last executing test programs:

14.574696011s ago: executing program 2 (id=194):
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x17)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000)
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
getxattr(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32], 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x69c2040, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0xb29e0100, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000300), 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706c656176658f298f583ff5ab8fa63d72656c61746976653a38362c000000000000000000"])
unshare(0x24060400)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

13.594597014s ago: executing program 2 (id=207):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xd}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000011) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x103, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xa}]}, 0x1c}}, 0x80) (async)
r3 = open(&(0x7f0000000280)='./file0\x00', 0x2b0000, 0x23)
sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaf1, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r4 = socket$inet6(0xa, 0x4, 0x991)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000400)) (async)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000440)=0x1, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffffffd}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xa}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x20000081) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000600)={'erspan0\x00', <r6=>0x0, 0x801e, 0x80, 0x1000, 0xe6, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x66, 0x0, 0x1, 0x2f, 0x0, @local, @empty, {[@noop]}}}}})
sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f00000005c0), 0xc, &(0x7f0000000740)={&(0x7f0000000680)=@bridge_newvlan={0x8c, 0x70, 0x2, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1d, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x48, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x80}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x8c}}, 0x200400d5) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r7, 0x11, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x29b1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x66}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10001}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xbc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) (async)
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000940)={0xd}) (async)
recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/244, 0xf4}], 0x1, &(0x7f0000000ac0)=""/91, 0x5b}, 0x5}, {{&(0x7f0000000b40), 0x80, &(0x7f0000000f40)=[{&(0x7f0000000bc0)=""/227, 0xe3}, {&(0x7f0000000cc0)=""/173, 0xad}, {&(0x7f0000000d80)=""/166, 0xa6}, {&(0x7f0000000e40)=""/40, 0x28}, {&(0x7f0000000e80)=""/157, 0x9d}], 0x5, &(0x7f0000000fc0)=""/231, 0xe7}, 0x1}], 0x2, 0x40022141, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r5}, 0x8) (async)
read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_STATFS(r3, &(0x7f00000031c0)={0x60, 0x0, r8, {{0x5, 0x4, 0x3, 0x7, 0x1, 0x7, 0xba76, 0x7}}}, 0x60) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000003400)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003280)={0x134, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xc8, 0x5b, "4f6bb9829b490a2966e317a96ff3cca0485839a4137021eda7e7e59f9e9d1cd641e0093af78365bd8fcb8c55d3e5de29e3ccf7723fd1dd764eba6663cbc057df7c318090f5eafc9e12c87f92df86df142b2980b8e3596c7024a7798faedc74c67bba47c5180405001a490ba779b53e3cb1cf4fa0b9ac52b4a04fb82da6544f2e1d7c760488ef5787e1d7c0decf994588a38d40e88fe9e8ab50efb06cf283f86863066ab433a002c44784852225f7ea86697bb96d2deed0aa0efcb07e82ec1c36462f1c7d"}, @NL80211_ATTR_FRAME_MATCH={0x4d, 0x5b, "fb35cac79d2e2ffdd101331c09529352d9b3134e0d7ac0d7598ca19d5b5546d588eabe2ebe111f93d7e45625da7af78d174ee81336eb173cdad9cc03534e2dded6589e7a0ebbec26bf"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x20004010) (async)
ioctl$TIOCNOTTY(r3, 0x5422) (async)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000003440), &(0x7f0000003480)=0x4)
syz_genetlink_get_family_id$smc(&(0x7f00000034c0), r0) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000003640)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003600)={&(0x7f0000003540)={0x9c, r1, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4b2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000003680)) (async)
ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f00000036c0))
socket$inet6_udp(0xa, 0x2, 0x0) (async)
close(0xffffffffffffffff)

13.26283418s ago: executing program 2 (id=210):
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) (async, rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='=lgo=zstd dict=d', 0x10) (async, rerun: 32)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES16=0x0, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64)
ioctl$TIOCSBRK(r2, 0x5427) (rerun: 64)

