accept4(r1, 0x0, 0x0, 0x800)

4m29.446874491s ago: executing program 0 (id=12):
r0 = fanotify_init(0xf00, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020)

4m29.208685686s ago: executing program 0 (id=13):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x3}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000300)={0x0, 0x0, {0x1, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x5, 0x5, 0x40, 0x0, 0xf})

4m28.934611404s ago: executing program 0 (id=14):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x22042, 0x3db)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)

4m27.86354398s ago: executing program 0 (id=20):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x82316000)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="8454ba3c9aeca9e53d", 0x9}], 0x1, 0x0, 0x0, 0x20004800}, 0x4800)

4m26.412452695s ago: executing program 0 (id=25):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m25.734792322s ago: executing program 32 (id=25):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m21.69898302s ago: executing program 3 (id=870):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r1)

2m21.509586895s ago: executing program 3 (id=874):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0x1b4, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0)

2m20.520750189s ago: executing program 3 (id=881):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24048080)

2m20.404546902s ago: executing program 3 (id=882):
r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040)

2m20.384338122s ago: executing program 3 (id=883):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='.\x00', 0x12158b9, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES64, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRESHEX, @ANYBLOB="08128bfe888c9ef9da456bbd1d25ffa5b80d211bfa8ebb7c314fb394d577718ab6a77d04cca1ace93fbdf267a685b65ee7892006928f1fc82665921211bbd80e4cb45a8fce86ae7609", @ANYRES32, @ANYRES64, @ANYRESHEX], 0x5, 0x0, &(0x7f0000000180))
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x50425, 0x0)

2m20.265021535s ago: executing program 3 (id=884):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
setns(0xc9, 0x0)
socket(0x8, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2m4.932982969s ago: executing program 33 (id=884):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
setns(0xc9, 0x0)
socket(0x8, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1m8.728618182s ago: executing program 2 (id=1411):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000082b2e7de16218b5a1bc6a92cdbea0000000000000000000000000000000000e8"], 0x90)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0))

1m7.789990985s ago: executing program 2 (id=1423):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x5000, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1m7.391928325s ago: executing program 2 (id=1425):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
fcntl$notify(r0, 0x402, 0x8000003d)
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

1m7.16458013s ago: executing program 2 (id=1427):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x24000, 0x0)

1m7.076076402s ago: executing program 2 (id=1429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=@gettaction={0x3c, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}]}, 0x3c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
setregid(0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x14, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x5)

1m6.740517021s ago: executing program 2 (id=1432):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0x3b, 0x0, 0xee01}, {0x7ffffffffffffffc, 0x2, 0x80000f, 0x2000000000000, 0x7fffffff, 0xfffffffffffffdfd, 0x50, 0x3}, {0x5, 0x0, 0x4, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x48881)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000"], 0xb8}}, 0x20004000)

1m6.409834139s ago: executing program 34 (id=1432):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x40, 0x20, 0x3b, 0x0, 0xee01}, {0x7ffffffffffffffc, 0x2, 0x80000f, 0x2000000000000, 0x7fffffff, 0xfffffffffffffdfd, 0x50, 0x3}, {0x5, 0x0, 0x4, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x48881)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000"], 0xb8}}, 0x20004000)

4.284905846s ago: executing program 6 (id=1882):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000)
readv(r0, &(0x7f00000006c0)=[{&(0x7f00000014c0)=""/4105, 0x1009}], 0x1)

4.217681068s ago: executing program 5 (id=1883):
socket$igmp6(0xa, 0x3, 0x2)
semget$private(0x0, 0x6, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x4, 0x0, 0x1800}], 0x1)
io_setup(0xea, 0x0)

4.124488809s ago: executing program 6 (id=1884):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x452, &(0x7f0000000600)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x10, @desc1})
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x10, @desc1})

4.0851926s ago: executing program 5 (id=1885):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f00000001c0)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nojournal_checksum}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x1000}}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$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")
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x8, 0x18, 0x1001, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2800}]}}}}}}}}, 0x0)

3.953886223s ago: executing program 6 (id=1886):
r0 = socket$inet(0x2, 0x5, 0x0)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

3.7078588s ago: executing program 6 (id=1887):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

3.274749171s ago: executing program 6 (id=1891):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0)
mlockall(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
write$P9_RREAD(r0, &(0x7f0000002180)=ANY=[], 0x2f)

3.121139054s ago: executing program 4 (id=1893):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}}, 0x20}}, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

3.038498456s ago: executing program 5 (id=1895):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4})

2.962199188s ago: executing program 4 (id=1896):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
syz_clone3(&(0x7f0000000540)={0x100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2.822634331s ago: executing program 5 (id=1897):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x0, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x7fc, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
statfs(&(0x7f0000000680)='./file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f00000020c0)="03a22d23cc46b5d35d9d123fa21ae52d727400e9fe390a159493e24bcdbe7515008e2e453169c348b08b788685d6839b7ea717b5473954cd4ed051b346d03fd2b7d2bf018e4d7d250daef7b38bb042761188419b919e883a0a3dd3b538c9c2b60f1609ec8c196830ed0936ee4973a9c8bdee59e022eaa430ef99b19f96784a131a5ef27409e4f282a82f9f1fcaf84a736cde74b6549517fa9c8a4269e9dd80f1e024361ed57295f7f7884bd5cd0afc025852cee7742e7770c6c1a6622782c37ae8e86733b32fd32357f7b52664bb057b731e66773a02b9f8f281fdb023e07886c2497cefadf8d54399a4e13c717556380bf27c55b8b53590ca7408b4c2a41f4c385cc2c0e14ad42fc84bdd6ef63b74ffa418dbe33f28328953da921a9ea410218dcc6444f16844679f76ec327115bf72ee5d7a294b52dbe6a95f9b366a3882e4f81268f7186766a2c388eb92e1d52c0dc929601529ef4d9fc6a8f455a7981c1db4c1456f81661cd015ab6c5847a8a68d9b545292a5059f1e7608bf34d2cd76ed89b8689ceabeae5332977ef6f6aafa8f27ce7c8da0a181e8f1ae6f116e3c92524ffa2733270cb6161604112220fdedc56e07689e0a042a278a0c0656172691c5055ad95ec962f1907537cdb5608b67ef296f4994a3fd2eb3a83c84b4c6552448ebd7eb5d717baf5914f42f96bb4626ffe47e549ea5f822d846c363dbcd09767f1e37c3265ef7c377d03b3803909ff9600e02191d2ff69ef3a88509a4890198a130dda64a689f26e090121505f0efcb5659469deec157f9901d883478aeaff424ab57c18c60d1907d9b86c391ffd01e73b2eddff8c4b5d8875e18a10c7c13db2fb0f64d2c5cdfc2ab3dd9e796708dc58e92b4aa44a88c7cb164f8f63a16bdbea71cca9983fb694d50a9ef8f440a5669f595a06eb0d53f8cfd24844bc5c7357cb261e6d00ada1dc68e97e862fac1b0b2a4db9096b8d1b046c053eaba49ece3b3fcdc77f3f5b773341730c0fa4fc9c0ee4fb35e3bfc486d92e12927d7642daa9e824e1ce35379967fd6e3475b4fad10c891265f8e40f288754ce3565e19743b3806241a9c29113bf01961929931e6c90cced2ed1f3855d5688a39779d5f85531ae1487536cc4d021af5eb5dac6e5f8e7c0cbf9754e14d219719628dc338e568768da0d6354be7969a9335fec4a5ed05e7ff1728ad7a4295625af1a33a85351e1d56cf74adc04399e5a0d23c869848f01280488bd98d558e691686cff3863a80ae535af6f99cadedf41b28502a674fd630ac0597f3e4d6d650f7af4426f97c8d3a6107fe9887173be14f850f162d9bf34346dcc2fcf9fa27bd8d378b3e0a92ddce67652000181fed815b6bbf4202f293704f502e0999fa5691ab1ff0f5cd1d40ad77071cfa26baf7c1c578a81dcd0e2839c650cbaa84f4fa7f71855259c98b3f63178b4d92b64ca89f8c50f5797e166100a60d8db9a62d3b637b2667e8b057778f1129ac4be99b4665ddc2062cfdebed434451920ad9ca7bb6c2326f1272c384d668e3abf4c65cfd7bac0d92247e7f0c685a0bf574da44096fe15798da92af64850637da4f0b71060d339529a7ca252f7f2b59e892ddb6e18c8d26dce01099e091435deed6422c7c6ff9289bd5e37605d60899f8e5bbf3a67e11a45cc8d91744fadc04c72354b66653eb7d73d525ca9b00ec4ee6f65d3cf0c34068261b92407623f33c2aef59d9bdd3fa661f22ae97586c601b1065a8a59b9fe55462fa59bfb03a8d19eab2050247a63b9aaf3400238636431876cdd06546f4e549c36de4038bdb9bad20d684a1bb89165ae84d1a7a3de43ea7220664679269f2770b3f6561ca5edc1e0182701a6252933c21b7b27045c6437065a894572d278f04996b5aa78a6f926135e684704a5299098ebfbf828b15fcc872ebe74ed2495e026cab99bab7138c75a71e86163523d073f0c9c05cbb3358f35613a4e1d99047aa33892c1e4011c7a08fb5dfe0d0d777ebd24b409e15ec51dab1d02363c495d187ecd4bb4cec9277decf44cc518e39b3106801b6deff431104b24165ea19c1458fb8f90b43e7f2d061fca639f62191967ceebe638352f66b7f16b745e743d359ca5aa55c2f45acc75715ad129599b7c7367eca492fef5d3f240dcf88dc523f5680c0a9b18d5de73d41b1fde40b47957af45ff009d846d1b75da91ad0ac5f49c0a299f2dff848a44a5fa83a2552e8eed4b2ba0d31f9d21aaf0b279a7cc7ab0d728332eed4f31ebdce606b8b628b18f3a03821667982e150bf5d0bb9da7eefbcd8ec62574affe6a3a14a5a293790ee5e99547bebc2fbbb5d21192e4e4cc179b049375ca02038ebcd5c043f40aeeb47b7534dd63174196184625aab69805b969209e7fe440ec4757ed0fccf772d21de70a364ac6a53c7b4479e6c53aa89d6c070914bebfbb11b64057bec54beb36cf74c576e36831f3ac2124bb8f3d95d1a83aeb7725dff58441496545a5558e4c1573dfcf59f3e1c62054d46c03cd0a1b813ab5b23ff57e18d29cc6206486186ef303dbdca56e5734d8e4a3624370f39d5cf87fda110f23180fb3a0ee14d02f48e7f59afdfc4478a3865a8c05bc450e0c0f1ce4236ad13cce233603399bd2d9dc46ee7a721b832115b2961d5442d3bf1a980fe3c64a60569055e7cfde0338f5b96080616c0397dd288e4244bc350bf90caf9e1d6a493e14d8c59987b229c9f68af140ded6aef0e1165fe2e3dc2add397dc12d7bbecb831d8fe88f3e697402fd9caad2f9c97a6bdc79ada714643e7b6c6ff6a3d73100f45250adb40bd458bd9c0bef991e48115ab576c4ebcf9d2fff89f8cfc3ef78af763a15f4b8ab3da6ed3ba2ef1fa9a89be9d9d6e316671062b79bca85729c4e8c95a8a09f57d2b1504092230f2c7bcc425b636e0d13bd11447ae4b9fb075cd76c361295a3f5eac32cb70065a666504ec5f7475837667ba259992ea3762d9230a852076cfe42dffd608d6e67978b804c101f642bc40738440694509ef04c56768cb6ac06f4367a287421247383ffbf39c55afddb0d615daa7fa033cbadfc8a8afb319761a2d2e83f3fe751179b9cd9490b2c5da1fa609a3a3bd186614bc86911f58c4023023cd8ea94d105fb0cfb30fdc5232b4ba4f4850f1501aaec986851cffeff1bdad3e7bbca16c1f46b45e0391eefbd140e068fc5aeb93d89a3a6f42c9402235e3423aabc03812ade3e7444f8ccebb6c7c03e3ade45f44ef2e50c0fbe298cecc6112ec0162407e589a9b19fa8d70531c223e5093e97ec08ee0e3a08312a7bfd6d19be54c2825d2fa1a43ec07e303fae29cec6d8a179f0c288b89091dd861ebb8b88a1acbc2107d7d5341755fcec348a1837c1d2bed3ca6aa8ffa25d3dc0419e2846c88a279cda1ef35392dc18fbd4e3eb74eba798bda967be716c03d9c048e862fd9ebe5f728a9ef92bc148fa86df73d51dbc3ee894744de360248fb0441a37ea80e7fdaa260d05addd4fb64a849516a1f2b91f912bce53eb9e0ae0c17b5e2bc3712374c288381abb1b6d09d46557dc179a1d2893f0c60fde93f9634a825cf485e9a78e41ef68bfc87af475cadb84f349be271776d6d0ca989f6beff3c45ff946b05f6ca45248e1eb9dc805d92885695673b84324449f6445704d98c0a9cb67927fd7f0dd97458804cd9748505275316431f57df1f271e72871781e492db669c41e87621658673c6567d84a3a696fe8926e9f08bd1ed8a3a26ab6a3a47971ed2ab78f94940f246c9da82c1e19802ba50c255a85ab7c17bed8ee5aefa38521f7799f7ad66ac564a9dd64d7bc52afc78040aa641a50a91ba9427f49538992d8e6e0d3608c3c4921e2a58aebb4dbd0537e53be881041a0ba6da4ae19a62cc74b412da6292348054ce2c77f8dba2a86c64c06d0e2811f32387bd66917f794cf96ef3dba7d0557c3d817177a20d2ac45aeaaa6705a31b87dc0ff2104436d87b057c5264beaf0021bb7d6c5959a9cddc8f78b34eba4e47bb953f3de840629c5c81791343a6b740d3b1683df9b6086a7a066ef7598ff9d9f96d4df3bbbc1c3dc6275d37597dcb181832d50259cb670eb24d48e39f25955b80a975a1171778663b74635f9c12eb52cb4f4524d63fa5f7ab9bb44010fb0ce3c8008027ac7b05d48957d98beba8a2d07f8abc95307bed92fd3235bb630782c405b97fd626e06a532616b4318e247103b6880f0ed59c5363fbe2cf11ea2a62f6ff6b3cad257d829751d6e8bb52c48bfad1bcfbdb1377a329201bb26c6094dc1e0e17d0b543383577a637f2949a59f3203a9d1319797a2028e64436c0cf9f955a9dc01bb874bf9e116b68d992b8e7e0467c5836edc60ba8de22cd709c7df6b7c1bc06fa374d0865c182be4cafc6850777cb3d41f1f4b8dea8f1d943f3b5152ff64c34ae527c8feab18f4a4ecd91d27418d08569d4a20218c9f6165bf919cbf5398625db5ff817cba353b2e2b3e996efdb7f0ec82f7e97740bef920aca9b2045309cc2949d29afccb0946114dc3e8f09e5582081cd0021000afbdc6e1cab4387c2f79dfc43acb25f7f6d64ce77a3da28e74a7980d654aa8311e9259fda1b7faf42f140c235b93fd69bfb19b47a89e473a3e84634172fe65f1a9a0b26aa11fa1e42bc4caa8ac1c172db7c3f924c630dfa897459b4a602bffd60731f3bfc3adbfffdb1f4313a0e0fb2ba5574b244f7d8625aecbbeb74672f0c5b17a24d157b39ebfb52233281ce616e7552d7df4aff102a38168a33713029ab0e2de77fb9beee97fb9b52fba78273312ba260cd1f9a866aac33cea526f58ab9af0c7af5b6d335edfbf4e0777919d8db94cf7368bfb8c9cb17f4049235b8a2e5a732cb66316e38deab71bf4bb070e034d18d68a64d70526119e105ff8e53321947b602586e6c38690352a5133d891d5ec7325913c89a775ba0f4cd9f560f13c012cdb6486e9d3935a891bf1a97edcd11bf864c853bed06d17b92376598755f378137b05ac57696c83ca4696de09235bae87273971253b3ca9ecd78e2da05ae53700eb2fbf653e5d20042f430db866d1323762850ca20abdfb586c00306d66173ae9d25869c6e59ce62c5296911f1e9c75e32ff5ea0da0734bdb74eff45f9728a8e90054340dedb2e3950e63f76aa65a15245207b1913b20ed298ae6c7522a39b186fd9219cbe30e0076d4f8719e5949c2517e60dad9db37c6a532bcd3e85c1b7fe61400fe5b56f8b871dee3bdf3e1d6367667e7b2cb675afa9e8b2b03f684e8826abd05c5c62a048ae4d90577c1e3ee4a99204d0ea40e0503a89bc7ab540a1e755dd8e522d9390b0e2c5d02c986ddbb613c5af6a31048d14b5b659ee982f62d800519117205c33366e3d26d58e48410fcbe34b8c9955807b205c25366e019340b6c5e1904355db75c23cc9bc8e8c652ec1d4dc299fd07bcd1c79c2ca84850a7ffc4915036b49d0eed0f549f6bd46adfd6fc851a01081e2fcb7a8f94098f85104616a59aa6f9af94af00962d8c1076b4e07ce2351a64ed864a392048d4235a7c51571811cb5f512b0c0c6cae87b84d45df18d211d1875208acdc359c3ee49f2efb4c765fc89e789aecf8e86ac9c9ff3370ad5418a0ef6e0a8a11151606b08e92b914fe6383a1a4e714afce45a32b39a792b8678eff7e2cd4c7c7df3b64d07d8edf12487bba3202edb441a0036938e1b36b6c8454e0af65ea7a4e65706e43b5383e9df2be0d869e2388574020a5e7963346669f7de8873bd4c18733db528c16188c6ce3bbaf9d1be84cec67063bf8c605a7210d8aa2abab17b6a8fdb1fcca24c78fb781c4bc6d805235fdc945ab85197ca0549ce51f0721b4b80085ae16c1c7e2e341f221716a6491ea02016dad3ceb23a77d4026bfd2365971769ec3cde6f5bdb5cb9ca19a58c20d9a797c2df14b048cb3c3dc14b3d61d4c73681cad0beddf883fb1713be8c7243824ff62c6ab5d8105022b32505d6901c47661d8ecca50e2982c70f198169ea2419f88851c70ad1aa3c71b1caff4bec292009f969597cd54fb3e904a715ae27c2d5b9cb040d9ce1a3fd05d7313559579d992f70e73ebb55451a98f7d72b047a82e6c592223644029ebbe9675b57974e198c2138244273ad0189df36c5534128bb6b9aa9cbbad367a60b1acb9f26fad921f80d8a4026a36173b5380062063ebb6b93403abc748da759603daae24e4f53edbbdab8ca2d8a1a2a971b9661eead24a98989a7dde92aae2c4a1180acbc6c9721697bc65685dc670e69ff596445c1d89928d3e0257bc9439d1db039e269e921593d526a6147651e2f451451402d950e4fa5bd7f7787176cda674b4db723406e6efb2b4937c46207dd71bb7b5e95a0cfdb0c51c8f54fd3115c3151ea61c0cf424fc7acfd1594fdb197bfadf2ce80f45d9ce9e7d3e1e4de513341400b21bf8aceb29098128ff3568ed157c56ad3bb1ce3056c27b61c83deaf8c4ff0d981e621e42223f816f38d3f2e2e300acfa09572e6bf6388059357f60e272c105826bc360e7538e98e6018c1ab559730a286424728b566130dc0d4b4bf972a7e7e4e6cfc9d620f7a9840a1afe02a4340698bbab7328c732fddc329a6ee4f90001375ea626b70c1fcc75c06aa8c36f2184d3aa68d2b1bef30ec2916113cc28079d8048f00725403b8af00f11d16bc9895cc84a942ef45b819e6c41999fce9348fe2a2319fb059d0ad1761e4a4969a0e876e64cec9898d0f1b41230b9215415546bde65bb80667f2763d05d3be2fecb9ea1b04074cf01bf65e6fdc2944467dd3fc6f3e0be2c925d26ab2a4a0c1d6d42e5854caad32ce510186c47c45cc67dff30bea70aa4b382a6b89b582c2920732545f095bebd146fe1bab4adefd5fe96aa0e1d5cfeb819b07c95cf25f0f2c46c11031b76ed5e4f9e32e04ed9bfcfa64a95a6e62d7df9ae4c1e5d6fb4c7c2af9d92f2155a952e77f8328a29cce85a34e9b14aa9bc02209d0beadac542036d6a8772fc7c667b6131dd70b6bc781306d509751bdb874347fae24287a7112cc7784f2fa81dcde424a6b06943d74238e997777fa43771bd4fd30aa1f71e4144f34c39404cbf1d15055483ae3778b008b92d0e0ac8f332ad165ebf309d672c70072a17f40afaa02a834512e3ad39cb8cf175c4c9cf2cc85ee28a62d6d60c0b64248738c92253c9cd319326fe252e239bc0c9c3d207b10770a1ca0c97c4bbe89df4ca9d89a6f6980117926457b347f0456d3ee38843fc0c92b2d200daa18c1dedcaff7a81892af56c4491e84ee9c3ed63d616087021b5277f9a396897b4193e1f28bcbbc6ec4421df4c29f50e99bf37f2a2cb648c909a33ccb370aa27c3f95290eb3d27ea6e34b303208c93447b33fab1744fdd58888ee829ec48856c099cbe043dbc2e8c8f444fbbb5d351538363b45c68b0fae7078d049dbe0ad7b802c7d15d36ec3bab763ce32d30689a3dafd340dba3d8454941840db33bbc50a36aad491ab17c8c3f9fac9d9b7fd80da23f50088d83c3421f818b43a031a8855e6ead48ed6e5d4f5e2697776c7dd6d5e465425d94f3f31a81b75c86d3c8473021cfab3c6dd52a7aac48ee0de4193aab0e5be6fc91cf48dff1e5756c53817e019bcb83952c385c0a723a043c7161b48166c19f5eb23222ccaa587d1bb388e6ff1efa041df9813368fe056e500a9c8f4971040bed9ad596abfc75935ec692dec0bda9e1eb611325f0ba7d3648e0d1235254ec61d9389f81e72607bb336b2ce0f929139124fd85d060e063ff6c46697a8b75aae34c7daa7851c562acb23959f1e1beb3382b76fbf653ed0c62223305a64d61d1cfb02b9210ad7655224f13ca3c537502e1e6be463b5b31c5b80f7ee5192d175fe2c04fffcaf1a80b16efe596621a9559407cdff5c2e2ea3d5f6f7856f201d925b0d62274d5cce3959854b73f8888dd02a68740e13d336730c4618c384be577aa8fb3f58ae32533af8b8b1432c87b48657856f3cbd73cdafc95afef98a461bec5871086a20d15d9af02532f0bc48b5772cd0373496afbfefe224a4d56afd5243d1dafdeb3450560bf1ceef1d4a9171e3cec99d255732052e30d946669072683f59a3748a006be34b689d8fbb2e1fe03d10a5f94280a136050fd27880d152fe2fd01050b038e5082959b7f067fc2024f8ee8f2752a564f3e19947c0e634f008b7dfb2ade426082f487302ed5a3afde015b3460ab68b9fb1bbb08357f905d80deb8fd935afe2383d3b0bdd1ebb76a8526a40de6fe0c1e4770fc4ac2a5b8f7b59df90dace580e0b9fa7731ed1d732eaa04a1070e0d1eb071432078c5852fd9b628a053823b29268684fb4e87ad4888ff5014f39a75621712c4d03d270aec407aaa986df5dac70df6ce663035e1882df2d05c0e647ee3e15b4c71166ed0f5d1b8f0a9d062077653fca34b8506029496c1a4cf797b85093df14e4ebcf0f83c8fa772f5398e691b356505c84f6125e47a92f2179ab67f94aa88e838f30b3ab03448cfa32fbc81c6f4a47bed6cb0a06efc2419f70afa863e6c8c55e0f5a61b85c943064b7c73c80bd652c4c1685b1edd240caa6d595c3df4332af03ad011000905f4ca73246cf03d5feff2d6fe7362509976a47fedeb192b6f03f7d32cf44b5642e02009f08b81765de3ba2dae842ca7aaa678c62474a8ebe4ddb65c9974e2c3b0907bd45132902dcc26d6656f9c8fc1834ec91a8701c86674685c3cfabd6cc665a04f32d5338a3063cf1ddbc012bd6d06d5c3fb153dfbadb9f8341dd5a88cd399f728813230d954b0d4e0d4c5dd9e598eaebb9721215344a9cb2d77ad013e5e8a0e7c24736ef6683e6190d9d9d133b0a7c81ceb4c2d4a30581051ab783ef9ca462968792821687cba8427ea9c12070f3b9bcb9ca6a2f5fcb2e3a29e27ba17403420613796e9bdcb33cd3b72dff77ab4acd78ff2e54ed94b2c2945d265dec41603b7f234a4a20c34b267d18a03cbc3e20709d5c4c2c884fa50b040fffe767077707c63a574e8fea77be1a9934223741d68827f190c65b5e7b59bfd4ea9ace76ba8261473f102b7196ed964e68b7f189291c1eba0350c9b5a18d7e1deaadf2cdd425207b6ade20febfa48191a1ee674d74b9c445d29d34fa887d4bb68ae65dbb522a4dec1980aceec57a46f75faf31bbb7dae982f8f4f4f89c5f3f569aa4b0d681fb75f1f196c4a89cb3eb67c0f5a49c74dda236fcee8d11d7af341cdf0d4cd742b52608ae116e45837167681d169c717cd267576dd970559c7f6f54e497d17e8b82c359bfebe1959e9662f27943a5ebe11d8efdaa31bf2ebbc821bf863c833fa6c1fccb9714e6a0eb031f185338bb33eb8f5cf8cfb1436a6bd9aa0d4854e7bf83ac6bd0581548f89aecc9dbdb09ee57c9b9a737e900b175b33d1d29f395da93d506ecdeb8cd4719c4a7a6d65a9b87a1b6842937dd02ef6fa346f1434f79b782e975c35100d2539eb4a1baee0420d3fc653e6c1e5a1c70d7eeff21b360e5a3cb7b77ba644e8bb49ad8c31f259fccb0d765bab7af34640e6b3ca1e0108eaedb6dc4bf982f9622f6d0bb09c6964f62a0c80b6d8c1e620e1d2bee2277bb1296c20bf679d1d08a3592934dc98df01e0ae41d449ef4d85c8ecc4ae406b245c3a6e3d511ef5a7b7a7b6ebb62eb8dbcb2be7d6a68773c366bd41f2c31516eddc38c288d8cc9e0d6349a984214d5d5be5d9a778ebc2890b18e6cb8eb21f01dd79b42d560958216ee7be5380f13ae5854ce69c4db783f65353b88741327d515ac577c7ef199cfcc20a684dc65b286f44a296b4124614e061b33a661f9db5804cc3446dce8dc36a87381fdc63b95215e91800cb7d7f386d10f7d8922f8aab8b1b9d56c284b042c79c36de907e895089856d598277954a2684a2baaea2ff3989809c06d436a5ac701f6bf60d5a459d2ef48c780370489e27a9b7f5fd8985d3a27b043423075ed2ce9f7fc830dddd06fb318a979e436c4bbbfa36dbe2f1a11987f17d77cc63747918b0e58097c91c42bfe11f4f4619bb0fb71536f6f730b1aa14228616295ff65de682ecc2f7dbcdf1db82ed368289d6a2fffdcc5c2ab6ff249f2b4cbaa71ba43e2313ec2fcb13c5c89593bed37b45232fdd984c8eb3ad58f83033deba0e74f5e3c9925201d1d13aa89c88eeffc68600f28cd775266b3982ed3467b86acaae8e55e199e2f19464cfdfb705805ef7ac877382f7725c5683115402fa7e568cb3b845e572a25c682bde474938cc3c3c4f104ab6363c31e5fba25b3328becaf2bfd804181211872c3aed79a6ff3a5480ffaef83fedff8afcf78eb4a153fc27e02207a4c347b6ed3fe8c3918282cd1163e95b4594a43146d5afcdcf22314fe4c455fae7f1f0e2f225908de31be1ee488532bf1ff41bf726674b933a53b8cbfcf62265a482a0876653f2f15e137928a022aa16df2fccb3cea5b6bde56d8cbc595731e173cff8a115756f9387f3a10bfafc8b65938bb8dcc8e4795420fce1ce1d10dc6418d7854ff37a69dc11d3fb5fc690a50c69a7205fa3f494f6518678c1a1889f429effe0211eaa8c86d0492a415fe3a6711750fa70ae805683d1ad30c9ada500f4a8d27aa5d5ed57be06d94fd10a943447be99493b29ad9a993fa21eb0941b55ec1d1cc0ae8a08411411afe5cf62ed48d4b865cb4c7796b9f06dc67a33a8230eb3097f77fdcbeeb659a49db954b7a56f5a74c5cb10591cca945ebd1fe98fa6242c12d1db72c1b55f0057448f9ac25c6990216ca4ab819524da1773b7f8c27f2adf2f3f5011f480bcd8b23ed020cf7d4eb09d4e4aa674efe9d6a3d927bd4ba7717cd56e9f94e4ac72bdb916f8144a9cc37d9d7df6d4841726891b897118c85e61048e447139649200bc04020c211436cbec1b3e1e8c47343c13f0345a11792686f2e2fc93f3477fc296c1e463af443b5f42329ccc3c4bd5a9b115fb95d4e87b97e4942b4d1a4bb2461f29755c0444f2d830d2412f095983364fee3ab809ef8f8a280140eb4b0cfad84335b8810e771a1c5868f481e709b39b2e587958508a117b9eb64258cce0ec6689a77346c93b44aa824600f1c4444f000a5c9f1c1fd17b5da54ff768177874eb11ed97795c25dec66ed2590e1d68bd57ba3370034a9d82247da8338e2bc7bc829e7116be0c79b21e231f1d2eeb1eec0f618a162b0810f174e383d50527e66db38b592696392134f2b71189afe67a846a31dfea56dce89087ab7f9e50f90a249519950d67b99e0b1d80f8aa4ba7a0a0253b1fccde0927369c606ebbb584d03a259a37795d0a34233d6622bfa062990e2da8045e90bd06761cd3023b3dd1b1bb6921a4c70790d173e12b705cf8160eb516770c0b4379152156e11867811273c35f4823e99a7e9a849bf3cf31908f4fa1e139c9ae7a3287066cbb585915a091963a7b7772cab834309282ffa0c2f74d37703836d84cf47e3c494364c0a6c7a19bfd16e3ac7026a415c31c4e892281c5130e1ab3fc481d778bbad38b92f78825a9d1795a194f7637d656dce3638005c281bce064eb5a562f886527a2871afac9c535b40f337ae2ad805bf9a95ee55e34a1020238791025ef45611598fcfc719bc984b1866f7529395230b9181439d29e2", 0x2000, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x60, 0x0, 0x40, {{0x7, 0x581, 0x0, 0x45e, 0x2000000000, 0x2, 0x1000, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.662496315s ago: executing program 6 (id=1898):
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$kcm(0x10, 0x2, 0x0)
socket(0x1e, 0x1, 0x0)
r0 = socket(0xa, 0x5, 0x0)
listen(r0, 0x1)
sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000084000000", @ANYRES8=r0], 0x20, 0x4000040}, 0x4000000)