13.23460771s ago: executing program 2 (id=211):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x600, 0x6, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd27, 0x25dfdbff, {0x1d, 0x1, 0x5}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0xfe, 0xff, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0f538dcd0863c8ce"}, 0x1}}]}, 0x14c}}, 0x240448c8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="040028bd7000fedbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="0600650000000000d8005b000dd0782878a78834ba71fcea7ee1ae0a828ca28c253b9873712ad9dd5457b0f594151c531bf9806a5034e664a63b1bb3138f31ba78dbf34db44b87e447b17dfede2fd099da78fed3a3f12d85c9432fb072f39f174bb7c466b6f430aa8b2b07ed7ffa6a8b74c482808c27340fd5a332a1fcf2ab576162342d69ce290f265336076d9434af59a97d54c43dbc35b9052109c3b49266fac9a37e1a6b5014eb855cab590c135db6dbf6a8fde6ac1bc668d94e07fc4340cd16af2e75436b844fe8570622683169ea180914c1e44b50aebeebc8ffd6d253"], 0xfc}, 0x1, 0x0, 0x0, 0x24000004}, 0x2000400d)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)}, 0x4044040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001400)=ANY=[@ANYBLOB="f4060000", @ANYRES32=0x0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="a0704f0e743671278f8bdc45026691c5a088c9c27ea979e4ef112d2e21fbaaa607dc8249cdef613b5f30206a1d4e22013794be31f1ee79d5bf7b24534aabaeed662c8ef866cc182604cde617b4f4178a6b8c5f93dd75992fedb14484b51cbce3c3075e0e5f3d1c7bfa8dd3ab69b78e0b7b65b03b809898677c7569f24342ddefb7eee760460a82cac493924c6032fa70f74db980d835fbe51691acde87a21e3566012fd7e3358d8318f99165c526aa860e422d4387dd0041fcd00c1cf28020b1b528c7cf49eccda920b961353989b1c77838ce743177b424f20338f12b36526ea328594da420d7ad31f5a47a70ad44f1600bb9681211bb16d3eca2baff61a231d809cbea62e93090e775811f6768cfc3e0267b6ac059e5f4e15472cd9f94513558c7705429553a6310278aea3649ac565b91fe0aeb9b18003b532daf57c80fba53e08bad589d33181470bc9b055e3f9e85bd4f522875a80eeefffa7c15ad2da58b482c185a3ae48e4fc581b64518a0fc53b84783c394008281342615c07ac749c20b40655d511d1b4d7274391bffbaa55e7e46def7364a073f8fe8ba8d9620690945fd7fb2234a69909def19b8f4914e5f76b693895db9d1369f81bb931f898c13007191ddf52422dc1c5b9942a0c99d2f1bed201098771235cd2ce3a9bd5143fd9aeed31655fb6d1b132302aebc4f5faf6f88dd9994c44529e7f4deaf80ae0521e477d67e5c9af3729ecfcd9b9aa67e78b7cf6856f09d11eb7bbd8524a4d800c4546c8a73cc5ce88656796b1443222d9e17cb437b4df942ee07dfdcda415f4fa046b92b22a1558268a13a11e6472059f581ab39656dd2814e57faff14723ddf0ed4cbc3889a9d379acb45fde2a672ce2d540aabc2d31fd4a07df4a3b1efbfa7d9d602147324d05fb2a19e4463e37bffde813c3253d626dc9771c6bee5c9ed21d2ec76acaa105d4ed526a69daea5208bf568d8daf54b53381ad421a43574d75556be8515d1a5d8b45f094aea73212a05f1c43bf229755ca197450e9fdc208f818b177b342b92623ba5c71a8c16a42d4991b61ac709113a11fec7f2aba4ccf1b660df466b132717dd3fba4cb9045a07bd484f28ffb37f9e97c37fbac14ebc4c5ba7408619542399beca4db1f60fd56b503992c99e0227f14eecbe48a4a167b1c556f8646f6352fb2b3793824f891e32bf5a5aaecb3cdeb8286f0a5c39738878f963c16c0e2295fdbaf7cf766167e4351d058a3f8c1d6e8f7f8b0c98e49133dccb959da93401fc372ffc2b672aed5d461a39d8e0eeb08b240bb2e051f50c739dcfdf692e95d086ee3b4d530dcb1d246872df213f9f22521f4c4ed0a2bb4adb4aacd322813315dadaa2fe9c8b67bdd6702b0d9d4148aad1275ae9861e0b653b6bed10322998434790a9130c7f2a9f96c5edffd2f5736b759aa1cb8e81a722360d368e8e36cdea547acbaeeee1aa9f361b512d1772cfc9cdf94d7cc176e0d88ee61bbdbae005f5d8a17ab31f19fc62185a7c77946097b1cc36ce8bf7305ab3611968eb2866dff3fd950c620fc0f661f1c66135ded5fe03289824132b7131d0382454a4d2302d28d7d22bc63ed8f8d41907f1b03329c2febfa7e936b4559b053fe5fa717214b259795615d60578ad27b4617be260e12482fa3e2537db07416c4cace760f203038f050e8dadedf2383d2dcd92508ba29302a3083c924752223e5a047746aae5c73ac08ab91893cd8562bdaa7800dece430734ae7a1ff23f3c577d7d4a010fb2b46d7a30dafc87ca82eee03a496e4d657d6f6a23281bd9ca65f48cb897da767ea083c9c470c8722b2f4d43c2029f67692c193d8d94a0d093161e778b7110b22d4375a2815856c7ace9020394d8dff8ac0a7b517939c0c2bef51cf199e693f3c98c2a1308db96a58346fee1aaaa1f06ef70f12e0e93d355bb65c253a827407b4ae9251a06d8df5fe5768bd7f56ca3cdd1e4acc66e95aa800027b52175ae31374c7de6987e7236e7ab647071901e8c3a1016da4ac842d31eaa1a14d87ab77347d045777d2676b8b92a90609e0c07410fbd40e2482d7e98092765c0b6263053bd99c529005eff0c09a9b90673770a0186370235c93f16c5b0775eb93f884016aa12cf403e63aaa6871d2c9a9d97b722e2fe62409286e3bb4d7dd6f68baf1ab29de236045da5717c28a5e88a5cfe97b91916a1f3a21512406a2e750b98ef9525209a7e06f3e08b302b3851ec8fa2990e52fbd7159dfc6ade75d211246df0a50a0991ef510cfb8d4540ec5d8ce2df99b889663401c5b5d36a174da67d0b18393956d3dac46bfabd82b5ff5a9bdda5d53fb24b13b61f6883995540bd0472f2b32684d2c6bc4e4122b4c37d623f0f9dec4392cffd491d66096967425fc58ad97b47f21a04146f562b5294140c0cdb3aaf954845d36d10a239a22aebfac984f3b0d9723ce617b473f4bc7002fc7fc7a7d7637c809884d0e994b461a4aef9eb6de97d1638907c8cde151b3e5e9f131aba6ba1f7ce95ca7f649a85adc889784785f8a925e58e684f1f33d1ae85bb04c31e00a65431e5da0c9a37b9ce4ae3428ed445429ee150617d5c2da50def9033b510f073f364a1b2b46e007d6f688fce6ad9a4a9c00768524578f8f2a9f8c1f15fb75ef27086005a7534166610a5e0e94479ba0f362aeafdc6357d4596469be93f0eb7a1a282ec1752009b8e15cb1ed2274fb6886cf6c1b53777bf4a453f43c0994ad1acd28f4d18368701e472b89954d8f531df0c1ef91151f8fcafecae40407034f98137620b3323032a810dfad75fb4037a2adf316bee74e8819987a077d2bff1967dab57e8ac864a1e74bc97b71df576d90eb0fa67300342207b5fc61520890afa248d2c12da45ceb134c55972788dd12db2713d4612f0f51c54b03e2828844fc6076766c8d696cdb83df91346712bf471be401a5ae5380ca64162885057ba99d5cb79a01719a09422de1d6ca8cfbbf6279a86c3a4df165e14879a9c032d6521fc86a72348fbd92934467080ee4ca07969fcd5a78b5effe6b03f0cf82f3de7dc33d425d81d8d13d876e8730b5233d9d534d83c2188e0f7dd31c6c667b8ad75c05d0883440b5fb2a156351d5663b1b13e55db3dc2e15914c3cd41d1d0447b3371adbb464120bec6256314fd932b4c59aa6e4f551127772ee085df806895b50589422d76f2e88a56f781d7da45a5e9c572171b50721437eda8ffe2f11fd7c6bbe2b96cddad4484970cab87bdbe8c9ff90551ec3f9241823170214648d2654eb23c6676f844ab56b52a98473faa08ad1b352839434d7d7d4a8a89283ff5930e190257ee3ed89f2bcfccc008e511813bc4a416eb030a1ca3f7b6af603cbd80c28a26971f691b8d2344b1e4c24f24144bb25dcb226c358b971a0cfae2cc2b84b26ba11fbe2dbb8198f8379f7f89ef3bbe112c1ed1b575399be9417e84d8043f0844c948273cded33c4ef75ba12f55352387196a1e10ec9751d7ab94ff2ede48c2681031c5613d1c568e2a29dee7b2b989f5ee81e4e5303fe6f4446af95b987c6b5b104b10d241287a77c96e9bab9e3abd04bb12ae2437a81f021641c7161e063f33961feaab9e8a4abfef8d719b8b73b0bbedc1c68ad7be967d94bc9835fefffdd4f287884f4ac664