2.134287898s ago: executing program 35 (id=1898):
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$kcm(0x10, 0x2, 0x0)
socket(0x1e, 0x1, 0x0)
r0 = socket(0xa, 0x5, 0x0)
listen(r0, 0x1)
sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000084000000", @ANYRES8=r0], 0x20, 0x4000040}, 0x4000000)

2.127647448s ago: executing program 5 (id=1900):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0x5, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f0000000180)={0xa, 0x2, 0x8fff, @loopback, 0xffffff1e}, 0x1c)
syz_mount_image$btrfs(&(0x7f000000c580), &(0x7f000000c5c0)='./file0\x00', 0x10, &(0x7f000000c600), 0x0, 0x559e, &(0x7f000000c640)="$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")
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8)
sendto$inet6(r0, &(0x7f0000000340)="cbf8ec", 0x3, 0x20000040, 0x0, 0x0)

1.868540525s ago: executing program 4 (id=1902):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000001f40)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000001f80)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001fc0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000002000)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "13be5ddf", "4008000000008700"}, 0x38)
sendto$inet6(r0, &(0x7f0000002040)='D', 0x4000, 0x8000000, 0x0, 0x0)

1.608841571s ago: executing program 1 (id=1903):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x1ffffff)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0))

1.23698665s ago: executing program 1 (id=1904):
r0 = socket$nl_route(0x10, 0x3, 0x0)
keyctl$session_to_parent(0x12)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x9}, {0x0, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24004010)

824.2143ms ago: executing program 4 (id=1905):
syz_io_uring_setup(0x1f85, &(0x7f00000000c0)={0x0, 0x3021, 0x0, 0x0, 0x1ec}, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4)
accept4(r0, 0x0, 0x0, 0x80000)

762.343182ms ago: executing program 1 (id=1906):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000004c0)=""/1, &(0x7f00000001c0)=0x1)

629.977015ms ago: executing program 1 (id=1907):
syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00')
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x18}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})

516.152488ms ago: executing program 4 (id=1908):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

416.41393ms ago: executing program 1 (id=1909):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200200000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

416.10888ms ago: executing program 5 (id=1910):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

124.752027ms ago: executing program 4 (id=1911):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
sendmsg$unix(r0, &(0x7f0000001980)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20048800}, 0x20044000)

0s ago: executing program 1 (id=1912):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0x5, 0x800, 0x0, 0x200, 0xc, 0x1}}, {0x6, 0x2, [0x4]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x60}}, 0x8840)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