855cf22e4020311a512c6745a864331f3e37c31fe7b67dc79fb2b3d4902cfa03c769fe46c0f6138885f21108e8a509a26eef4820cffb310b45bfc9a41816e46171a9eb75baaf350d94b7d9095caf2e7e1860059401784c999a78643288340b2164d34af3f5129dafa6dc5f5fd888a1b9a49f780207da46f558e7f79771cc8fda300b1f9cf180d4fafe6b64cfeae0beea9b637ef63d33829b45849f114158e7707b0bf1047f1c2be93cd20c076ced9c1b3d3f6a36d617efa16528c2a6bc03be53bf6a2cde05adcc56408fe987315a212057a8903502644caf7e62c495f330965bc1594b5f1e7acfb77d88725cad8cf89e0d8c315e42e007a72168a90808ab9685bbe0a8ba2b614b58a74242dc9a77c1f4440b3b7296d6d537a3935add3890ef8916c00f9e658d9f423ab6ce0446a463e8acc64bf06598bccf6a3f5eefb52d29a0ae1a7706de5b9a2b1097ac0837599816d292f033471ffde849fa2dd24e0706e3a8b0a8453f092667cfc3b2a88006b156abeefb89e98921b6b1fecb9d3877b3708665a85e1389160b9a6fd2fba18e6f8690df6c5c5971435e21968acdea7804029c8026ce1a527f34f910a60b46cdef027d76eebd3003ce968a5c903ac2ed859553ddbef32512d600cd84f9781cf59fa7943eef04e344b5111f89b7266505977018b349c08a3888d4c9e880d4828a816e065558793e663d38c8af4ed49ac9e387c9376a1810fb69fc95a24c8e3948928bc926da0353a8cca669f353141ec2f138bdb3a6e711d194daf2b5427e15e1aff2a0588825bc6bccd3d959a179a2d0ee22d83938e77bd94877bd2c05e9c673c3a7356bb2ad04de586f1d9820fb52fdbd1e72c5c1305479394f14b03fd6368126451b6cd090fbbcd0c51a829742d47b0a79bfaa35bc7ffc11a6a9c306b44341192160ce85775944945cca6313eb1286f0e1307b55260b8f7ed716fba0e77d18f61c62a214274766eb1aad5e432f4052ef54d5c76ae4d0cdb37573e9bc68c263a72934cbdfc5ce6c082ee7c51c6b44abcfcfb3b3dae085b73fb47d8458a20723f033d497a987f30dd4cd5968f9c22c69fafd7af85ad8966a4f790ad4b6bbc136e520c6336d4130009ccf2557490992f79b51f5f605dfb11ffe0c36527b846f40e349e14ee9a94c5e81123cb64b35aeab3c714bebb7a6a08b234a5c4bb64e059b6ffcae09987ac782806ae066340e955df97e87dd25de0e503600b16075ba7314f10229ae3758072ab0dde26f8e7866260b3c052a0a351d9bff0a7ce886dde73763b63f0b9a9b553ccc7ce508b2bbe16de2c83bd8d464d3f46fa5f3776b4a44aa9cc37420af9d460977c7d244cdeeee84fc9ecd0be754316dcebadd5f07c435f1a89b42d150536df18364733e87f4e076d42d8edd2af24ee478a29dbac1befab43260af1f103451c916604b0852421a0b258cb3fa66c3d97242cedeff7440901c6c777368b68adb6501d9d69a0e79a946cb38fd8427935306006a531fcf66fe329f2f90e5fbe82467301e96ed78e18a07b0fcfc2b0e74e2d4334afabc8bcdc0301943c6a365f60cddc4ebf9aa1f5018e82239331922a876317f150c2df56e5627e8c2a562e17886dbf69ff30475947d654dafb6d09549299b04a39325eda3591618ab948d50c6a0ea6ed8641d6129aed5593cf078f216749db389a8ebf1792fa4141734ee85d9422b638d3d1372be4802c90f883551041780588c78121a046f14c9170b9e9be2110233e83d75a2db3f3f6b6846778ed0507f982c2779f2cb36f99834fb14558437e3404306b1a5d344eb9662dc04461bc3d0a12d5cebefcf5b1128882ec822ad2ac58cf02d222eb4927f71413fdd4c86578eda75c39203d1dc506f0004dd4af6ff5c35e8306f8b1411ce0153e26ac581a0631baea2ee9080057b3a8593a6b20181b7a28cb3f47fb837ba2d943b207bfb615b57cebfb066e087fd09e96da15b52a81200a46d56368765f179deb9aa42939885e72df26f89e4d460af2efd9f7ae2a8abae405adf5b9b4e968763964c34f052c434ca241a6c67c51ed2084588f2b999f40794efddf987d628239cf559cc932a782c15eeb3cde6d23a05f3bdc08e582ec85d3bfb068a812b7a50cf4115d3b97d100dafd0c453", @ANYRESHEX=r7], 0x6f4}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
r8 = eventfd2(0x1000, 0x80800)
read$eventfd(r8, &(0x7f0000000000), 0x8)