ating new IBSS network, BSSID 50:50:50:50:50:50
[  253.857567][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.866210][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.330888][   T28] audit: type=1804 audit(1792080730.506:661): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.982" name="bus" dev="ramfs" ino=18444 res=1 errno=0
[  255.200951][ T8905] FAULT_INJECTION: forcing a failure.
[  255.200951][ T8905] name failslab, interval 1, probability 0, space 0, times 0
[  255.254294][ T8905] CPU: 0 PID: 8905 Comm: syz.5.993 Not tainted syzkaller #0
[  255.261691][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  255.271840][ T8905] Call Trace:
[  255.275183][ T8905]  <TASK>
[  255.278172][ T8905]  dump_stack_lvl+0x18c/0x250
[  255.282914][ T8905]  ? show_regs_print_info+0x20/0x20
[  255.288215][ T8905]  ? load_image+0x420/0x420
[  255.292780][ T8905]  ? __might_sleep+0xe0/0xe0
[  255.297418][ T8905]  ? __lock_acquire+0x7eb0/0x7eb0
[  255.302599][ T8905]  should_fail_ex+0x394/0x4c0
[  255.307354][ T8905]  should_failslab+0x9/0x20
[  255.311917][ T8905]  slab_pre_alloc_hook+0x59/0x300
[  255.316993][ T8905]  ? v9fs_mount+0xba/0xb40
[  255.321457][ T8905]  __kmem_cache_alloc_node+0x53/0x250
[  255.327204][ T8905]  ? v9fs_mount+0xba/0xb40
[  255.333994][ T8905]  kmalloc_trace+0x2a/0xe0
[  255.338505][ T8905]  v9fs_mount+0xba/0xb40
[  255.343601][ T8905]  ? kfree+0x31/0x1a0
[  255.347837][ T8905]  ? trace_xrep_findroot_block+0x1f0/0x1f0
[  255.353722][ T8905]  ? vfs_parse_fs_param+0x420/0x420
[  255.358992][ T8905]  legacy_get_tree+0xea/0x180
[  255.363771][ T8905]  ? trace_xrep_findroot_block+0x1f0/0x1f0
[  255.369649][ T8905]  vfs_get_tree+0x8c/0x280
[  255.374122][ T8905]  do_new_mount+0x24a/0xa40
[  255.378690][ T8905]  __se_sys_mount+0x2e7/0x3d0
[  255.383417][ T8905]  ? __x64_sys_mount+0xc0/0xc0
[  255.388233][ T8905]  ? lockdep_hardirqs_on+0x98/0x150
[  255.393478][ T8905]  ? __x64_sys_mount+0x20/0xc0
[  255.398292][ T8905]  do_syscall_64+0x55/0xb0
[  255.402747][ T8905]  ? clear_bhb_loop+0x40/0x90
[  255.407466][ T8905]  ? clear_bhb_loop+0x40/0x90
[  255.412220][ T8905]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.418177][ T8905] RIP: 0033:0x7f288839e559
[  255.422672][ T8905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.442338][ T8905] RSP: 002b:00007f288933a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  255.450822][ T8905] RAX: ffffffffffffffda RBX: 00007f2888625fa0 RCX: 00007f288839e559
[  255.458859][ T8905] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 00002000000000c0
[  255.466887][ T8905] RBP: 00007f28884358b0 R08: 0000200000000480 R09: 0000000000000000
[  255.474906][ T8905] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000000
[  255.482926][ T8905] R13: 00007f2888626038 R14: 00007f2888625fa0 R15: 00007ffeabaa46c8
[  255.490962][ T8905]  </TASK>
[  255.510948][ T5780] Bluetooth: hci1: command tx timeout
[  255.973964][   T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  256.039725][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  256.053902][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  256.154089][   T27] usb 2-1: Using ep0 maxpacket: 16
[  256.184690][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  256.208582][   T27] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  256.223809][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.240191][   T27] usb 2-1: Product: syz
[  256.253808][   T27] usb 2-1: Manufacturer: syz
[  256.259161][   T27] usb 2-1: SerialNumber: syz
[  256.267209][   T27] usb 2-1: config 0 descriptor??
[  256.301256][   T27] hub 2-1:0.0: bad descriptor, ignoring hub
[  256.313790][   T27] hub: probe of 2-1:0.0 failed with error -5
[  256.338293][   T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  256.840477][ T8951] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1009'.
[  256.859897][ T8953] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1010'.
[  256.913366][    T9] usb 2-1: USB disconnect, device number 9
[  257.084175][ T5841] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  257.297541][ T5841] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  257.311890][ T5841] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.319764][ T5841] usb 6-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00
[  257.331462][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.346822][ T5841] usb 6-1: config 0 descriptor??
[  257.557100][ T5780] Bluetooth: hci1: command tx timeout
[  257.629750][ T8970] tipc: Resetting bearer <eth:syz_tun>
[  257.817603][ T5841] input: HID 046d:c09b as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C09B.0008/input/input10
[  257.968174][   T23] IPVS: starting estimator thread 0...
[  257.993833][ T8974] loop2: detected capacity change from 0 to 164
[  258.024314][ T5841] logitech-hidpp-device 0003:046D:C09B.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c09b] on usb-dummy_hcd.5-1/input0
[  258.073964][ T8977] IPVS: using max 19 ests per chain, 45600 per kthread
[  258.620424][ T8983] failed to isolate pfn 48298
[  258.638599][ T8983] page:ffffea000120a600 refcount:2 mapcount:0 mapping:ffff888078ff61e0 index:0x6b pfn:0x48298
[  258.672600][ T8983] memcg:ffff88807a108000
[  258.689733][   T23] usb 6-1: USB disconnect, device number 2
[  258.728398][ T8983] aops:shmem_aops ino:45a dentry name(?):"dev/zero"
[  258.744628][ T8983] flags: 0x1fff6000008002c(referenced|uptodate|lru|swapbacked|node=0|zone=3|lastcpupid=0x7ff)
[  258.770620][ T8983] page_type: 0xffffffff()
[  258.780870][ T8983] raw: 01fff6000008002c ffffea000122d4c8 ffffea000120a648 ffff888078ff61e0
[  258.800337][ T8983] raw: 000000000000006b 0000000000000000 00000002ffffffff ffff88807a108000
[  258.819009][ T8983] page dumped because: isolation failed
[  258.830128][ T8983] page_owner tracks the page as allocated
[  258.854735][ T8983] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8972, tgid 8971 (syz.1.1018), ts 257830208593, free_ts 251298427560
[  258.904048][ T8983]  post_alloc_hook+0x1c1/0x200
[  258.919231][ T8983]  get_page_from_freelist+0x2181/0x22a0
[  258.929366][ T8983]  __alloc_pages+0x1f0/0x460
[  258.940723][ T8983]  __folio_alloc+0x10/0x20
[  258.949646][ T8983]  vma_alloc_folio+0x474/0x8f0
[  258.964130][ T8983]  shmem_alloc_folio+0x1a9/0x2a0
[  258.974072][ T8983]  shmem_alloc_and_acct_folio+0x1cb/0x6c0
[  258.985373][ T8983]  shmem_get_folio_gfp+0xe1d/0x2b40
[  259.004238][ T8983]  shmem_fault+0x1b8/0x820
[  259.008889][ T8983]  __do_fault+0x13b/0x4d0
[  259.019063][ T8983]  handle_mm_fault+0x3945/0x4a50
[  259.029240][ T8983]  __get_user_pages+0x604/0x1580
[  259.039483][ T8983]  populate_vma_page_range+0x2c1/0x380
[  259.053410][ T8983]  __mm_populate+0x260/0x390
[  259.058608][ T8983]  vm_mmap_pgoff+0x2da/0x3f0
[  259.065263][ T8983]  do_syscall_64+0x55/0xb0
[  259.069839][ T8983] page last free stack trace:
[  259.075888][ T8983]  free_unref_page_prepare+0x7d7/0x8f0
[  259.081514][ T8983]  free_unref_page+0x32/0x2e0
[  259.087035][ T8983]  hpage_collapse_scan_file+0x4c82/0x5e40
[  259.092956][ T8983]  madvise_collapse+0x653/0xd80
[  259.098724][ T8983]  do_madvise+0x92f/0x3790
[  259.103309][ T8983]  __x64_sys_madvise+0xa6/0xc0
[  259.123739][ T8983]  do_syscall_64+0x55/0xb0
[  259.128945][ T8983]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  259.640505][ T8983] migrating pfn 48b55 failed ret:1
[  259.670492][ T8983] page:ffffea000122d540 refcount:4 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48b55
[  259.691533][ T8983] memcg:ffff88807c288000
[  259.705593][ T8983] flags: 0x1fff0800000020c(referenced|uptodate|workingset|node=0|zone=3|lastcpupid=0x7ff)
[  259.728216][ T8983] page_type: 0xffffffff()
[  259.732730][ T8983] raw: 01fff0800000020c ffffc9000440fa00 ffffc9000440fa00 0000000000000000
[  259.753761][ T8983] raw: 0000000000000000 0000000000000000 00000004ffffffff ffff88807c288000
[  259.774858][ T8983] page dumped because: migration failure
[  259.794211][ T8983] page_owner tracks the page as allocated
[  259.804478][ T8983] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7470, tgid 7468 (syz.3.458), ts 182070430006, free_ts 181917887067
[  259.852457][ T8983]  post_alloc_hook+0x1c1/0x200
[  259.857471][ T8983]  get_page_from_freelist+0x2181/0x22a0
[  259.873700][ T8983]  __alloc_pages+0x1f0/0x460
[  259.878683][ T8983]  folio_alloc+0x1e/0x30
[  259.896666][ T8983]  filemap_alloc_folio+0xdf/0x490
[  259.901795][ T8983]  do_read_cache_folio+0x381/0x7f0
[  259.918503][ T8983]  do_read_cache_page+0x32/0x260
[  259.928773][ T8983]  hfsplus_block_allocate+0xe7/0x900
[  259.941831][ T8983]  hfsplus_file_extend+0xb92/0x1af0
[  259.962610][ T8983]  hfsplus_get_block+0x421/0x1520
[  259.973709][ T8983]  __block_write_begin_int+0x571/0x1b00
[  259.991044][ T8983]  block_write_begin+0x9a/0x1e0
[  260.001241][ T8983]  cont_write_begin+0x5fd/0x800
[  260.011400][ T8983]  hfsplus_write_begin+0x8b/0xd0
[  260.021601][ T8983]  cont_write_begin+0x659/0x800
[  260.031738][ T8983]  hfsplus_write_begin+0x8b/0xd0
[  260.048433][ T8983] page last free stack trace:
[  260.058921][ T8983]  free_unref_page_prepare+0x7d7/0x8f0
[  260.069714][ T8983]  free_unref_page_list+0xbe/0x860
[  260.082695][ T8983]  release_pages+0x208a/0x2300
[  260.092824][ T8983]  tlb_flush_mmu+0x379/0x510
[  260.100757][ T8983]  tlb_finish_mmu+0xf4/0x220
[  260.113797][ T8983]  unmap_region+0x311/0x370
[  260.123693][ T8983]  do_vmi_align_munmap+0x1057/0x16a0
[  260.133688][ T8983]  do_vmi_munmap+0x252/0x2d0
[  260.138370][ T8983]  __vm_munmap+0x19e/0x3c0
[  260.150621][ T8983]  __x64_sys_munmap+0x60/0x70
[  260.155808][ T8983]  do_syscall_64+0x55/0xb0
[  260.160297][ T8983]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  260.400245][ T9018] 9p: Unknown uid 00000000004294967295
[  260.468304][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.476205][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.531931][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.539224][ T9022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.546975][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.554244][ T9022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.570076][ T9022] bridge0: entered promiscuous mode
[  260.575660][ T9022] bridge0: entered allmulticast mode
[  261.178286][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1049'.
[  261.693823][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  261.883765][ T5841] usb 6-1: Using ep0 maxpacket: 32
[  261.891060][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.913721][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.929996][ T5841] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  261.949522][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.973203][ T5841] usb 6-1: config 0 descriptor??
[  261.995004][ T5841] hub 6-1:0.0: USB hub found
[  262.205329][ T5841] hub 6-1:0.0: 1 port detected
[  262.443885][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  262.645046][    T9] usb 3-1: Using ep0 maxpacket: 8
[  262.663087][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.675130][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  262.695696][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00
[  262.708536][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.738511][    T9] usb 3-1: config 0 descriptor??
[  262.837563][ T5841] hub 6-1:0.0: activate --> -90
[  263.246695][    T9] usb 6-1: USB disconnect, device number 3
[  263.372269][   T23] usb 3-1: USB disconnect, device number 16
[  264.147972][ T9088] loop2: detected capacity change from 0 to 4096
[  264.304843][ T9088] ntfs3: loop2: ino=19, mi_enum_attr
[  264.310323][ T9088] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  264.722225][ T9094] loop5: detected capacity change from 0 to 40427
[  264.736415][ T9094] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  264.745531][ T9094] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  264.767818][ T9094] F2FS-fs (loop5): invalid crc value
[  264.782759][ T9094] F2FS-fs (loop5): Found nat_bits in checkpoint
[  264.847233][ T9094] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  264.859367][ T9094] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  264.942184][   T28] audit: type=1804 audit(1792080741.116:662): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1065" name="/newroot/21/file0/bus" dev="loop5" ino=10 res=1 errno=0
[  265.625949][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'.
[  265.919846][ T9121] binder: 9120:9121 ioctl c0306201 2000000003c0 returned -14
[  266.295138][ T9128] migrating pfn 48b55 failed ret:1
[  266.300356][ T9128] page:ffffea000122d540 refcount:4 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48b55
[  266.316044][ T9128] memcg:ffff88807c288000
[  266.320338][ T9128] flags: 0x1fff0800000020c(referenced|uptodate|workingset|node=0|zone=3|lastcpupid=0x7ff)
[  266.335223][ T9128] page_type: 0xffffffff()
[  266.339624][ T9128] raw: 01fff0800000020c ffffc900053bfa00 ffffc900053bfa00 0000000000000000
[  266.352590][ T9128] raw: 0000000000000000 0000000000000000 00000004ffffffff ffff88807c288000
[  266.361770][ T9128] page dumped because: migration failure
[  266.367728][ T9128] page_owner tracks the page as allocated
[  266.373584][ T9128] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7470, tgid 7468 (syz.3.458), ts 182070430006, free_ts 181917887067
[  266.391818][ T9128]  post_alloc_hook+0x1c1/0x200
[  266.397271][ T9128]  get_page_from_freelist+0x2181/0x22a0
[  266.402973][ T9128]  __alloc_pages+0x1f0/0x460
[  266.407938][ T9128]  folio_alloc+0x1e/0x30
[  266.412336][ T9128]  filemap_alloc_folio+0xdf/0x490
[  266.419256][ T9128]  do_read_cache_folio+0x381/0x7f0
[  266.424700][ T9128]  do_read_cache_page+0x32/0x260
[  266.429925][ T9128]  hfsplus_block_allocate+0xe7/0x900
[  266.442748][ T9128]  hfsplus_file_extend+0xb92/0x1af0
[  266.449686][ T9128]  hfsplus_get_block+0x421/0x1520
[  266.456526][ T9128]  __block_write_begin_int+0x571/0x1b00
[  266.462374][ T9128]  block_write_begin+0x9a/0x1e0
[  266.470016][ T9128]  cont_write_begin+0x5fd/0x800
[  266.475208][ T9128]  hfsplus_write_begin+0x8b/0xd0
[  266.480416][ T9128]  cont_write_begin+0x659/0x800
[  266.485714][ T9128]  hfsplus_write_begin+0x8b/0xd0
[  266.490913][ T9128] page last free stack trace:
[  266.496087][ T9128]  free_unref_page_prepare+0x7d7/0x8f0
[  266.501805][ T9128]  free_unref_page_list+0xbe/0x860
[  266.507716][ T9128]  release_pages+0x208a/0x2300
[  266.512706][ T9128]  tlb_flush_mmu+0x379/0x510
[  266.517833][ T9128]  tlb_finish_mmu+0xf4/0x220
[  266.523047][ T9128]  unmap_region+0x311/0x370
[  266.533788][ T9128]  do_vmi_align_munmap+0x1057/0x16a0
[  266.540372][ T9128]  do_vmi_munmap+0x252/0x2d0
[  266.545763][ T9128]  __vm_munmap+0x19e/0x3c0
[  266.550412][ T9128]  __x64_sys_munmap+0x60/0x70
[  266.555405][ T9128]  do_syscall_64+0x55/0xb0
[  266.560415][ T9128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  266.610337][ T9128] migrating pfn 48b55 failed ret:1
[  266.615630][ T9128] page:ffffea000122d540 refcount:4 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48b55
[  266.627657][ T9128] memcg:ffff88807c288000
[  266.632059][ T9128] flags: 0x1fff0800000020c(referenced|uptodate|workingset|node=0|zone=3|lastcpupid=0x7ff)
[  266.649180][ T9128] page_type: 0xffffffff()
[  266.655229][ T9128] raw: 01fff0800000020c ffffc900053bfa00 ffffc900053bfa00 0000000000000000
[  266.669216][ T9128] raw: 0000000000000000 0000000000000000 00000004ffffffff ffff88807c288000
[  266.679482][ T9128] page dumped because: migration failure
[  266.693463][ T9128] page_owner tracks the page as allocated
[  266.702925][ T9128] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7470, tgid 7468 (syz.3.458), ts 182070430006, free_ts 181917887067
[  266.723757][ T9128]  post_alloc_hook+0x1c1/0x200
[  266.728711][ T9128]  get_page_from_freelist+0x2181/0x22a0
[  266.739531][ T9128]  __alloc_pages+0x1f0/0x460
[  266.745728][ T9128]  folio_alloc+0x1e/0x30
[  266.750072][ T9128]  filemap_alloc_folio+0xdf/0x490
[  266.757686][ T9128]  do_read_cache_folio+0x381/0x7f0
[  266.762892][ T9128]  do_read_cache_page+0x32/0x260
[  266.768579][ T9128]  hfsplus_block_allocate+0xe7/0x900
[  266.774409][ T9128]  hfsplus_file_extend+0xb92/0x1af0
[  266.779700][ T9128]  hfsplus_get_block+0x421/0x1520
[  266.786035][ T9128]  __block_write_begin_int+0x571/0x1b00
[  266.791841][ T9128]  block_write_begin+0x9a/0x1e0
[  266.800350][ T9128]  cont_write_begin+0x5fd/0x800
[  266.806704][ T9128]  hfsplus_write_begin+0x8b/0xd0
[  266.811729][ T9128]  cont_write_begin+0x659/0x800
[  266.817456][ T9128]  hfsplus_write_begin+0x8b/0xd0
[  266.822498][ T9128] page last free stack trace:
[  266.829536][ T9128]  free_unref_page_prepare+0x7d7/0x8f0
[  266.836158][ T9128]  free_unref_page_list+0xbe/0x860
[  266.841762][ T9128]  release_pages+0x208a/0x2300
[  266.848469][ T9128]  tlb_flush_mmu+0x379/0x510
[  266.853225][ T9128]  tlb_finish_mmu+0xf4/0x220
[  266.858823][ T9128]  unmap_region+0x311/0x370
[  266.863487][ T9128]  do_vmi_align_munmap+0x1057/0x16a0
[  266.872881][ T9128]  do_vmi_munmap+0x252/0x2d0
[  266.877718][ T9128]  __vm_munmap+0x19e/0x3c0
[  266.882543][ T9128]  __x64_sys_munmap+0x60/0x70
[  266.887530][ T9128]  do_syscall_64+0x55/0xb0
[  266.892097][ T9128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.001170][ T9128] migrating pfn 48b55 failed ret:1
[  267.006619][ T9128] page:ffffea000122d540 refcount:4 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48b55
[  267.023219][ T9128] memcg:ffff88807c288000
[  267.028073][ T9128] flags: 0x1fff0800000020c(referenced|uptodate|workingset|node=0|zone=3|lastcpupid=0x7ff)
[  267.053139][ T9128] page_type: 0xffffffff()
[  267.058051][ T9128] raw: 01fff0800000020c ffffc900053bfa00 ffffc900053bfa00 0000000000000000
[  267.069216][ T9128] raw: 0000000000000000 0000000000000000 00000004ffffffff ffff88807c288000
[  267.088078][ T9128] page dumped because: migration failure
[  267.099088][ T9128] page_owner tracks the page as allocated
[  267.107075][ T9128] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7470, tgid 7468 (syz.3.458), ts 182070430006, free_ts 181917887067
[  267.131352][ T9128]  post_alloc_hook+0x1c1/0x200
[  267.138217][ T9128]  get_page_from_freelist+0x2181/0x22a0
[  267.153838][ T9128]  __alloc_pages+0x1f0/0x460
[  267.158658][ T9128]  folio_alloc+0x1e/0x30
[  267.163213][ T9128]  filemap_alloc_folio+0xdf/0x490
[  267.175435][ T9128]  do_read_cache_folio+0x381/0x7f0
[  267.181595][ T9128]  do_read_cache_page+0x32/0x260
[  267.186947][ T9128]  hfsplus_block_allocate+0xe7/0x900
[  267.192455][ T9128]  hfsplus_file_extend+0xb92/0x1af0
[  267.199595][ T9128]  hfsplus_get_block+0x421/0x1520
[  267.204941][ T9128]  __block_write_begin_int+0x571/0x1b00
[  267.210693][ T9128]  block_write_begin+0x9a/0x1e0
[  267.216017][ T9128]  cont_write_begin+0x5fd/0x800
[  267.221075][ T9128]  hfsplus_write_begin+0x8b/0xd0
[  267.227660][ T9128]  cont_write_begin+0x659/0x800
[  267.235098][ T9128]  hfsplus_write_begin+0x8b/0xd0
[  267.243591][ T9128] page last free stack trace:
[  267.267954][ T9128]  free_unref_page_prepare+0x7d7/0x8f0
[  267.278080][ T9128]  free_unref_page_list+0xbe/0x860
[  267.283383][ T9128]  release_pages+0x208a/0x2300
[  267.288777][ T9128]  tlb_flush_mmu+0x379/0x510
[  267.293541][ T9128]  tlb_finish_mmu+0xf4/0x220
[  267.298438][ T9128]  unmap_region+0x311/0x370
[  267.303295][ T9128]  do_vmi_align_munmap+0x1057/0x16a0
[  267.309209][ T9128]  do_vmi_munmap+0x252/0x2d0
[  267.314959][    T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  267.323992][ T9128]  __vm_munmap+0x19e/0x3c0
[  267.329198][ T9128]  __x64_sys_munmap+0x60/0x70
[  267.334607][ T9128]  do_syscall_64+0x55/0xb0
[  267.339803][ T9128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.498678][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.525483][ T9151] input: syz0 as /devices/virtual/input/input14
[  267.538029][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  267.558524][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.588818][    T8] usb 3-1: Product: syz
[  267.593075][    T8] usb 3-1: Manufacturer: syz
[  267.618785][    T8] usb 3-1: SerialNumber: syz
[  268.878360][    T8] cdc_ncm 3-1:1.0: failed to get mac address
[  268.891719][    T8] cdc_ncm 3-1:1.0: bind() failure
[  268.902150][    T8] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  268.910023][    T8] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  268.918527][    T8] usbtest: probe of 3-1:1.1 failed with error -71
[  268.930082][    T8] usb 3-1: USB disconnect, device number 17
[  269.484128][ T5780] Bluetooth: hci2: unexpected event for opcode 0x2040
[  269.891585][ T9170] loop2: detected capacity change from 0 to 40427
[  269.904870][ T9170] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  269.927041][ T9170] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  269.950420][ T9170] F2FS-fs (loop2): invalid crc value
[  269.973782][ T9170] F2FS-fs (loop2): Found nat_bits in checkpoint
[  270.158810][ T9170] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  270.178360][ T9170] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  270.346130][   T28] audit: type=1804 audit(1792080746.526:663): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1095" name="/newroot/282/file0/bus" dev="loop2" ino=10 res=1 errno=0
[  270.367139][    C0] vkms_vblank_simulate: vblank timer overrun
[  270.702888][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1107'.
[  271.081904][ T9213] tipc: New replicast peer: 172.20.20.187
[  271.107497][ T9213] tipc: Enabled bearer <udp:syz0>, priority 10
[  271.210252][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  271.426329][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  271.438307][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  271.475388][ T9223] overlayfs: failed to clone upperpath
[  271.482628][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  271.497828][ T9223] overlayfs: failed to clone upperpath
[  271.513978][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  271.522103][    T9] usb 6-1: SerialNumber: syz
[  271.559912][ T9208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  271.688913][ T9225] loop1: detected capacity change from 0 to 256
[  271.743965][ T9225] exFAT-fs (loop1): invalid fs_name
[  271.749256][ T9225] exFAT-fs (loop1): failed to read boot sector
[  271.794164][ T9225] exFAT-fs (loop1): failed to recognize exfat type
[  271.809518][ T9208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  271.875818][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'.
[  272.370832][    T9] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42
[  272.707304][    T9] usb 6-1: USB disconnect, device number 4
[  272.718809][    T9] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device
[  273.240323][ T9245] loop1: detected capacity change from 0 to 1024
[  273.282958][ T9245] EXT4-fs: Ignoring removed bh option
[  273.393033][ T9245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.953379][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.924012][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  275.123996][ T5860] usb 6-1: Using ep0 maxpacket: 16
[  275.146231][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.169275][ T5860] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  275.191529][ T5860] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  275.210792][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.236736][ T5860] usb 6-1: config 0 descriptor??
[  275.743749][ T5860] HID 045e:07da: Invalid code 65791 type 1
[  275.770430][ T5860] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input15
[  275.826283][ T5860] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  276.096369][ T9339] ip_tables: iptables: counters copy to user failed while replacing table
[  276.488196][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'.
[  276.521211][ T9353] macvtap0: entered promiscuous mode
[  276.565991][ T9353] macvtap0: left promiscuous mode
[  276.607323][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'.
[  276.640424][ T9355] macvtap0: entered promiscuous mode
[  276.658087][ T9355] macvtap0: left promiscuous mode
[  276.687731][ T5841] usb 6-1: USB disconnect, device number 5
[  277.877042][ T9400] netlink: 'syz.2.1173': attribute type 1 has an invalid length.
[  277.981268][ T9400] 8021q: adding VLAN 0 to HW filter on device bond2
[  278.299604][ T9399] loop5: detected capacity change from 0 to 32768
[  278.368232][ T9399] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1174 (9399)
[  279.341457][ T9408] loop2: detected capacity change from 0 to 131072
[  279.353251][ T9408] F2FS-fs (loop2): invalid crc value
[  279.354490][ T9399] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  279.390508][ T9399] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  279.416997][ T9399] BTRFS info (device loop5): using free space tree
[  279.444884][ T9408] F2FS-fs (loop2): Found nat_bits in checkpoint
[  279.506619][ T9408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  279.563577][ T9429] netlink: 'syz.1.1181': attribute type 1 has an invalid length.
[  279.607711][ T9429] netlink: 'syz.1.1181': attribute type 2 has an invalid length.
[  279.616363][ T9429] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1181'.
[  279.685067][ T9399] BTRFS info (device loop5): enabling ssd optimizations
[  279.874351][   T28] audit: type=1800 audit(1792080756.036:664): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1174" name="bus" dev="loop5" ino=263 res=0 errno=0
[  280.421221][ T8765] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  281.012470][ T9444] loop1: detected capacity change from 0 to 32768
[  281.188923][ T9444] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  281.415489][ T9444] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  281.472206][ T9444] XFS (loop1): Starting recovery (logdev: internal)
[  281.547888][ T9444] XFS (loop1): Ending recovery (logdev: internal)
[  281.577228][ T9444] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[  281.614410][ T9444] XFS (loop1): Failed to initialize disk quotas.
[  281.838539][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  283.552399][ T9536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1217'.
[  284.713199][ T9568] FAULT_INJECTION: forcing a failure.
[  284.713199][ T9568] name failslab, interval 1, probability 0, space 0, times 0
[  284.747383][ T9568] CPU: 1 PID: 9568 Comm: syz.1.1231 Not tainted syzkaller #0
[  284.754855][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  284.764962][ T9568] Call Trace:
[  284.768290][ T9568]  <TASK>
[  284.771312][ T9568]  dump_stack_lvl+0x18c/0x250
[  284.776067][ T9568]  ? show_regs_print_info+0x20/0x20
[  284.781334][ T9568]  ? load_image+0x420/0x420
[  284.785911][ T9568]  ? verify_lock_unused+0x140/0x140
[  284.791193][ T9568]  should_fail_ex+0x394/0x4c0
[  284.795957][ T9568]  should_failslab+0x9/0x20
[  284.800524][ T9568]  slab_pre_alloc_hook+0x59/0x300
[  284.805616][ T9568]  kmem_cache_alloc+0x5a/0x2c0
[  284.810455][ T9568]  ? skb_clone+0x1eb/0x370
[  284.814969][ T9568]  skb_clone+0x1eb/0x370
[  284.820039][ T9568]  __netlink_deliver_tap+0x411/0x7f0
[  284.825420][ T9568]  ? netlink_deliver_tap+0x2e/0x1b0
[  284.830709][ T9568]  netlink_deliver_tap+0x19c/0x1b0
[  284.835904][ T9568]  netlink_sendskb+0x68/0x130
[  284.840662][ T9568]  ctrl_getfamily+0x4c7/0x5b0
[  284.845419][ T9568]  ? nla_put_string+0x30/0x30
[  284.850174][ T9568]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  284.856581][ T9568]  genl_family_rcv_msg_doit+0x21a/0x310
[  284.862205][ T9568]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  284.868181][ T9568]  genl_rcv_msg+0x611/0x7a0
[  284.872747][ T9568]  ? genl_bind+0x360/0x360
[  284.877202][ T9568]  ? nla_put_string+0x30/0x30
[  284.882010][ T9568]  ? ref_tracker_free+0x686/0x830
[  284.887077][ T9568]  netlink_rcv_skb+0x235/0x4c0
[  284.891891][ T9568]  ? genl_bind+0x360/0x360
[  284.896351][ T9568]  ? netlink_ack+0x1160/0x1160
[  284.901162][ T9568]  ? __lock_acquire+0x7eb0/0x7eb0
[  284.906238][ T9568]  ? down_read+0x1ac/0x2e0
[  284.910690][ T9568]  genl_rcv+0x28/0x40
[  284.914724][ T9568]  netlink_unicast+0x7b1/0x930
[  284.919559][ T9568]  netlink_sendmsg+0x8d0/0xbf0
[  284.924384][ T9568]  ? netlink_getsockopt+0x590/0x590
[  284.929624][ T9568]  ? apparmor_socket_sendmsg+0x8e/0x330
[  284.935213][ T9568]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  284.940533][ T9568]  ? security_socket_sendmsg+0x80/0xa0
[  284.946026][ T9568]  __sys_sendto+0x4a9/0x6b0
[  284.950576][ T9568]  ? __ia32_sys_getpeername+0x90/0x90
[  284.955996][ T9568]  ? __lock_acquire+0x7eb0/0x7eb0
[  284.961074][ T9568]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  284.967110][ T9568]  ? lock_chain_count+0x20/0x20
[  284.972004][ T9568]  ? lock_chain_count+0x20/0x20
[  284.976898][ T9568]  __x64_sys_sendto+0xde/0xf0
[  284.982406][ T9568]  do_syscall_64+0x55/0xb0
[  284.986875][ T9568]  ? clear_bhb_loop+0x40/0x90
[  284.991673][ T9568]  ? clear_bhb_loop+0x40/0x90
[  284.996557][ T9568]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  285.002510][ T9568] RIP: 0033:0x7f290015ed8e
[  285.007050][ T9568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  285.027154][ T9568] RSP: 002b:00007f2900ff0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  285.035603][ T9568] RAX: ffffffffffffffda RBX: 00007f2900ff26c0 RCX: 00007f290015ed8e
[  285.043610][ T9568] RDX: 0000000000000020 RSI: 00007f2900ff1000 RDI: 0000000000000005
[  285.051621][ T9568] RBP: 0000000000000000 R08: 00007f2900ff0f04 R09: 000000000000000c
[  285.059651][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  285.067652][ T9568] R13: 00007f2900ff0f58 R14: 00007f2900ff1000 R15: 0000000000000000
[  285.075677][ T9568]  </TASK>
[  285.228986][ T9573] netlink: 'syz.1.1233': attribute type 9 has an invalid length.
[  285.237471][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1233'.
[  285.975299][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'.
[  286.068308][ T9575] loop1: detected capacity change from 0 to 32768
[  286.097290][ T9575] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1234 (9575)
[  286.168490][ T9575] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  286.194198][ T9575] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  286.213138][ T9575] BTRFS info (device loop1): using free space tree
[  286.327108][ T9575] BTRFS info (device loop1): enabling ssd optimizations
[  286.466264][   T28] audit: type=1800 audit(1792080762.646:665): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1234" name="bus" dev="loop1" ino=263 res=0 errno=0
[  286.506004][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'.
[  286.518720][ T9615] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1245'.
[  286.730113][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  287.065991][ T8766] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (8766)
[  287.125017][ T9630] bond0: option slaves: interface +duÒ&B. does not exist!
[  288.032001][ T9657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1261'.
[  288.103330][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'.
[  289.113916][ T5960] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  289.301110][ T5960] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  289.338150][ T5960] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  289.368719][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.619416][ T5960] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device
[  289.679236][ T5960] wwan wwan0: port wwan0qmi0 attached
[  289.873331][ T5960] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 12:1f:30:da:a6:e3
[  290.157244][   T27] usb 6-1: USB disconnect, device number 6
[  290.166026][   T27] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device
[  290.220504][ T9709] FAULT_INJECTION: forcing a failure.
[  290.220504][ T9709] name failslab, interval 1, probability 0, space 0, times 0
[  290.246765][ T9709] CPU: 0 PID: 9709 Comm: syz.4.1280 Not tainted syzkaller #0
[  290.254241][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  290.264355][ T9709] Call Trace:
[  290.267685][ T9709]  <TASK>
[  290.270662][ T9709]  dump_stack_lvl+0x18c/0x250
[  290.275408][ T9709]  ? show_regs_print_info+0x20/0x20
[  290.280671][ T9709]  ? load_image+0x420/0x420
[  290.285246][ T9709]  ? __might_sleep+0xe0/0xe0
[  290.289902][ T9709]  ? __lock_acquire+0x7eb0/0x7eb0
[  290.294985][ T9709]  should_fail_ex+0x394/0x4c0
[  290.299741][ T9709]  should_failslab+0x9/0x20
[  290.304338][ T9709]  slab_pre_alloc_hook+0x59/0x300
[  290.309419][ T9709]  ? lockdep_softirqs_off+0x440/0x440
[  290.314935][ T9709]  ? security_sb_alloc+0x41/0x120
[  290.320027][ T9709]  ? security_sb_alloc+0x41/0x120
[  290.325116][ T9709]  __kmem_cache_alloc_node+0x53/0x250
[  290.330578][ T9709]  ? security_sb_alloc+0x41/0x120
[  290.335670][ T9709]  __kmalloc+0xa7/0x240
[  290.339919][ T9709]  ? __raw_spin_lock_init+0x45/0x100
[  290.345277][ T9709]  security_sb_alloc+0x41/0x120
[  290.350198][ T9709]  alloc_super+0x203/0x910
[  290.355798][ T9709]  ? kill_litter_super+0xb0/0xb0
[  290.360793][ T9709]  sget_fc+0x325/0x8d0
[  290.364922][ T9709]  ? kill_litter_super+0xb0/0xb0
[  290.369913][ T9709]  ? mqueue_get_tree+0xf0/0xf0
[  290.374739][ T9709]  get_tree_nodev+0x2a/0x140
[  290.379394][ T9709]  vfs_get_tree+0x8c/0x280
[  290.383878][ T9709]  fc_mount+0x1c/0xb0
[  290.387920][ T9709]  mq_init_ns+0x3a1/0x510
[  290.392341][ T9709]  copy_ipcs+0x309/0x500
[  290.396651][ T9709]  create_new_namespaces+0x212/0x700
[  290.402016][ T9709]  unshare_nsproxy_namespaces+0x11a/0x160
[  290.407812][ T9709]  ksys_unshare+0x4fa/0x8f0
[  290.412410][ T9709]  ? sighand_ctor+0x50/0x50
[  290.416986][ T9709]  ? lock_chain_count+0x20/0x20
[  290.421925][ T9709]  ? syscall_enter_from_user_mode+0x25/0x80
[  290.427888][ T9709]  __x64_sys_unshare+0x38/0x40
[  290.432709][ T9709]  do_syscall_64+0x55/0xb0
[  290.437180][ T9709]  ? clear_bhb_loop+0x40/0x90
[  290.441904][ T9709]  ? clear_bhb_loop+0x40/0x90
[  290.446646][ T9709]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  290.452615][ T9709] RIP: 0033:0x7f640139e559
[  290.457085][ T9709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.476842][ T9709] RSP: 002b:00007f64022b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  290.485338][ T9709] RAX: ffffffffffffffda RBX: 00007f6401625fa0 RCX: 00007f640139e559
[  290.493375][ T9709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  290.501435][ T9709] RBP: 00007f64014358b0 R08: 0000000000000000 R09: 0000000000000000
[  290.509477][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.517507][ T9709] R13: 00007f6401626038 R14: 00007f6401625fa0 R15: 00007fffe327c028
[  290.525548][ T9709]  </TASK>
[  290.605636][   T27] wwan wwan0: port wwan0qmi0 disconnected
[  290.660177][ T9695] loop2: detected capacity change from 0 to 40427
[  290.720238][ T9695] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  290.728056][ T9695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  290.779616][ T9695] F2FS-fs (loop2): invalid crc value
[  291.131975][ T9695] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  291.152842][ T9695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  291.347589][ T9695] bio_check_eod: 238 callbacks suppressed
[  291.347613][ T9695] syz.2.1275: attempt to access beyond end of device
[  291.347613][ T9695] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  291.535256][ T5784] syz-executor: attempt to access beyond end of device
[  291.535256][ T5784] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  291.575050][ T5784] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  291.625977][ T9740] loop1: detected capacity change from 0 to 512
[  291.678992][ T9740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  291.756143][ T9740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.843941][ T9740] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.975162][ T9740] EXT4-fs (loop1): shut down requested (0)
[  292.230155][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.452096][ T9765] loop1: detected capacity change from 0 to 512
[  292.535648][ T9765] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  292.603950][ T9765] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1293: inode has both inline data and extents flags
[  292.650030][ T9765] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1293: couldn't read orphan inode 15 (err -117)
[  292.771719][ T9765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.163727][   T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  293.368410][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.400996][   T27] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  293.426034][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.910835][   T27] wacom 0003:056A:033B.000B: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  293.945493][   T27] wacom 0003:056A:033B.000B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0
[  293.977816][   T27] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.000B/input/input16
[  294.393385][   T27] usb 2-1: USB disconnect, device number 10
[  295.046727][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.660736][ T9855] FAULT_INJECTION: forcing a failure.
[  295.660736][ T9855] name failslab, interval 1, probability 0, space 0, times 0
[  295.674961][ T9855] CPU: 1 PID: 9855 Comm: syz.1.1324 Not tainted syzkaller #0
[  295.682410][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  295.692614][ T9855] Call Trace:
[  295.695950][ T9855]  <TASK>
[  295.698926][ T9855]  dump_stack_lvl+0x18c/0x250
[  295.703667][ T9855]  ? show_regs_print_info+0x20/0x20
[  295.708923][ T9855]  ? load_image+0x420/0x420
[  295.713491][ T9855]  ? __might_sleep+0xe0/0xe0
[  295.718145][ T9855]  ? __lock_acquire+0x7eb0/0x7eb0
[  295.723283][ T9855]  should_fail_ex+0x394/0x4c0
[  295.728027][ T9855]  should_failslab+0x9/0x20
[  295.732578][ T9855]  slab_pre_alloc_hook+0x59/0x300
[  295.737728][ T9855]  kmem_cache_alloc+0x5a/0x2c0
[  295.742624][ T9855]  ? security_inode_alloc+0x34/0x110
[  295.747951][ T9855]  security_inode_alloc+0x34/0x110
[  295.753103][ T9855]  inode_init_always+0x914/0xc90
[  295.759208][ T9855]  new_inode_pseudo+0x95/0x1d0
[  295.764092][ T9855]  __sock_create+0x12d/0x940
[  295.768807][ T9855]  ? p9_fd_create_unix+0x14e/0x440
[  295.774516][ T9855]  p9_fd_create_unix+0x1b7/0x440
[  295.779519][ T9855]  ? p9_pollwake+0x160/0x160
[  295.784165][ T9855]  ? lockdep_hardirqs_on+0x98/0x150
[  295.789422][ T9855]  ? p9_client_create+0x78a/0x1050
[  295.794578][ T9855]  ? __kmem_cache_free+0xba/0x1f0
[  295.799662][ T9855]  p9_client_create+0x827/0x1050