13.162128115s ago: executing program 2 (id=213):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/bridge0/bridge/multicast_startup_query_count\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket(0x5, 0x1, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000140)=0x2a, 0x4)
write(r1, &(0x7f0000000dc0)='0', 0x1)
fcntl$setlease(r0, 0x400, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
r3 = syz_clone(0xa80000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = getpid()
kcmp(r3, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277c606bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad801000100ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)

13.024785976s ago: executing program 2 (id=215):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000001e00)={0x2020, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0x0, 0x8000000001010000, 0x38, r3, r4, 0xc000, '\x00', 0x6, 0x27efc00800000, 0x20000000081, 0x8, {0xa, 0xc}, {0x6, 0x3}, {0x5, 0x1}, {0xffffffffe, 0x7f}, 0x5, 0x6, 0xfffffffe, 0x5}}}})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x1, 0x5, {0xffffffffffffffff}, {<r5=>0x0}, 0x3, 0x7f})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r8, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_delrule={0x64, 0x21, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x14, 0x10, 0x9, 0x0, 0x0, 0x6, 0x4}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'syz_tun\x00'}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r3, r5}}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vlan0\x00'}]}, 0x64}, 0x1, 0x2000000000000000, 0x0, 0x4000000}, 0x0)

5.84488861s ago: executing program 3 (id=292):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=")
r5 = fanotify_init(0x8, 0x40000)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_SET_RELBIT(r7, 0x40005504, 0x100000000000000)
fanotify_mark(r5, 0x1, 0x8100011, r6, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x1f, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r6}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800})

5.25861766s ago: executing program 3 (id=298):
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x17)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000)
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
getxattr(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32], 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x69c2040, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0xb29e0100, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000300), 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706c656176658f298f583ff5ab8fa63d72656c61746976653a38362c000000000000000000"])
unshare(0x24060400)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c)
socket$nl_generic(0x10, 0x3, 0x10)

4.26353658s ago: executing program 3 (id=303):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
bind$packet(r0, &(0x7f00000004c0)={0x11, 0xc, r1, 0x1, 0x9, 0x6, @multicast}, 0x14)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="11020002", 0x4}, {&(0x7f0000000600)='h?\x00W', 0x4}], 0x3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc)
r6 = dup(r2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r7, 0x0, r2, 0x0, 0xffff, 0x2)
sendmmsg$inet(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x40000)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

4.263148738s ago: executing program 1 (id=304):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61)
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000140)="c1b8bad5599763e9e4100659052820c46918a5455800545c8d5f802ed93681fb99ef38ead83a6c6aa9e1d1e5b4d126e3eba54d87d461d456eab1b412cecb3102d349bb94a48cc15586188b9f71883d19e2494db1b959e56a353f2a1482fe4da7cb143b70765d8c6371ae1faa0b34451cf3fc7ba8596f49ae70bbef2c742f553090b0a63f58a78928f91e24bbe33c848ed7d8d9d0bd7d437dcae18f40d074ef8f509ab18f8b16d3ee36cb3fca5c6fea7364bf3dae26a0a2e1c3c51a40ab1bfdcb07c6ca", 0xc3})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_gettime(0x4, &(0x7f0000000040))

4.088842392s ago: executing program 1 (id=305):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
setrlimit(0xa, &(0x7f00000000c0)={0x4, 0x10001})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x28012, r0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
getpeername$tipc(r4, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
lseek(r1, 0x0, 0x4)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, &(0x7f00000003c0)={0xffffffff, 0xffff, 0x0, 0x0})
r9 = syz_io_uring_setup(0x7890, &(0x7f0000000540)={0x0, 0xd52b, 0x10000, 0x5, 0x240004f}, &(0x7f0000000040)=<r10=>0x0, &(0x7f0000000380)=<r11=>0x0, &(0x7f0000000180)=<r12=>0x0)
syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0800080000000200b6e71400020046200fc000680000030690780a010100e0000001940400004e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)

3.940785526s ago: executing program 0 (id=309):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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")
r5 = fanotify_init(0x8, 0x40000)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_SET_RELBIT(r7, 0x40005504, 0x100000000000000)
fanotify_mark(r5, 0x1, 0x8100011, r6, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x1f, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r6}, 0x94)
io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800})

3.650409217s ago: executing program 4 (id=310):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}})

3.236293549s ago: executing program 3 (id=311):
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x17)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000)
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)
getxattr(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32], 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x69c2040, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
syz_clone(0xb29e0100, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000300), 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706c656176658f298f583ff5ab8fa63d72656c61746976653a38362c000000000000000000"])
unshare(0x24060400)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x71, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x8, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x9b, 0x3fe, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x7d, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400007], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xffff3441, 0xfff]}, 0x45c)
socket$nl_generic(0x10, 0x3, 0x10)

3.135724463s ago: executing program 0 (id=312):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6d706f6c3d62696e11643a302d", @ANYRESOCT])
r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, 0xffffffffffffffff, &(0x7f00000000c0))
r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r3 = openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r3, &(0x7f0000000d00)='nf   127.0.0.1 -\\000\\:000 l\\calhost\n', 0x24)
setns(r3, 0x4000000)
open_tree(r0, &(0x7f0000000140)='./file0\x00', 0x80900)

3.048982361s ago: executing program 1 (id=313):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0xb04f, 0x0, 0x2}], 0x1})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0xffff, 0x65, 0x7, 0x5}]}, 0x10)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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")
io_uring_enter(r0, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0)

2.708657686s ago: executing program 4 (id=314):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000380), 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1d, &(0x7f0000000100)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000140))
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf042bbd7000fcdbdf259200000008000300", @ANYRES32=r5, @ANYBLOB="0a0006"], 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x44)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000040)=""/83, 0x53}, {&(0x7f0000001500)=""/4076, 0xfec}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6}, 0x12062)

2.628411691s ago: executing program 4 (id=315):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61)
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000140)="c1b8bad5599763e9e4100659052820c46918a5455800545c8d5f802ed93681fb99ef38ead83a6c6aa9e1d1e5b4d126e3eba54d87d461d456eab1b412cecb3102d349bb94a48cc15586188b9f71883d19e2494db1b959e56a353f2a1482fe4da7cb143b70765d8c6371ae1faa0b34451cf3fc7ba8596f49ae70bbef2c742f553090b0a63f58a78928f91e24bbe33c848ed7d8d9d0bd7d437dcae18f40d074ef8f509ab18f8b16d3ee36cb3fca5c6fea7364bf3dae26a0a2e1c3c51a40ab1bfdcb07c6ca", 0xc3})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_gettime(0x4, &(0x7f0000000040))

2.54582879s ago: executing program 0 (id=316):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0xc845)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0x10000, 0x4001}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x0, 0x2}, 0x1) (async)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x0, 0x2}, 0x1)
syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async)
r6 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000000c0)=@multiplanar_overlay={0x2, 0xa, 0x4, 0x1, 0x4, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0x40, 0x0, 0x3, "262edeac"}, 0xeb, 0x3, {0x0}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
syz_mount_image$ext4(&(0x7f0000009840)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000100)={[{@noblock_validity}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noload}, {@dioread_lock}, {@jqfmt_vfsv1}, {@noacl}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
getsockopt(r2, 0xd, 0x2, &(0x7f0000000300)=""/91, &(0x7f0000000380)=0x5b)
io_uring_enter(r2, 0x1, 0x1, 0x5, 0x0, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000800000006000000020000060400000002000000000000000b0000000050000000004f5f305f2e"], &(0x7f0000000d40)=""/26, 0x3c, 0x1a, 0x1, 0x7}, 0x28)

2.408910131s ago: executing program 0 (id=317):
socket$inet6(0xa, 0x3, 0xff)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040))
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x2ec3, &(0x7f0000000080)={0x0, 0x385, 0x20, 0x1, 0x184}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000400)={0x8, 0x0, 0x2782, 0x1, &(0x7f0000000280)={&(0x7f00000001c0)="d5763a480a5eae87c8a77fd00746e6202fe57c11892def05437a115dcc38cba1e2051b2fb7aebfe6b5a60b79352a8067560bedb444b6e9304e85bf79c52121b7501d4fef0dc21079bf58ef442da2d7586601a9727953a7767379", 0x5a, 0x8, 0x1, 0xf02}, &(0x7f00000003c0)={&(0x7f00000002c0)="9adb00719ca9525cccf468ec8fa18ef7cda3d1998372b0b4d4b2ba213e54d76251c304d62deef10582f61a0214fdfe764ad6cb72ba436e5ab4e6b54e7f4a932492aa4dd4482cb7287de51570ad891206e4313aa687bce799f398759bf2fdfe91d617c649b0a08aff813bcd6b42ac3a2bfef2289cf21ed8d96ed45d41a6bec7ee531bc76fdb74e75da2fbd26660d14ca040f7bdbd6c7a787ae0f29504f8cd87b1bea1d4077b327acfe86f6dbef7740a107e1f3ccbb1afe03b271e4881db0522b862265fdecfa5e8e29103fade57453c1b0adfb2396460cb868d08548c", 0xdc, 0x1, 0x6, 0x5}, {0x3, 0xe54, 0x4}, 0x8, 0xedf}, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)