[  295.804661][ T9855]  ? do_trace_9p_fid_put+0x20/0x20
[  295.809811][ T9855]  ? lockdep_softirqs_off+0x440/0x440
[  295.815223][ T9855]  ? __raw_spin_lock_init+0x45/0x100
[  295.820544][ T9855]  v9fs_session_init+0x1aa/0x1960
[  295.825618][ T9855]  ? v9fs_show_options+0x700/0x700
[  295.830801][ T9855]  v9fs_mount+0xd0/0xb40
[  295.835080][ T9855]  ? kfree+0x31/0x1a0
[  295.839114][ T9855]  ? trace_xrep_findroot_block+0x1f0/0x1f0
[  295.844959][ T9855]  ? vfs_parse_fs_param+0x420/0x420
[  295.850203][ T9855]  legacy_get_tree+0xea/0x180
[  295.854938][ T9855]  ? trace_xrep_findroot_block+0x1f0/0x1f0
[  295.860783][ T9855]  vfs_get_tree+0x8c/0x280
[  295.865234][ T9855]  do_new_mount+0x24a/0xa40
[  295.869775][ T9855]  __se_sys_mount+0x2e7/0x3d0
[  295.874496][ T9855]  ? __x64_sys_mount+0xc0/0xc0
[  295.879306][ T9855]  ? lockdep_hardirqs_on+0x98/0x150
[  295.884541][ T9855]  ? __x64_sys_mount+0x20/0xc0
[  295.890003][ T9855]  do_syscall_64+0x55/0xb0
[  295.894455][ T9855]  ? clear_bhb_loop+0x40/0x90
[  295.899181][ T9855]  ? clear_bhb_loop+0x40/0x90
[  295.903884][ T9855]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.909815][ T9855] RIP: 0033:0x7f290019e559
[  295.914260][ T9855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.934422][ T9855] RSP: 002b:00007f2900ff2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  295.942900][ T9855] RAX: ffffffffffffffda RBX: 00007f2900425fa0 RCX: 00007f290019e559
[  295.950901][ T9855] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000000c0
[  295.958897][ T9855] RBP: 00007f29002358b0 R08: 0000200000000200 R09: 0000000000000000
[  295.966897][ T9855] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000
[  295.974902][ T9855] R13: 00007f2900426038 R14: 00007f2900425fa0 R15: 00007ffe543750e8
[  295.982930][ T9855]  </TASK>
[  296.013922][ T9855] socket: no more sockets
[  296.018546][ T9855] 9pnet_fd: p9_fd_create_unix (9855): problem creating socket
[  296.340706][ T9869] loop1: detected capacity change from 0 to 16
[  296.362303][ T9869] erofs: (device loop1): mounted with root inode @ nid 36.
[  296.785861][ T9876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.986504][ T9877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.005168][ T9880] FAULT_INJECTION: forcing a failure.
[  297.005168][ T9880] name failslab, interval 1, probability 0, space 0, times 0
[  297.031829][ T9880] CPU: 1 PID: 9880 Comm: syz.1.1335 Not tainted syzkaller #0
[  297.039320][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  297.049433][ T9880] Call Trace:
[  297.052762][ T9880]  <TASK>
[  297.055739][ T9880]  dump_stack_lvl+0x18c/0x250
[  297.060482][ T9880]  ? show_regs_print_info+0x20/0x20
[  297.065739][ T9880]  ? load_image+0x420/0x420
[  297.070306][ T9880]  ? __might_sleep+0xe0/0xe0
[  297.074957][ T9880]  ? __lock_acquire+0x7eb0/0x7eb0
[  297.080048][ T9880]  should_fail_ex+0x394/0x4c0
[  297.084807][ T9880]  should_failslab+0x9/0x20
[  297.089373][ T9880]  slab_pre_alloc_hook+0x59/0x300
[  297.094437][ T9880]  kmem_cache_alloc+0x5a/0x2c0
[  297.099306][ T9880]  ? security_file_alloc+0x34/0x120
[  297.104599][ T9880]  security_file_alloc+0x34/0x120
[  297.109676][ T9880]  init_file+0x94/0x1f0
[  297.113893][ T9880]  alloc_empty_file+0xb7/0x1d0
[  297.118705][ T9880]  alloc_file+0x5b/0x600
[  297.122995][ T9880]  alloc_file_pseudo+0x184/0x210
[  297.127975][ T9880]  ? fput+0x1a0/0x1a0
[  297.132009][ T9880]  ? __rwlock_init+0x150/0x150
[  297.136824][ T9880]  ? do_raw_spin_unlock+0x121/0x230
[  297.142080][ T9880]  sock_alloc_file+0xb7/0x280
[  297.146800][ T9880]  do_accept+0x3e6/0x6b0
[  297.151088][ T9880]  ? __ia32_sys_listen+0x70/0x70
[  297.156092][ T9880]  __sys_accept4+0x9b/0x100
[  297.160641][ T9880]  __x64_sys_accept4+0x9a/0xb0
[  297.165446][ T9880]  do_syscall_64+0x55/0xb0
[  297.169894][ T9880]  ? clear_bhb_loop+0x40/0x90
[  297.174599][ T9880]  ? clear_bhb_loop+0x40/0x90
[  297.179308][ T9880]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  297.185241][ T9880] RIP: 0033:0x7f290019e559
[  297.189684][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.209320][ T9880] RSP: 002b:00007f2900ff2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  297.217776][ T9880] RAX: ffffffffffffffda RBX: 00007f2900425fa0 RCX: 00007f290019e559
[  297.225810][ T9880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  297.233848][ T9880] RBP: 00007f29002358b0 R08: 0000000000000000 R09: 0000000000000000
[  297.241855][ T9880] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000000
[  297.249852][ T9880] R13: 00007f2900426038 R14: 00007f2900425fa0 R15: 00007ffe543750e8
[  297.257962][ T9880]  </TASK>
[  297.559340][ T9886] loop1: detected capacity change from 0 to 1024
[  297.573766][   T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  297.593434][ T9877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.782359][   T23] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[  297.793875][   T23] usb 6-1: config 1 has no interface number 0
[  297.815873][   T23] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  297.825794][ T9877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.836184][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.836215][   T23] usb 6-1: Product: syz
[  297.836231][   T23] usb 6-1: Manufacturer: syz
[  297.836256][   T23] usb 6-1: SerialNumber: syz
[  298.123111][   T23] usb 6-1: cannot find UAC_HEADER
[  298.197696][   T23] snd-usb-audio: probe of 6-1:1.3 failed with error -22
[  298.236003][   T23] usb 6-1: USB disconnect, device number 7
[  298.326868][ T8766] udevd[8766]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.350903][ T9877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.418740][ T9877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.451852][ T9877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.518943][ T9877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.783353][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'.
[  298.805810][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'.
[  299.215205][ T5960] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  299.235929][ T9916] loop2: detected capacity change from 0 to 256
[  299.316780][ T9916] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d)
[  299.411972][ T5960] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  299.433406][ T5960] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  299.463809][ T5960] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  299.473054][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.814878][ T5841] usb 6-1: USB disconnect, device number 8
[  300.561603][ T9951] pim6reg: entered allmulticast mode
[  300.611308][ T9951] pim6reg: left allmulticast mode
[  300.859886][ T9962] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  300.881863][ T9962] overlayfs: failed to set xattr on upper
[  300.890457][ T9962] overlayfs: ...falling back to redirect_dir=nofollow.
[  300.923916][ T9962] overlayfs: ...falling back to index=off.
[  300.975395][ T9964] loop5: detected capacity change from 0 to 8
[  301.059031][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'.
[  301.074353][ T9964] SQUASHFS error: Failed to read block 0x8f: -5
[  301.143048][   T28] audit: type=1800 audit(1792080777.316:666): pid=9964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1357" name="file1" dev="loop5" ino=5 res=0 errno=0
[  301.280112][ T9975] io-wq is not configured for unbound workers
[  301.379143][ T9979] loop5: detected capacity change from 0 to 512
[  301.391983][ T9968] hsr_slave_1 (unregistering): left promiscuous mode
[  301.433882][ T9979] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.1362: corrupted inode contents
[  301.452268][ T9979] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  301.469324][ T9979] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.1362: corrupted inode contents
[  301.493524][ T9979] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.1362: mark_inode_dirty error
[  301.514152][ T9979] EXT4-fs (loop5): 1 orphan inode deleted
[  301.521333][ T9979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.159999][T10005] bridge4: entered promiscuous mode
[  302.165430][T10005] bridge4: entered allmulticast mode
[  302.267616][ T8765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.482442][T10014] loop1: detected capacity change from 0 to 512
[  302.501136][T10014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  302.525081][T10014] System zones: 1-12
[  302.540546][T10014] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.1376: missing EA_INODE flag
[  302.574555][T10014] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1376: error while reading EA inode 12 err=-117
[  302.635417][T10014] EXT4-fs (loop1): 1 orphan inode deleted
[  302.665783][T10014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.787332][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.949638][T10028] overlayfs: upper fs does not support file handles, falling back to index=off.
[  303.527105][T10051] input: syz1 as /devices/virtual/input/input20
[  304.486023][T10089] FAULT_INJECTION: forcing a failure.
[  304.486023][T10089] name failslab, interval 1, probability 0, space 0, times 0
[  304.500812][T10089] CPU: 1 PID: 10089 Comm: syz.1.1407 Not tainted syzkaller #0
[  304.508375][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  304.518494][T10089] Call Trace:
[  304.521808][T10089]  <TASK>
[  304.524769][T10089]  dump_stack_lvl+0x18c/0x250
[  304.529492][T10089]  ? show_regs_print_info+0x20/0x20
[  304.534731][T10089]  ? load_image+0x420/0x420
[  304.539554][T10089]  ? __might_sleep+0xe0/0xe0
[  304.544273][T10089]  ? __lock_acquire+0x7eb0/0x7eb0
[  304.549351][T10089]  should_fail_ex+0x394/0x4c0
[  304.554328][T10089]  should_failslab+0x9/0x20
[  304.560006][T10089]  slab_pre_alloc_hook+0x59/0x300
[  304.565315][T10089]  kmem_cache_alloc_node+0x5e/0x310
[  304.570702][T10089]  ? __alloc_skb+0x103/0x2c0
[  304.575562][T10089]  __alloc_skb+0x103/0x2c0
[  304.580029][T10089]  inet_netconf_notify_devconf+0x173/0x230
[  304.585881][T10089]  __devinet_sysctl_register+0x3d6/0x460
[  304.591556][T10089]  ? devinet_sysctl_register+0x1f0/0x1f0
[  304.597333][T10089]  devinet_init_net+0x32b/0x5c0
[  304.602229][T10089]  ops_init+0x391/0x640
[  304.606432][T10089]  setup_net+0x3b6/0xa20
[  304.610722][T10089]  ? copy_net_ns+0x530/0x530
[  304.615352][T10089]  ? copy_net_ns+0x347/0x530
[  304.619979][T10089]  ? down_read_killable+0x1d0/0x340
[  304.625216][T10089]  copy_net_ns+0x361/0x530
[  304.629673][T10089]  create_new_namespaces+0x3ce/0x700
[  304.635026][T10089]  unshare_nsproxy_namespaces+0x11a/0x160
[  304.640793][T10089]  ksys_unshare+0x4fa/0x8f0
[  304.645366][T10089]  ? sighand_ctor+0x50/0x50
[  304.649909][T10089]  ? lock_chain_count+0x20/0x20
[  304.654804][T10089]  ? syscall_enter_from_user_mode+0x25/0x80
[  304.660743][T10089]  __x64_sys_unshare+0x38/0x40
[  304.665546][T10089]  do_syscall_64+0x55/0xb0
[  304.670085][T10089]  ? clear_bhb_loop+0x40/0x90
[  304.674884][T10089]  ? clear_bhb_loop+0x40/0x90
[  304.679602][T10089]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  304.685544][T10089] RIP: 0033:0x7f290019e559
[  304.689988][T10089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.709636][T10089] RSP: 002b:00007f2900ff2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  304.718089][T10089] RAX: ffffffffffffffda RBX: 00007f2900425fa0 RCX: 00007f290019e559
[  304.726109][T10089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  304.734635][T10089] RBP: 00007f29002358b0 R08: 0000000000000000 R09: 0000000000000000
[  304.742635][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.750634][T10089] R13: 00007f2900426038 R14: 00007f2900425fa0 R15: 00007ffe543750e8
[  304.758744][T10089]  </TASK>
[  304.875674][T10089] rxe_eth0 speed is unknown, defaulting to 1000
[  305.444131][T10108] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  305.730744][T10120] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.823890][   T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  305.898635][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1422'.
[  305.913729][ T5860] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  306.030871][   T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  306.065379][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.094059][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.104189][ T5860] usb 6-1: Using ep0 maxpacket: 16
[  306.115325][ T5860] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  306.123566][ T5860] usb 6-1: config 0 has no interface number 0
[  306.138648][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  306.184249][ T5860] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  306.202571][ T5860] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  306.226444][ T5860] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  306.235974][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.260003][   T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  306.276790][ T5860] usb 6-1: Product: syz
[  306.281251][   T23] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  306.289491][ T5860] usb 6-1: Manufacturer: syz
[  306.294721][ T5860] usb 6-1: SerialNumber: syz
[  306.302707][   T23] usb 2-1: Manufacturer: syz
[  306.315990][ T5860] usb 6-1: config 0 descriptor??
[  306.323309][   T23] usb 2-1: config 0 descriptor??
[  306.330146][T10117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  306.374628][T10117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  306.625899][T10117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  306.633497][T10117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  306.789094][   T23] appleir 0003:05AC:8243.000C: unknown main item tag 0x0
[  306.812332][   T23] appleir 0003:05AC:8243.000C: No inputs registered, leaving
[  306.861175][   T23] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  306.880707][ T5860] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  307.116537][    T8] usb 2-1: USB disconnect, device number 11
[  307.203126][T10142] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$
[  307.691246][ T5860] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  307.724426][ T5860] asix: probe of 6-1:0.34 failed with error -71
[  307.769788][ T5860] usb 6-1: USB disconnect, device number 9
[  307.971930][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.994824][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.003959][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.012797][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.020912][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  308.028869][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.098009][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1439'.
[  308.113158][T10161] xfrm1: entered promiscuous mode
[  308.119353][T10161] xfrm1: entered allmulticast mode
[  308.125297][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1439'.
[  308.182416][T10158] rxe_eth0 speed is unknown, defaulting to 1000
[  308.376350][   T28] audit: type=1326 audit(1792080784.556:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.4.1441" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f640139e559 code=0x0
[  308.733879][ T5860] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  308.742098][T10158] chnl_net:caif_netlink_parms(): no params data found
[  308.875743][T10186] loop5: detected capacity change from 0 to 512
[  308.896995][T10158] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.910090][T10158] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.924161][ T5860] usb 2-1: Using ep0 maxpacket: 8
[  308.933897][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  308.936517][T10158] bridge_slave_0: entered allmulticast mode
[  308.951897][ T5860] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  308.972064][T10158] bridge_slave_0: entered promiscuous mode
[  308.988605][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.999729][T10186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.017005][T10158] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.025227][T10158] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.032565][T10186] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.035522][ T5860] usb 2-1: config 0 descriptor??
[  309.056065][T10158] bridge_slave_1: entered allmulticast mode
[  309.094013][T10158] bridge_slave_1: entered promiscuous mode
[  309.138070][T10158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.152120][T10158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.220332][ T8765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.235195][T10158] team0: Port device team_slave_0 added
[  309.261764][T10158] team0: Port device team_slave_1 added
[  309.363133][ T5860] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  309.407428][T10158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.415405][T10193] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  309.433763][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.469840][T10158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.495073][T10158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.502104][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.540816][T10158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.638483][T10158] hsr_slave_0: entered promiscuous mode
[  309.661459][T10158] hsr_slave_1: entered promiscuous mode
[  309.671655][T10158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.682699][T10158] Cannot create hsr debugfs directory
[  309.935964][ T5960] usb 2-1: USB disconnect, device number 12
[  310.113900][   T51] Bluetooth: hci3: command tx timeout
[  310.226279][T10158] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  310.240621][T10158] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  310.252740][T10158] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  310.266893][T10158] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  310.479794][   T42] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.605036][T10158] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.630330][   T42] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.710408][   T42] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.776359][T10158] 8021q: adding VLAN 0 to HW filter on device team0
[  310.808905][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.816194][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.860026][   T42] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.897918][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.905236][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.195783][   T51] Bluetooth: hci3: command tx timeout
[  313.368912][T10158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.855827][   T28] audit: type=1326 audit(1792080790.036:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  313.932273][   T28] audit: type=1326 audit(1792080790.036:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  313.996757][   T28] audit: type=1326 audit(1792080790.086:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  314.069502][   T28] audit: type=1326 audit(1792080790.086:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  314.177850][   T28] audit: type=1326 audit(1792080790.086:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  314.249693][   T28] audit: type=1326 audit(1792080790.096:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  314.276447][   T51] Bluetooth: hci3: command tx timeout
[  314.288225][   T28] audit: type=1326 audit(1792080790.106:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  314.349431][   T28] audit: type=1326 audit(1792080790.106:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  314.465261][   T28] audit: type=1326 audit(1792080790.146:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  314.556753][   T28] audit: type=1326 audit(1792080790.146:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290019e559 code=0x7ffc0000
[  315.029372][   T42] bond1: (slave gretap1): Releasing active interface
[  315.537081][T10158] veth0_vlan: entered promiscuous mode
[  315.767255][T10158] veth1_vlan: entered promiscuous mode
[  316.322514][T10158] veth0_macvtap: entered promiscuous mode
[  316.354411][   T51] Bluetooth: hci3: command tx timeout
[  316.475398][T10158] veth1_macvtap: entered promiscuous mode
[  316.600688][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.635697][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.660532][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.702365][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.731074][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.754431][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.788203][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.800182][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.818453][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.848462][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.863090][T10158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.942955][   T42] hsr_slave_0: left promiscuous mode
[  316.969123][   T42] hsr_slave_1: left promiscuous mode
[  317.011376][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.030888][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.039721][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.056372][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.066902][T10386] Bluetooth: ISO socket layer initialized
[  317.079011][   T42] bridge_slave_1: left allmulticast mode
[  317.103807][   T42] bridge_slave_1: left promiscuous mode
[  317.110354][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.127887][   T42] bridge_slave_0: left allmulticast mode
[  317.138180][   T42] bridge_slave_0: left promiscuous mode
[  317.147271][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.211551][   T42] veth1_macvtap: left promiscuous mode
[  317.217343][   T42] veth0_macvtap: left promiscuous mode
[  317.223183][   T42] veth1_vlan: left promiscuous mode
[  317.229671][   T42] veth0_vlan: left promiscuous mode
[  317.237359][   T59] wlan1: Trigger new scan to find an IBSS to join
[  317.479497][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  317.486175][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  317.680115][   T42] bond2 (unregistering): Released all slaves
[  317.916105][   T42] bond1 (unregistering): Released all slaves
[  318.805502][   T42] team0 (unregistering): Port device team_slave_1 removed
[  318.882224][   T42] team0 (unregistering): Port device team_slave_0 removed
[  318.947439][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  319.017269][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  319.865328][   T42] bond0 (unregistering): Released all slaves
[  320.057103][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.088482][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.119273][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.153836][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.180900][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.193051][T10418] loop1: detected capacity change from 0 to 1024
[  320.223205][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.236807][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.276789][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.349958][T10158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.412205][T10158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.428596][T10158] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.438014][T10158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.447194][T10158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.611634][T10423] loop5: detected capacity change from 0 to 2048
[  320.793942][T10423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  320.921322][T10284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.948966][T10284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.971119][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  320.971136][   T28] audit: type=1800 audit(1792080797.146:685): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1503" name="file2" dev="loop5" ino=1347 res=0 errno=0
[  321.173999][T10276] wlan1: Trigger new scan to find an IBSS to join
[  321.186633][   T42] IPVS: stop unused estimator thread 0...
[  321.197448][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.238725][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.321607][   T59] wlan1: Creating new IBSS network, BSSID c6:07:3b:10:c3:e4
[  321.994299][T10461] FAULT_INJECTION: forcing a failure.
[  321.994299][T10461] name failslab, interval 1, probability 0, space 0, times 0
[  322.060798][T10461] CPU: 1 PID: 10461 Comm: syz.6.1513 Not tainted syzkaller #0
[  322.068367][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  322.078493][T10461] Call Trace:
[  322.081833][T10461]  <TASK>
[  322.084828][T10461]  dump_stack_lvl+0x18c/0x250
[  322.089578][T10461]  ? show_regs_print_info+0x20/0x20
[  322.094845][T10461]  ? load_image+0x420/0x420
[  322.099486][T10461]  ? __might_sleep+0xe0/0xe0
[  322.104135][T10461]  ? __lock_acquire+0x7eb0/0x7eb0
[  322.109238][T10461]  ? ida_alloc_range+0x7d0/0x860
[  322.114237][T10461]  should_fail_ex+0x394/0x4c0
[  322.119002][T10461]  should_failslab+0x9/0x20
[  322.123571][T10461]  slab_pre_alloc_hook+0x59/0x300
[  322.128654][T10461]  ? alloc_vfsmnt+0x9d/0x450
[  322.133347][T10461]  ? alloc_vfsmnt+0x9d/0x450
[  322.138165][T10461]  __kmem_cache_alloc_node+0x53/0x250
[  322.143740][T10461]  ? idr_replace+0x1b0/0x1b0
[  322.151574][T10461]  ? alloc_vfsmnt+0x9d/0x450
[  322.156703][T10461]  __kmalloc_node_track_caller+0xa4/0x230
[  322.163036][T10461]  kstrdup+0x3b/0x80
[  322.167046][T10461]  alloc_vfsmnt+0x9d/0x450
[  322.171506][T10461]  clone_mnt+0x65/0xc60
[  322.175719][T10461]  ? lockdep_softirqs_off+0x440/0x440
[  322.181135][T10461]  copy_tree+0xe0/0x7e0
[  322.185332][T10461]  ? down_write+0x16e/0x200
[  322.189873][T10461]  ? down_read_killable+0x340/0x340
[  322.195124][T10461]  __do_loopback+0x193/0x330
[  322.199788][T10461]  __se_sys_open_tree+0x365/0x880
[  322.204863][T10461]  ? lock_chain_count+0x20/0x20
[  322.209763][T10461]  ? __x64_sys_open_tree+0x80/0x80
[  322.214914][T10461]  ? lockdep_hardirqs_on+0x98/0x150
[  322.220165][T10461]  do_syscall_64+0x55/0xb0
[  322.224702][T10461]  ? clear_bhb_loop+0x40/0x90
[  322.229409][T10461]  ? clear_bhb_loop+0x40/0x90
[  322.234128][T10461]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.240077][T10461] RIP: 0033:0x7f73ae19e559
[  322.244527][T10461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.264175][T10461] RSP: 002b:00007f73af09b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  322.272722][T10461] RAX: ffffffffffffffda RBX: 00007f73ae425fa0 RCX: 00007f73ae19e559
[  322.280752][T10461] RDX: 0000000000089901 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  322.288756][T10461] RBP: 00007f73ae2358b0 R08: 0000000000000000 R09: 0000000000000000
[  322.296788][T10461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.304876][T10461] R13: 00007f73ae426038 R14: 00007f73ae425fa0 R15: 00007fffc891d2e8
[  322.312894][T10461]  </TASK>
[  322.900373][T10452] loop5: detected capacity change from 0 to 40427
[  322.948470][T10452] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  322.959983][T10452] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  322.969289][T10482] tap0: tun_chr_ioctl cmd 1074025677
[  322.986445][T10482] tap0: linktype set to 769
[  322.996491][   T28] audit: type=1326 audit(1792080799.176:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640139e559 code=0x7ffc0000
[  323.028134][T10452] F2FS-fs (loop5): invalid crc value
[  323.093836][T10452] F2FS-fs (loop5): Found nat_bits in checkpoint
[  323.104638][   T28] audit: type=1326 audit(1792080799.176:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640139e559 code=0x7ffc0000
[  323.204880][   T28] audit: type=1326 audit(1792080799.176:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640139e559 code=0x7ffc0000
[  323.245046][   T28] audit: type=1326 audit(1792080799.176:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640139e559 code=0x7ffc0000
[  323.292220][   T28] audit: type=1326 audit(1792080799.216:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f640139e559 code=0x7ffc0000
[  323.343909][   T28] audit: type=1326 audit(1792080799.216:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f640139e2c2 code=0x7ffc0000
[  323.369186][T10452] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  323.380890][T10452] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  323.411516][   T28] audit: type=1326 audit(1792080799.216:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f640135ed8e code=0x7ffc0000
[  323.476766][   T28] audit: type=1326 audit(1792080799.236:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f640139e387 code=0x7ffc0000
[  323.569542][   T28] audit: type=1326 audit(1792080799.246:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.4.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f640135ed8e code=0x7ffc0000
[  323.933083][T10513] FAULT_INJECTION: forcing a failure.
[  323.933083][T10513] name failslab, interval 1, probability 0, space 0, times 0
[  323.991483][T10513] CPU: 0 PID: 10513 Comm: syz.1.1527 Not tainted syzkaller #0
[  323.999048][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  324.009166][T10513] Call Trace:
[  324.012585][T10513]  <TASK>
[  324.015599][T10513]  dump_stack_lvl+0x18c/0x250
[  324.020339][T10513]  ? show_regs_print_info+0x20/0x20
[  324.025592][T10513]  ? load_image+0x420/0x420
[  324.030164][T10513]  ? __might_sleep+0xe0/0xe0
[  324.034811][T10513]  ? __lock_acquire+0x7eb0/0x7eb0
[  324.039898][T10513]  should_fail_ex+0x394/0x4c0
[  324.044695][T10513]  should_failslab+0x9/0x20
[  324.049265][T10513]  slab_pre_alloc_hook+0x59/0x300
[  324.054371][T10513]  ? security_prepare_creds+0x4b/0x130
[  324.059884][T10513]  ? security_prepare_creds+0x4b/0x130
[  324.065399][T10513]  __kmem_cache_alloc_node+0x53/0x250
[  324.070852][T10513]  ? security_prepare_creds+0x4b/0x130
[  324.076386][T10513]  __kmalloc+0xa7/0x240
[  324.080614][T10513]  security_prepare_creds+0x4b/0x130
[  324.085969][T10513]  prepare_creds+0x427/0x5d0
[  324.090617][T10513]  lookup_user_key+0x316/0x1140
[  324.095509][T10513]  ? lookup_user_key_possessed+0x40/0x40
[  324.101181][T10513]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  324.107192][T10513]  ? __might_fault+0xaa/0x120
[  324.111901][T10513]  ? _copy_from_user+0xa5/0xe0
[  324.116712][T10513]  __se_sys_request_key+0x228/0x350
[  324.121962][T10513]  ? __x64_sys_request_key+0xb0/0xb0
[  324.127294][T10513]  ? lockdep_hardirqs_on+0x98/0x150
[  324.132787][T10513]  do_syscall_64+0x55/0xb0
[  324.137315][T10513]  ? clear_bhb_loop+0x40/0x90
[  324.142021][T10513]  ? clear_bhb_loop+0x40/0x90
[  324.147249][T10513]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  324.153205][T10513] RIP: 0033:0x7f290019e559
[  324.158163][T10513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.178510][T10513] RSP: 002b:00007f2900ff2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  324.186965][T10513] RAX: ffffffffffffffda RBX: 00007f2900425fa0 RCX: 00007f290019e559
[  324.194996][T10513] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180
[  324.203024][T10513] RBP: 00007f29002358b0 R08: 0000000000000000 R09: 0000000000000000
[  324.211044][T10513] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[  324.219055][T10513] R13: 00007f2900426038 R14: 00007f2900425fa0 R15: 00007ffe543750e8
[  324.227079][T10513]  </TASK>
[  324.800154][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'.
[  326.964382][ T5860] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  327.014937][T10605] tap0: tun_chr_ioctl cmd 1074025677
[  327.020520][T10605] tap0: linktype set to 769
[  327.186679][ T5860] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  327.197898][ T5860] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  327.223855][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.494139][ T5860] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device
[  327.543333][ T5860] wwan wwan0: port wwan0qmi0 attached
[  327.574251][   T51] Bluetooth: Unexpected start frame (len 4)
[  327.688558][ T5860] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, e2:c3:0a:e9:ca:91
[  327.892118][ T5960] usb 7-1: USB disconnect, device number 2
[  327.900128][ T5960] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device
[  328.014357][ T5960] wwan wwan0: port wwan0qmi0 disconnected
[  328.234436][T10635] Bluetooth: MGMT ver 1.22
[  328.503883][ T1191] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  328.546758][T10626] loop1: detected capacity change from 0 to 40427
[  328.595763][T10626] F2FS-fs (loop1): invalid crc value
[  328.630691][T10626] F2FS-fs (loop1): Found nat_bits in checkpoint
[  328.696415][ T1191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.720029][ T1191] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  328.773872][ T1191] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  328.829163][ T1191] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  328.839580][T10626] F2FS-fs (loop1): Start checkpoint disabled!
[  328.880018][ T1191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.925279][T10626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  329.368474][ T1191] cxacru_cm: 26 callbacks suppressed
[  329.368495][ T1191] cxacru 6-1:1.0: send of cm 0x91 failed (-71)
[  329.382235][ T1191] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  329.419081][ T1191] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  329.435952][ T1191] cxacru: probe of 6-1:1.0 failed with error -71
[  329.473264][ T1191] usb 6-1: USB disconnect, device number 10
[  329.582464][T10663] loop6: detected capacity change from 0 to 2048
[  329.688295][T10663] Alternate GPT is invalid, using primary GPT.
[  329.707102][T10663]  loop6: p2 p3 p7
[  329.845788][T10289] kworker/u4:17: attempt to access beyond end of device
[  329.845788][T10289] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  329.908451][T10289] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  332.276369][ T5860] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  332.478315][ T5860] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  332.508734][ T5860] usb 7-1: config 1 interface 0 has no altsetting 0
[  332.527581][ T5860] usb 7-1: string descriptor 0 read error: -22
[  332.534876][ T5860] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  332.545599][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.017164][ T5860] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  333.084781][ T5860] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:0926:3333.000D/input/input21
[  333.323346][ T5860] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  333.414911][ T5860] usb 7-1: USB disconnect, device number 3
[  333.646451][T10753] fido_id[10753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  334.386956][T10777] vivid-000: disconnect
[  334.464146][ T1191] vivid-000: reconnect
[  334.606415][ T5960] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  334.742309][T10791] loop6: detected capacity change from 0 to 512
[  334.803725][ T5960] usb 6-1: Using ep0 maxpacket: 8
[  334.813549][T10791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.814879][ T5960] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  334.841194][T10791] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.879206][ T5960] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  334.911383][ T5960] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  334.940872][ T5960] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  334.980528][ T5960] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  335.021725][ T5960] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  335.050836][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.128205][T10158] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.318158][ T5960] usb 6-1: usb_control_msg returned -32
[  335.334382][ T5960] usbtmc 6-1:16.0: can't read capabilities
[  335.832138][T10810] usbtmc 6-1:16.0: usb_control_msg returned -32
[  335.958480][    T8] usb 6-1: USB disconnect, device number 11
[  336.362637][T10806] loop6: detected capacity change from 0 to 40427
[  336.386612][T10806] F2FS-fs (loop6): invalid crc value
[  336.406373][T10806] F2FS-fs (loop6): Found nat_bits in checkpoint
[  336.510567][T10806] F2FS-fs (loop6): Start checkpoint disabled!
[  336.556340][T10806] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  336.621668][T10830] FAULT_INJECTION: forcing a failure.
[  336.621668][T10830] name failslab, interval 1, probability 0, space 0, times 0
[  336.732701][T10830] CPU: 0 PID: 10830 Comm: syz.4.1621 Not tainted syzkaller #0
[  336.740260][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  336.750377][T10830] Call Trace:
[  336.753704][T10830]  <TASK>
[  336.756684][T10830]  dump_stack_lvl+0x18c/0x250
[  336.761429][T10830]  ? show_regs_print_info+0x20/0x20
[  336.766677][T10830]  ? load_image+0x420/0x420
[  336.771244][T10830]  ? __lock_acquire+0x7eb0/0x7eb0
[  336.776492][T10830]  ? find_entry+0x16d/0x1a0
[  336.781069][T10830]  should_fail_ex+0x394/0x4c0
[  336.785908][T10830]  should_failslab+0x9/0x20
[  336.790478][T10830]  slab_pre_alloc_hook+0x59/0x300
[  336.795556][T10830]  ? __register_sysctl_table+0xa2c/0x1210
[  336.801328][T10830]  ? __register_sysctl_table+0xa2c/0x1210
[  336.807105][T10830]  __kmem_cache_alloc_node+0x53/0x250
[  336.812559][T10830]  ? __register_sysctl_table+0xa2c/0x1210
[  336.818335][T10830]  __kmalloc+0xa7/0x240
[  336.822566][T10830]  __register_sysctl_table+0xa2c/0x1210
[  336.828229][T10830]  __devinet_sysctl_register+0x35c/0x460
[  336.833932][T10830]  ? devinet_sysctl_register+0x1f0/0x1f0
[  336.839646][T10830]  devinet_init_net+0x32b/0x5c0
[  336.844562][T10830]  ops_init+0x391/0x640
[  336.848791][T10830]  setup_net+0x3b6/0xa20
[  336.853100][T10830]  ? copy_net_ns+0x530/0x530
[  336.857769][T10830]  ? copy_net_ns+0x347/0x530
[  336.862413][T10830]  ? down_read_killable+0x1d0/0x340
[  336.867676][T10830]  copy_net_ns+0x361/0x530
[  336.872161][T10830]  create_new_namespaces+0x3ce/0x700
[  336.877533][T10830]  unshare_nsproxy_namespaces+0x11a/0x160
[  336.883326][T10830]  ksys_unshare+0x4fa/0x8f0
[  336.887904][T10830]  ? sighand_ctor+0x50/0x50
[  336.892521][T10830]  ? lock_chain_count+0x20/0x20
[  336.897439][T10830]  ? syscall_enter_from_user_mode+0x25/0x80
[  336.903395][T10830]  __x64_sys_unshare+0x38/0x40
[  336.908220][T10830]  do_syscall_64+0x55/0xb0
[  336.912723][T10830]  ? clear_bhb_loop+0x40/0x90
[  336.917457][T10830]  ? clear_bhb_loop+0x40/0x90
[  336.922203][T10830]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  336.928188][T10830] RIP: 0033:0x7f640139e559