2.40827946s ago: executing program 1 (id=318):
exit(0x2)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") (async)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$eJzs3b2LY1UUAPDzZvKlFklhJYIPtLBx2dnWJoNkIZhKSaEWuri7IJMg7MKAHxi3srWx9C8QBDv/CRsLe8FWsHPBhSfva5KsL9nJYGb8+P2auXPvOe+e9+bODCly8t7z85Pbadx98OnP0eslcTCMYTxMYhAHUfs81gy/DADg3+xhlsVvWWl9Jdmal6/29lsaALAnm///b/Dd3ksCAPbszbfefv14Mhm9kaa9uDn/4nSav7LPv5brx3fjg5jFnbge/XgUkZ0pxzezLFu00twgXpovTqd55vzdH6rrH/8aUeQfRT8GxdR6/ngyOkpLK/mLvI6nq/2Hef6N6MezDfuPJ6MbDfkx7cTLL67Ufy368eP78WHM4nZRRJH/yh/jyeizozR9Lfvq90/eycvL85PF6bRbxC1lh5f8owEAAAAAAAAAAAAAAAAAAAAA4D/sWtU7pxtF/558quq/c/go/6YdaW2w3p+nzD/rEvxYf6BFFl/X/Xmup2maVYHL/FY814rW1dw1AAAAAAAAAAAAAAAAAAAA/LPc/+jjk1uz2Z17f8ug7gZQv63/otcZrsy8EA0xgzib6S63PKi23XLlOKxjkoitZeRX3Kn49pN33zB4alPWN9/u+uh6T45pX6DCHQf16Tq5lTQ/w27UM736kHy/GtOJc+7V2bSU7XT8Oo1L/Z3vvfNMMVhsiYlkW2Gv/lI+uWomefwuOsVTbUxvV4Pyd6HpbOx0nv/6tyLRrQMAAAAAAAAAAAAAAAAAAPZq+abfhsUHG5J+Gpcf8h+DPVcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJdj+fn/OwwWVfI5gjtx7/4V3yIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38GAAD//9PXYcU=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr$smack_xattr_label(r3, &(0x7f0000000040)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x1)
io_uring_setup(0xc5e, 0x0) (async)
io_uring_setup(0xc5e, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
syz_emit_ethernet(0x3c, &(0x7f0000000d80)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x42, 0x80, '/', "1d2237cf1aa32a95382023ecb8dc46afb86d42958ee668e133192144fac54a9a4fc51dbdfeac40"}}}}}, 0x0) (async)
syz_emit_ethernet(0x3c, &(0x7f0000000d80)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x42, 0x80, '/', "1d2237cf1aa32a95382023ecb8dc46afb86d42958ee668e133192144fac54a9a4fc51dbdfeac40"}}}}}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x5b}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2.40145462s ago: executing program 0 (id=319):
syz_open_dev$vim2m(0x0, 0x9, 0x2) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x3}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async)
r3 = landlock_create_ruleset(&(0x7f0000000180)={0x400, 0x3, 0x1}, 0x30, 0x0)
landlock_restrict_self(r3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0xa0)
write(r4, &(0x7f0000000000)='7', 0x1) (async)
io_setup(0x6, &(0x7f0000001380)) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000002000010000000000000000000a0020400000000709000000140011657468305f746f5f627269646765001400030076657468315f766c616e000000000000140002000000000000f8ee956308ffffa635014200001f687623cea93716a4fb143c900c0697e5e1f4c76d9c3d9de1bca7a95275b56c885068b1e2728e6871b973543250d9ea5034e0d26de1de9b5098999fcbc1346bfd3f0779ffdbb1928201c018b68b7b48dc3d62f610fce4b9271ec1fa171a93cdec216c4fe53c941c67c610c0423c53e4560de6b1"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
getresgid(0x0, &(0x7f0000003000), &(0x7f0000003040)) (async)
socket$inet6(0xa, 0x6, 0x0)
close(0x3)

2.138986175s ago: executing program 3 (id=320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x50, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
unshare(0x2c020400)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x9, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2}})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071180c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.045020833s ago: executing program 4 (id=321):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000002b80)=0xbb, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80)

1.043839137s ago: executing program 4 (id=322):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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")
r5 = fanotify_init(0x8, 0x40000)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_SET_RELBIT(r7, 0x40005504, 0x100000000000000)
fanotify_mark(r5, 0x1, 0x8100011, r6, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x1f, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r6}, 0x94)
io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800})

408.20477ms ago: executing program 1 (id=323):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x92}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x4ecf, 0x480001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r2, @ANYBLOB="0c000705", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'dvmrp1\x00', 0x8000})

281.962112ms ago: executing program 0 (id=324):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}})