[  336.932653][T10830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  336.952318][T10830] RSP: 002b:00007f64022b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  336.960815][T10830] RAX: ffffffffffffffda RBX: 00007f6401625fa0 RCX: 00007f640139e559
[  336.968825][T10830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  336.976856][T10830] RBP: 00007f64014358b0 R08: 0000000000000000 R09: 0000000000000000
[  336.984860][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.992947][T10830] R13: 00007f6401626038 R14: 00007f6401625fa0 R15: 00007fffe327c028
[  337.000962][T10830]  </TASK>
[  337.044721][T10830] sysctl could not get directory: /net/ipv4/conf -12
[  337.406782][T10848] loop1: detected capacity change from 0 to 2048
[  337.476972][T10848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.491365][T10848] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.538865][T10848] fs-verity: sha512 using implementation "sha512-avx2"
[  337.621838][   T59] kworker/u4:4: attempt to access beyond end of device
[  337.621838][   T59] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  337.705467][   T59] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  337.741355][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.640301][T10892] FAULT_INJECTION: forcing a failure.
[  338.640301][T10892] name fail_futex, interval 1, probability 0, space 0, times 0
[  338.682038][T10896] loop1: detected capacity change from 0 to 128
[  338.703722][T10892] CPU: 1 PID: 10892 Comm: syz.5.1639 Not tainted syzkaller #0
[  338.711288][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  338.721430][T10892] Call Trace:
[  338.724764][T10892]  <TASK>
[  338.727746][T10892]  dump_stack_lvl+0x18c/0x250
[  338.732502][T10892]  ? show_regs_print_info+0x20/0x20
[  338.737774][T10892]  ? load_image+0x420/0x420
[  338.742390][T10892]  ? get_user_pages_fast_only+0xa0/0xa0
[  338.748018][T10892]  ? asan.module_dtor+0x20/0x20
[  338.752953][T10892]  should_fail_ex+0x394/0x4c0
[  338.757705][T10892]  get_futex_key+0x857/0x1030
[  338.762453][T10892]  ? futex_setup_timer+0xc0/0xc0
[  338.767454][T10892]  ? futex_wait_queue+0x138/0x1b0
[  338.772538][T10892]  futex_wake_op+0x163/0xd40
[  338.777177][T10892]  ? futex_wake+0x4f0/0x4f0
[  338.781759][T10892]  ? file_end_write+0x159/0x250
[  338.786647][T10892]  ? vfs_write+0x5de/0x9a0
[  338.791128][T10892]  do_futex+0x385/0x3e0
[  338.795324][T10892]  ? __ia32_sys_get_robust_list+0x110/0x110
[  338.801277][T10892]  __se_sys_futex+0x3a9/0x440
[  338.805986][T10892]  ? __x64_sys_futex+0xf0/0xf0
[  338.810807][T10892]  ? __x64_sys_futex+0x21/0xf0
[  338.815623][T10892]  do_syscall_64+0x55/0xb0
[  338.820090][T10892]  ? clear_bhb_loop+0x40/0x90
[  338.824814][T10892]  ? clear_bhb_loop+0x40/0x90
[  338.829539][T10892]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.835495][T10892] RIP: 0033:0x7f288839e559
[  338.839959][T10892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.859707][T10892] RSP: 002b:00007f288933a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  338.869656][T10892] RAX: ffffffffffffffda RBX: 00007f2888625fa0 RCX: 00007f288839e559
[  338.877845][T10892] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 00002000000001c0
[  338.886209][T10892] RBP: 00007f28884358b0 R08: 00002000000001c0 R09: 0000000000000002
[  338.894214][T10892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.902221][T10892] R13: 00007f2888626038 R14: 00007f2888625fa0 R15: 00007ffeabaa46c8
[  338.910253][T10892]  </TASK>
[  339.127472][T10904] FAULT_INJECTION: forcing a failure.
[  339.127472][T10904] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  339.145022][T10904] CPU: 0 PID: 10904 Comm: syz.6.1644 Not tainted syzkaller #0
[  339.152577][T10904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  339.162700][T10904] Call Trace:
[  339.166054][T10904]  <TASK>
[  339.169047][T10904]  dump_stack_lvl+0x18c/0x250
[  339.173801][T10904]  ? show_regs_print_info+0x20/0x20
[  339.179061][T10904]  ? load_image+0x420/0x420
[  339.183639][T10904]  ? __might_fault+0xaa/0x120
[  339.188383][T10904]  ? __lock_acquire+0x7eb0/0x7eb0
[  339.193494][T10904]  should_fail_ex+0x394/0x4c0
[  339.198262][T10904]  _copy_from_user+0x2f/0xe0
[  339.202928][T10904]  __sys_bpf+0x23e/0x890
[  339.207247][T10904]  ? bpf_link_show_fdinfo+0x560/0x560
[  339.212705][T10904]  ? lock_chain_count+0x20/0x20
[  339.217640][T10904]  __x64_sys_bpf+0x7c/0x90
[  339.222131][T10904]  do_syscall_64+0x55/0xb0
[  339.226657][T10904]  ? clear_bhb_loop+0x40/0x90
[  339.231408][T10904]  ? clear_bhb_loop+0x40/0x90
[  339.236252][T10904]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.243380][T10904] RIP: 0033:0x7f73ae19e559
[  339.247891][T10904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.267572][T10904] RSP: 002b:00007f73af09b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  339.276062][T10904] RAX: ffffffffffffffda RBX: 00007f73ae425fa0 RCX: 00007f73ae19e559
[  339.284139][T10904] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000
[  339.292177][T10904] RBP: 00007f73ae2358b0 R08: 0000000000000000 R09: 0000000000000000
[  339.300213][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.308256][T10904] R13: 00007f73ae426038 R14: 00007f73ae425fa0 R15: 00007fffc891d2e8
[  339.316403][T10904]  </TASK>
[  339.456101][T10906] FAULT_INJECTION: forcing a failure.
[  339.456101][T10906] name failslab, interval 1, probability 0, space 0, times 0
[  339.483271][   T28] audit: type=1800 audit(1792080815.656:721): pid=10908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1645" name="features" dev="configfs" ino=25628 res=0 errno=0
[  339.483976][T10906] CPU: 0 PID: 10906 Comm: syz.4.1646 Not tainted syzkaller #0
[  339.511251][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  339.521366][T10906] Call Trace:
[  339.524692][T10906]  <TASK>
[  339.527672][T10906]  dump_stack_lvl+0x18c/0x250
[  339.532409][T10906]  ? show_regs_print_info+0x20/0x20
[  339.537671][T10906]  ? load_image+0x420/0x420
[  339.542269][T10906]  ? __lock_acquire+0x7eb0/0x7eb0
[  339.547356][T10906]  should_fail_ex+0x394/0x4c0
[  339.552085][T10906]  should_failslab+0x9/0x20
[  339.556635][T10906]  slab_pre_alloc_hook+0x59/0x300
[  339.561698][T10906]  ? alloc_pipe_info+0xe8/0x4b0
[  339.566592][T10906]  __kmem_cache_alloc_node+0x53/0x250
[  339.572101][T10906]  ? alloc_pipe_info+0xe8/0x4b0
[  339.576994][T10906]  kmalloc_trace+0x2a/0xe0
[  339.581457][T10906]  alloc_pipe_info+0xe8/0x4b0
[  339.586187][T10906]  splice_direct_to_actor+0x749/0x8e0
[  339.591608][T10906]  ? aa_file_perm+0x11b/0xee0
[  339.596324][T10906]  ? direct_file_splice_eof+0xb0/0xb0
[  339.601729][T10906]  ? aa_file_perm+0x3e3/0xee0
[  339.606444][T10906]  ? end_current_label_crit_section+0x149/0x170
[  339.612720][T10906]  ? warn_unsupported+0xc0/0xc0
[  339.617601][T10906]  ? common_file_perm+0x198/0x1f0
[  339.622667][T10906]  ? fsnotify_perm+0x5d/0x5e0
[  339.627397][T10906]  ? security_file_permission+0x79/0xa0
[  339.633046][T10906]  do_splice_direct+0x1d5/0x2f0
[  339.637964][T10906]  ? splice_direct_to_actor+0x8e0/0x8e0
[  339.643557][T10906]  ? rcu_read_lock_any_held+0xb4/0x140
[  339.649063][T10906]  ? do_splice_direct+0x2f0/0x2f0
[  339.654138][T10906]  do_sendfile+0x52b/0xe80
[  339.658622][T10906]  ? __ia32_sys_get_robust_list+0x110/0x110
[  339.664558][T10906]  ? do_pwritev+0x3a0/0x3a0
[  339.669107][T10906]  __se_sys_sendfile64+0x145/0x1a0
[  339.674254][T10906]  ? lock_chain_count+0x20/0x20
[  339.679140][T10906]  ? __x64_sys_sendfile64+0xb0/0xb0
[  339.684378][T10906]  ? lockdep_hardirqs_on+0x98/0x150
[  339.689633][T10906]  do_syscall_64+0x55/0xb0
[  339.694097][T10906]  ? clear_bhb_loop+0x40/0x90
[  339.698823][T10906]  ? clear_bhb_loop+0x40/0x90
[  339.703547][T10906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.709499][T10906] RIP: 0033:0x7f640139e559
[  339.713959][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.733653][T10906] RSP: 002b:00007f64022b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  339.742140][T10906] RAX: ffffffffffffffda RBX: 00007f6401625fa0 RCX: 00007f640139e559
[  339.750162][T10906] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  339.758173][T10906] RBP: 00007f64014358b0 R08: 0000000000000000 R09: 0000000000000000
[  339.766176][T10906] R10: 0000000000008112 R11: 0000000000000246 R12: 0000000000000000
[  339.774172][T10906] R13: 00007f6401626038 R14: 00007f6401625fa0 R15: 00007fffe327c028
[  339.782216][T10906]  </TASK>
[  339.794731][    T8] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  340.063543][    T8] usb 6-1: unable to get BOS descriptor or descriptor too short
[  340.077785][    T8] usb 6-1: unable to read config index 0 descriptor/start: -71
[  340.098379][    T8] usb 6-1: can't read configurations, error -71
[  340.333471][T10927] rxe_eth0 speed is unknown, defaulting to 1000
[  341.470828][T10971] loop6: detected capacity change from 0 to 1024
[  341.551219][T10971] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  341.668147][T10971] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[  341.678217][T10971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.724090][T10976] loop1: detected capacity change from 0 to 512
[  341.790448][T10976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  341.816579][T10976] System zones: 1-12
[  341.841912][T10158] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.852941][T10976] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.1670: missing EA_INODE flag
[  341.907299][T10976] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1670: error while reading EA inode 12 err=-117
[  341.987795][T10976] EXT4-fs (loop1): 1 orphan inode deleted
[  342.023547][T10976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.247129][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.904491][   T28] audit: type=1326 audit(1792080819.086:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.5.1683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f288839e559 code=0x0
[  343.006230][T11012] loop1: detected capacity change from 0 to 128
[  343.040084][T11012] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  343.064988][T11012] hpfs: filesystem error: improperly stopped
[  343.071275][T11012] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  343.091690][T11012] hpfs: You really don't want any checks? You are crazy...
[  343.099554][T11012] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  343.143863][T11012] hpfs: code page support is disabled
[  343.181435][T11012] hpfs: hpfs_map_4sectors(): unaligned read
[  343.199824][T11012] hpfs: hpfs_map_4sectors(): unaligned read
[  343.218175][T11012] hpfs: filesystem error: unable to find root dir
[  343.919237][T11023] loop5: detected capacity change from 0 to 128
[  344.043515][T11017] loop1: detected capacity change from 0 to 32768
[  344.393098][   T28] audit: type=1800 audit(1792080820.566:723): pid=11017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1686" name="file1" dev="loop1" ino=4 res=0 errno=0
[  344.748878][   T28] audit: type=1800 audit(1792080820.926:724): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1686" name="file1" dev="loop1" ino=4 res=0 errno=0
[  345.219325][T11043] loop5: detected capacity change from 0 to 2048
[  345.528634][T11048] loop5: detected capacity change from 0 to 512
[  345.585799][T11048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.644401][T11048] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.107569][ T8765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.501985][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1698'.
[  346.514419][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1698'.
[  346.542166][T11071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.831234][T11079] bridge0: port 3(vlan2) entered blocking state
[  346.864329][T11079] bridge0: port 3(vlan2) entered disabled state
[  346.870890][T11079] vlan2: entered allmulticast mode
[  346.937470][T11079] dummy0: entered allmulticast mode
[  346.955124][T11079] vlan2: entered promiscuous mode
[  346.963700][T11079] dummy0: entered promiscuous mode
[  348.059103][T11087] loop5: detected capacity change from 0 to 32768
[  348.111805][T11087] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  348.218743][   T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  348.244484][ T5842] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  348.305804][T11087] XFS (loop5): Ending clean mount
[  348.426142][T11087] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  348.443963][ T5842] usb 2-1: Using ep0 maxpacket: 16
[  348.459287][   T23] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  348.476535][ T5842] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  348.493750][   T23] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  348.503742][ T5842] usb 2-1: config 0 has no interface number 0
[  348.509922][ T5842] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  348.537978][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.590848][ T5842] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  348.646220][   T23] as10x_usb: device has been detected
[  348.652542][   T23] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  348.690553][ T5842] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  348.728936][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.757725][ T5842] usb 2-1: Product: syz
[  348.762004][ T5842] usb 2-1: Manufacturer: syz
[  348.774412][   T23] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  348.788670][ T5842] usb 2-1: SerialNumber: syz
[  348.827440][   T23] as10x_usb: error during firmware upload part1
[  348.836264][ T5842] usb 2-1: config 0 descriptor??
[  348.842242][T11106] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  348.854600][T11106] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  348.863248][   T23] Registered device Abilis Systems DVB-Titan
[  348.894584][ T8765] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  349.104455][T11106] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  349.111906][T11106] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  349.346686][ T5842] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  349.477225][   T23] usb 7-1: USB disconnect, device number 4
[  349.558965][   T23] Unregistered device Abilis Systems DVB-Titan
[  349.561071][   T23] as10x_usb: device has been disconnected
[  350.185238][ T5842] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  350.231164][ T5842] asix: probe of 2-1:0.34 failed with error -71
[  350.269530][ T5842] usb 2-1: USB disconnect, device number 13
[  350.513816][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  350.966339][T11170] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1713'.
[  353.180096][T11233] input: syz0 as /devices/virtual/input/input22
[  353.619308][T11228] loop6: detected capacity change from 0 to 32768
[  353.647858][T11228] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1729 (11228)
[  353.701657][T11228] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  353.729574][T11228] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  353.764079][T11228] BTRFS info (device loop6): force clearing of disk cache
[  353.784915][T11228] BTRFS info (device loop6): enabling auto defrag
[  353.798635][T11228] BTRFS info (device loop6): max_inline at 0
[  353.822282][T11228] BTRFS info (device loop6): enabling disk space caching
[  353.845423][T11228] BTRFS info (device loop6): disk space caching is enabled
[  353.923111][T11246] bridge0: port 4(vlan2) entered blocking state
[  353.941607][T11246] bridge0: port 4(vlan2) entered disabled state
[  353.960891][T11246] vlan2: entered allmulticast mode
[  353.966828][T11246] dummy0: entered allmulticast mode
[  353.974720][T11246] vlan2: entered promiscuous mode
[  353.980393][T11246] dummy0: entered promiscuous mode
[  354.074427][T11228] BTRFS info (device loop6): enabling ssd optimizations
[  354.100994][T11228] BTRFS info (device loop6): rebuilding free space tree
[  354.157609][T11228] BTRFS info (device loop6): disabling free space tree
[  354.176725][T11228] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  354.203947][T11228] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  354.618886][   T59] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  354.757452][T10158] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  355.925201][T11276] loop1: detected capacity change from 0 to 40427
[  355.945878][T11276] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  355.963560][T11276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  355.989734][T11276] F2FS-fs (loop1): invalid crc value
[  356.041120][T11276] F2FS-fs (loop1): Found nat_bits in checkpoint
[  356.250540][T11276] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  356.262080][T11276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  356.370930][   T28] audit: type=1804 audit(1792080832.546:725): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1741" name="/newroot/472/file0/bus" dev="loop1" ino=10 res=1 errno=0
[  356.410787][T11303] loop6: detected capacity change from 0 to 4096
[  356.483741][T11303] ntfs3: loop6: Failed to load $Extend (-22).
[  356.489893][T11303] ntfs3: loop6: Failed to initialize $Extend.
[  356.507890][   T28] audit: type=1800 audit(1792080832.676:726): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1741" name="file0" dev="loop1" ino=11 res=0 errno=0
[  356.655814][T11303] ntfs3: loop6: ino=5, "/" mi_enum_attr
[  356.670367][T11303] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  356.705312][T11303] ntfs3: loop6: ino=5, mi_enum_attr
[  356.712424][T11303] ntfs3: loop6: ino=1e, "file1" failed to open parent directory r=5 to write
[  356.987175][T11310] loop6: detected capacity change from 0 to 256
[  357.052606][   T28] audit: type=1800 audit(1792080833.216:727): pid=11310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1753" name="file0" dev="loop6" ino=1048688 res=0 errno=0
[  358.481275][T11362] loop6: detected capacity change from 0 to 256
[  358.708541][T11367] loop6: detected capacity change from 0 to 1024
[  358.722121][T11367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  358.779637][T11367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.928355][T10158] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.194666][   T27] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  359.303192][T11392] FAULT_INJECTION: forcing a failure.
[  359.303192][T11392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.318504][T11392] CPU: 1 PID: 11392 Comm: syz.5.1785 Not tainted syzkaller #0
[  359.326054][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  359.336165][T11392] Call Trace:
[  359.339492][T11392]  <TASK>
[  359.342469][T11392]  dump_stack_lvl+0x18c/0x250
[  359.347311][T11392]  ? show_regs_print_info+0x20/0x20
[  359.352561][T11392]  ? load_image+0x420/0x420
[  359.357161][T11392]  ? __might_fault+0xaa/0x120
[  359.361945][T11392]  ? __lock_acquire+0x7eb0/0x7eb0
[  359.367019][T11392]  ? __virt_addr_valid+0x10c/0x380
[  359.372185][T11392]  should_fail_ex+0x394/0x4c0
[  359.376941][T11392]  _copy_to_user+0x2f/0xa0
[  359.381427][T11392]  bpf_verifier_vlog+0x432/0x840
[  359.386462][T11392]  __btf_verifier_log+0xe3/0x140
[  359.391449][T11392]  ? btf_check_sec_info+0x350/0x350
[  359.396698][T11392]  ? __lock_acquire+0x7eb0/0x7eb0
[  359.401774][T11392]  ? __virt_addr_valid+0x10c/0x380
[  359.406953][T11392]  ? btf_parse_hdr+0x1f0/0x700
[  359.411793][T11392]  btf_parse_hdr+0x3b2/0x700
[  359.416439][T11392]  btf_new_fd+0x397/0x9e0
[  359.420827][T11392]  ? bpf_btf_show_fdinfo+0x80/0x80
[  359.426102][T11392]  ? capable+0x88/0xe0
[  359.430258][T11392]  __sys_bpf+0x670/0x890
[  359.434541][T11392]  ? bpf_link_show_fdinfo+0x560/0x560
[  359.440330][T11392]  ? lock_chain_count+0x20/0x20
[  359.445240][T11392]  __x64_sys_bpf+0x7c/0x90
[  359.449884][T11392]  do_syscall_64+0x55/0xb0
[  359.454442][T11392]  ? clear_bhb_loop+0x40/0x90
[  359.459245][T11392]  ? clear_bhb_loop+0x40/0x90
[  359.463951][T11392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.469944][T11392] RIP: 0033:0x7f288839e559
[  359.474394][T11392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.494040][T11392] RSP: 002b:00007f288933a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  359.502503][T11392] RAX: ffffffffffffffda RBX: 00007f2888625fa0 RCX: 00007f288839e559
[  359.510509][T11392] RDX: 000000000000001f RSI: 0000200000000500 RDI: 0000000000000012
[  359.518510][T11392] RBP: 00007f28884358b0 R08: 0000000000000000 R09: 0000000000000000
[  359.526511][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  359.534515][T11392] R13: 00007f2888626038 R14: 00007f2888625fa0 R15: 00007ffeabaa46c8
[  359.542529][T11392]  </TASK>
[  359.559404][   T27] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  359.962285][T11384] ceph: No mds server is up or the cluster is laggy
[  359.962529][T11388] ceph: No mds server is up or the cluster is laggy
[  360.258341][T11405] loop5: detected capacity change from 0 to 1024
[  360.300124][T11405] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  360.356717][T11405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.525748][ T8765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.202403][T11446] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1807'.
[  361.323792][   T27] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  361.353237][T11419] ceph: No mds server is up or the cluster is laggy
[  361.363560][T11422] ceph: No mds server is up or the cluster is laggy
[  361.548114][   T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.575095][   T27] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  361.585296][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.630130][   T27] as10x_usb: device has been detected
[  361.644793][   T27] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  361.704411][   T27] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  361.726226][   T27] as10x_usb: error during firmware upload part1
[  361.739756][   T27] Registered device Abilis Systems DVB-Titan
[  362.059569][T11448] loop1: detected capacity change from 0 to 32768
[  362.512464][T11448] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  362.570569][T11448] XFS (loop1): Ending clean mount
[  362.694896][T11448] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  362.763991][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'.
[  362.856752][   T27] usb 7-1: USB disconnect, device number 5
[  362.921258][   T27] Unregistered device Abilis Systems DVB-Titan
[  362.929434][   T27] as10x_usb: device has been disconnected
[  362.945155][T11469] team_slave_1 (unregistering): left promiscuous mode
[  362.952122][T11469] team_slave_1 (unregistering): left allmulticast mode
[  362.972062][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  362.992513][T11469] team0: Port device team_slave_1 removed
[  363.764231][T11496] fuse: Bad value for 'fd'
[  363.884883][T11499] FAULT_INJECTION: forcing a failure.
[  363.884883][T11499] name failslab, interval 1, probability 0, space 0, times 0
[  363.914036][T11499] CPU: 0 PID: 11499 Comm: syz.5.1824 Not tainted syzkaller #0
[  363.921614][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  363.931726][T11499] Call Trace:
[  363.935056][T11499]  <TASK>
[  363.938026][T11499]  dump_stack_lvl+0x18c/0x250
[  363.942774][T11499]  ? show_regs_print_info+0x20/0x20
[  363.948040][T11499]  ? load_image+0x420/0x420
[  363.952622][T11499]  ? __might_sleep+0xe0/0xe0
[  363.957291][T11499]  ? __lock_acquire+0x7eb0/0x7eb0
[  363.962396][T11499]  should_fail_ex+0x394/0x4c0
[  363.967703][T11499]  should_failslab+0x9/0x20
[  363.972275][T11499]  slab_pre_alloc_hook+0x59/0x300
[  363.977408][T11499]  ? slab_free_freelist_hook+0x130/0x1a0
[  363.983190][T11499]  ? asymmetric_key_generate_id+0x60/0x150
[  363.989126][T11499]  ? asymmetric_key_generate_id+0x60/0x150
[  363.994997][T11499]  __kmem_cache_alloc_node+0x53/0x250
[  364.000526][T11499]  ? asymmetric_key_generate_id+0x60/0x150
[  364.006389][T11499]  __kmalloc+0xa7/0x240
[  364.010587][T11499]  ? x509_get_sig_params+0x4af/0x860
[  364.015914][T11499]  asymmetric_key_generate_id+0x60/0x150
[  364.021590][T11499]  x509_cert_parse+0x53e/0x7b0
[  364.026407][T11499]  x509_key_preparse+0x64/0x6c0
[  364.031289][T11499]  ? down_read+0x1ac/0x2e0
[  364.035828][T11499]  asymmetric_key_preparse+0xa9/0x140
[  364.041241][T11499]  __key_create_or_update+0x3a6/0xa60
[  364.046688][T11499]  ? key_create_or_update+0x60/0x60
[  364.051926][T11499]  ? bpf_lsm_key_permission+0x9/0x10
[  364.057261][T11499]  ? lookup_user_key+0xb66/0x1140
[  364.062322][T11499]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[  364.068518][T11499]  key_create_or_update+0x42/0x60
[  364.073588][T11499]  __se_sys_add_key+0x34f/0x410
[  364.078484][T11499]  ? __x64_sys_add_key+0xc0/0xc0
[  364.083469][T11499]  ? lockdep_hardirqs_on+0x98/0x150
[  364.088733][T11499]  ? __x64_sys_add_key+0x20/0xc0
[  364.094241][T11499]  do_syscall_64+0x55/0xb0
[  364.098690][T11499]  ? clear_bhb_loop+0x40/0x90
[  364.103429][T11499]  ? clear_bhb_loop+0x40/0x90
[  364.108143][T11499]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  364.114080][T11499] RIP: 0033:0x7f288839e559
[  364.118542][T11499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.138194][T11499] RSP: 002b:00007f288933a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  364.146649][T11499] RAX: ffffffffffffffda RBX: 00007f2888625fa0 RCX: 00007f288839e559
[  364.154662][T11499] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 00002000000003c0
[  364.162663][T11499] RBP: 00007f28884358b0 R08: ffffffffffffffff R09: 0000000000000000
[  364.170668][T11499] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  364.178760][T11499] R13: 00007f2888626038 R14: 00007f2888625fa0 R15: 00007ffeabaa46c8
[  364.186791][T11499]  </TASK>
[  365.057384][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1832'.
[  365.467961][T11540] netlink: 'syz.1.1837': attribute type 1 has an invalid length.
[  365.532888][T11540] 8021q: adding VLAN 0 to HW filter on device bond3
[  365.615201][T11544] bond3: (slave geneve2): making interface the new active one
[  365.636480][T11544] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  365.886582][T11551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  365.945480][T11556] pimreg: entered allmulticast mode
[  366.007860][T11557] loop6: detected capacity change from 0 to 256
[  366.015623][T11557] exfat: Deprecated parameter 'namecase'
[  366.021360][T11557] exfat: Deprecated parameter 'namecase'
[  366.049316][T11557] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  366.212887][T11557] exFAT-fs (loop6): invalid start cluster (4278190088)
[  366.240501][T11561] IPVS: sed: FWM 3 0x00000003 - no destination available
[  366.851610][T11584] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1857'.
[  366.893902][T11584] bridge_slave_0: left allmulticast mode
[  366.899626][T11584] bridge_slave_0: left promiscuous mode
[  366.920283][T11584] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.126656][T11591] loop5: detected capacity change from 0 to 1024
[  367.213826][T11591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.800530][T11598] FAULT_INJECTION: forcing a failure.
[  367.800530][T11598] name failslab, interval 1, probability 0, space 0, times 0
[  367.834842][T11598] CPU: 1 PID: 11598 Comm: syz.6.1863 Not tainted syzkaller #0
[  367.842388][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  367.852494][T11598] Call Trace:
[  367.855819][T11598]  <TASK>
[  367.858788][T11598]  dump_stack_lvl+0x18c/0x250
[  367.863519][T11598]  ? show_regs_print_info+0x20/0x20
[  367.868768][T11598]  ? load_image+0x420/0x420
[  367.873345][T11598]  ? __might_sleep+0xe0/0xe0
[  367.878082][T11598]  ? __lock_acquire+0x7eb0/0x7eb0
[  367.883175][T11598]  should_fail_ex+0x394/0x4c0
[  367.887922][T11598]  should_failslab+0x9/0x20
[  367.892480][T11598]  slab_pre_alloc_hook+0x59/0x300
[  367.897538][T11598]  ? key_user_lookup+0x1bc/0x450
[  367.902513][T11598]  kmem_cache_alloc+0x5a/0x2c0
[  367.907312][T11598]  ? key_alloc+0x306/0x1030
[  367.911859][T11598]  key_alloc+0x306/0x1030
[  367.916240][T11598]  keyring_alloc+0x45/0xb0
[  367.920696][T11598]  keyctl_get_persistent+0x4b5/0x7a0
[  367.926012][T11598]  ? futex_wait_setup+0x270/0x270
[  367.931099][T11598]  ? proc_key_users_show+0x310/0x310
[  367.936455][T11598]  __se_sys_keyctl+0x829/0xb50
[  367.941265][T11598]  ? __x64_sys_keyctl+0xc0/0xc0
[  367.946143][T11598]  ? do_futex+0x2ff/0x3e0
[  367.950506][T11598]  ? __ia32_sys_get_robust_list+0x110/0x110
[  367.956434][T11598]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  367.962446][T11598]  ? lock_chain_count+0x20/0x20
[  367.967340][T11598]  ? lockdep_hardirqs_on+0x98/0x150
[  367.972570][T11598]  ? __x64_sys_keyctl+0x20/0xc0
[  367.977465][T11598]  do_syscall_64+0x55/0xb0
[  367.981903][T11598]  ? clear_bhb_loop+0x40/0x90
[  367.986620][T11598]  ? clear_bhb_loop+0x40/0x90
[  367.991332][T11598]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  367.997271][T11598] RIP: 0033:0x7f73ae19e559
[  368.001714][T11598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.021356][T11598] RSP: 002b:00007f73af09b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  368.029819][T11598] RAX: ffffffffffffffda RBX: 00007f73ae425fa0 RCX: 00007f73ae19e559
[  368.037823][T11598] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016
[  368.045833][T11598] RBP: 00007f73ae2358b0 R08: 0000000000000000 R09: 0000000000000000
[  368.053832][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.061840][T11598] R13: 00007f73ae426038 R14: 00007f73ae425fa0 R15: 00007fffc891d2e8
[  368.069867][T11598]  </TASK>
[  368.190359][ T8765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.781376][T11614] loop5: detected capacity change from 0 to 512
[  368.797428][T11614] EXT4-fs: Ignoring removed bh option
[  368.837466][T11614] EXT4-fs (loop5): Test dummy encryption mode enabled
[  368.863810][T11614] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  369.011248][T11621] loop1: detected capacity change from 0 to 256
[  369.053003][T11621] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  369.426650][T11635] sg_write: data in/out 2143289310/14 bytes for SCSI command 0x0-- guessing data in;
[  369.426650][T11635]    program syz.1.1876 not setting count and/or reply_len properly
[  369.688587][T11650] loop6: detected capacity change from 0 to 512
[  369.701363][T11650] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  369.726790][T11650] EXT4-fs (loop6): 1 truncate cleaned up
[  369.734455][T11650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.755537][T11650] EXT4-fs error (device loop6): ext4_empty_dir:3156: inode #2: block 13: comm syz.6.1884: bad entry in directory: inode out of bounds - offset=12, inode=2048, rec_len=12, size=1024 fake=1
[  369.798061][T11650] EXT4-fs (loop6): Remounting filesystem read-only
[  369.804828][T11650] EXT4-fs warning (device loop6): ext4_empty_dir:3158: inode #2: comm syz.6.1884: directory missing '..'
[  369.817952][T11650] EXT4-fs warning (device loop6): ext4_empty_dir:3158: inode #2: comm syz.6.1884: directory missing '..'
[  369.859881][T10158] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.902401][T11655] loop5: detected capacity change from 0 to 1024
[  369.945015][T11655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.142676][T11662] loop6: detected capacity change from 0 to 1024
[  370.154899][T11662] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  370.213952][T11662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.365190][T11662] EXT4-fs error (device loop6): ext4_find_dest_de:2117: inode #12: block 7: comm syz.6.1887: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  370.396325][T11662] EXT4-fs (loop6): Remounting filesystem read-only
[  370.424103][T11667] overlayfs: failed to get metacopy (-5)
[  370.770318][ T8765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.991969][T10158] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.194460][T10276] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.421282][T10276] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.596365][T10276] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.867018][T10276] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.924086][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'.
[  372.710912][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  372.729319][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  372.739001][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  372.769837][T11693] loop5: detected capacity change from 0 to 32768
[  372.791160][T11693] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1900 (11693)
[  372.794598][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  372.825276][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  372.836490][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  372.983732][T11693] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  373.034939][T11693] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  373.090153][T11693] BTRFS info (device loop5): using free space tree
[  373.109671][T11712] rxe_eth0 speed is unknown, defaulting to 1000
[  373.245110][T11693] BTRFS info (device loop5): enabling ssd optimizations
[  373.252142][T11693] BTRFS info (device loop5): auto enabling async discard
[  373.398631][ T8765] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  373.763938][ T5783] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3
[  373.791077][ T5783] ref_tracker: syz_tun@ffff8880619385b8 has 1/2 users at
[  373.791077][ T5783]      netdev_get_by_index+0x79/0xa0
[  373.791077][ T5783]      fib6_nh_init+0x1ff/0x1fe0
[  373.791077][ T5783]      ip6_route_info_create+0x96c/0x1260
[  373.791077][ T5783]      addrconf_f6i_alloc+0x1fa/0x440
[  373.791077][ T5783]      ipv6_add_addr+0x5a4/0x10d0
[  373.791077][ T5783]      inet6_addr_add+0x563/0xb30
[  373.791077][ T5783]      inet6_rtm_newaddr+0x6fd/0x9d0
[  373.791077][ T5783]      rtnetlink_rcv_msg+0x843/0xf90
[  373.791077][ T5783]      netlink_rcv_skb+0x235/0x4c0
[  373.791077][ T5783]      netlink_unicast+0x7b1/0x930
[  373.791077][ T5783]      netlink_sendmsg+0x8d0/0xbf0
[  373.791077][ T5783]      __sys_sendto+0x4a9/0x6b0
[  373.791077][ T5783]      __x64_sys_sendto+0xde/0xf0
[  373.791077][ T5783]      do_syscall_64+0x55/0xb0
[  373.791077][ T5783]      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  373.791077][ T5783] 
[  373.877831][ T5783] ref_tracker: syz_tun@ffff8880619385b8 has 1/2 users at
[  373.877831][ T5783]      ipv6_add_dev+0x407/0x11f0
[  373.877831][ T5783]      addrconf_notify+0x67b/0x1010
[  373.877831][ T5783]      notifier_call_chain+0x18f/0x380
[  373.877831][ T5783]      register_netdevice+0x1670/0x1ba0
[  373.877831][ T5783]      tun_set_iff+0x82b/0xea0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  373.877831][ T5783]      __tun_chr_ioctl+0x7e0/0x2070
[  373.877831][ T5783]      __se_sys_ioctl+0xfd/0x170
[  373.877831][ T5783]      do_syscall_64+0x55/0xb0
[  373.877831][ T5783]      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  373.877831][ T5783] 
[  374.915573][   T51] Bluetooth: hci3: command tx timeout
[  375.230834][ T5777] tipc: Resetting bearer <eth:syz_tun>
[  375.317142][ T5777] tipc: Disabling bearer <eth:syz_tun>
[  376.205064][T10276] hsr_slave_0: left promiscuous mode
[  376.215501][T10276] hsr_slave_1: left promiscuous mode
[  376.253295][T10276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.265319][T10276] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.285264][T10276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.292896][T10276] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.308004][T10276] vlan2: left allmulticast mode
[  376.314200][T10276] dummy0: left allmulticast mode
[  376.319203][T10276] vlan2: left promiscuous mode
[  376.332625][T10276] dummy0: left promiscuous mode
[  376.338642][T10276] bridge0: port 3(vlan2) entered disabled state
[  376.357565][T10276] bridge_slave_1: left allmulticast mode
[  376.363284][T10276] bridge_slave_1: left promiscuous mode
[  376.377323][T10276] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.395197][T10276] bridge_slave_0: left allmulticast mode
[  376.400924][T10276] bridge_slave_0: left promiscuous mode
[  376.423855][T10276] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.482436][T10276] veth1_macvtap: left promiscuous mode
[  376.501518][T10276] veth0_macvtap: left promiscuous mode
[  376.507942][T10276] veth1_vlan: left promiscuous mode
[  376.513341][T10276] veth0_vlan: left promiscuous mode
[  377.010913][ T5780] Bluetooth: hci3: command tx timeout
[  377.643199][T10276] team0 (unregistering): Port device team_slave_1 removed
[  377.713186][T10276] team0 (unregistering): Port device team_slave_0 removed
[  377.783769][T10276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.849956][T10276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.397291][T10276] bond0 (unregistering): Released all slaves
[  378.924364][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  378.930841][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  379.074082][ T5780] Bluetooth: hci3: command tx timeout
[  379.205789][T10276] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.387728][T10276] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.495224][T10276] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.646922][T10276] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.103957][T10276] hsr_slave_0: left promiscuous mode
[  381.115642][T10276] hsr_slave_1: left promiscuous mode
[  381.126728][T10276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  381.135592][T10276] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.144547][T10276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.152127][T10276] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.167969][T10276] bridge_slave_1: left allmulticast mode
[  381.175414][T10276] bridge_slave_1: left promiscuous mode
[  381.181271][T10276] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.229394][T10276] veth1_macvtap: left promiscuous mode
[  381.235407][T10276] veth0_macvtap: left promiscuous mode
[  381.241141][T10276] veth1_vlan: left promiscuous mode
[  381.247266][T10276] veth0_vlan: left promiscuous mode
[  382.295815][T10276] team0 (unregistering): Port device team_slave_1 removed
[  382.372964][T10276] team0 (unregistering): Port device team_slave_0 removed
[  382.431251][T10276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.505561][T10276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.036960][T10276] bond0 (unregistering): Released all slaves