276.912914ms ago: executing program 3 (id=325):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r0=>0x0}, 0x8)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r0, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r2=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x48800000}, 0x8)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x16, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffce25}, [@call={0x85, 0x0, 0x0, 0xa5}, @ldst={0x0, 0x3, 0x0, 0xa, 0x5, 0xfffffffffffffff0, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0xa, 0x2, 0x10, 0xffffffffffffffff}, @map_fd={0x18, 0x2}, @ldst={0x2, 0x0, 0x1, 0x0, 0xa, 0x18, 0xfffffffffffffff0}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @ldst={0x2, 0x3, 0x3, 0x7, 0x8, 0xffffffffffffffff, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x54}}]}, &(0x7f00000005c0)='syzkaller\x00', 0xf, 0x71, &(0x7f0000000600)=""/113, 0x41000, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000680)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x100c1, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0x1, 0x1], &(0x7f0000000700)=[{0x0, 0x3}, {0x4, 0x1, 0xe, 0x6}, {0x1, 0x2, 0x4, 0x3}], 0x10, 0xb}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0)
write(r4, &(0x7f0000000040)='1', 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xe203}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x9e, &(0x7f0000000140)=""/158, 0x41100, 0x1, '\x00', r2, 0x19, r1, 0x8, &(0x7f0000000240)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0xe7, 0x10, 0x3, 0xff}, 0x10, 0x29ca2, r3, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94)

1.310314ms ago: executing program 1 (id=326):
syncfs(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r1, 0x300, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
setns(0xc9, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="76f6e84dd6774f2ed402eb094549", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@getrule={0x14, 0x22, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)

0s ago: executing program 4 (id=327):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0xb04f, 0x0, 0x2}], 0x1})
io_uring_enter(r0, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts.
[   28.383870][ T4700] cgroup: Unknown subsys name 'net'
[   28.493678][ T4700] cgroup: Unknown subsys name 'cpuset'
[   28.494973][ T4700] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   28.674419][ T4700] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   30.264313][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   30.285449][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   30.285926][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   30.286537][ T4725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   30.286695][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   30.286801][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   30.286946][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   30.287067][ T4725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   30.287308][ T4725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   30.287500][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   30.287767][ T4725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   30.287840][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   30.287914][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   30.288037][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   30.288398][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   30.288538][ T4725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   30.289102][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   30.289281][ T4725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   30.289378][ T4725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   30.289437][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   30.289490][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   30.290366][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   30.290486][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   30.290994][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   30.298404][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   30.674442][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.674680][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.675001][ T4718] bridge_slave_0: entered allmulticast mode
[   30.675475][ T4718] bridge_slave_0: entered promiscuous mode
[   30.705419][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.705447][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.705502][ T4718] bridge_slave_1: entered allmulticast mode
[   30.705924][ T4718] bridge_slave_1: entered promiscuous mode
[   30.723254][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.725479][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.730836][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.730917][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.730970][ T4719] bridge_slave_0: entered allmulticast mode
[   30.731394][ T4719] bridge_slave_0: entered promiscuous mode
[   30.746068][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.746098][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.746187][ T4711] bridge_slave_0: entered allmulticast mode
[   30.746587][ T4711] bridge_slave_0: entered promiscuous mode
[   30.755462][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.755511][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.755568][ T4719] bridge_slave_1: entered allmulticast mode
[   30.756003][ T4719] bridge_slave_1: entered promiscuous mode
[   30.767380][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.767415][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.767471][ T4711] bridge_slave_1: entered allmulticast mode
[   30.767904][ T4711] bridge_slave_1: entered promiscuous mode
[   30.778264][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.780676][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.781352][ T4718] team0: Port device team_slave_0 added
[   30.795465][ T4718] team0: Port device team_slave_1 added
[   30.796303][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.799672][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.818124][ T4719] team0: Port device team_slave_0 added
[   30.818484][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.818494][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.818506][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.821612][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.821668][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.821728][ T4720] bridge_slave_0: entered allmulticast mode
[   30.822149][ T4720] bridge_slave_0: entered promiscuous mode
[   30.823971][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.823994][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.824044][ T4720] bridge_slave_1: entered allmulticast mode
[   30.824439][ T4720] bridge_slave_1: entered promiscuous mode
[   30.835615][ T4719] team0: Port device team_slave_1 added
[   30.839711][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.839720][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.839737][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.843069][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.843096][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.843148][ T4712] bridge_slave_0: entered allmulticast mode
[   30.843601][ T4712] bridge_slave_0: entered promiscuous mode
[   30.844685][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.844754][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.844811][ T4712] bridge_slave_1: entered allmulticast mode
[   30.845468][ T4712] bridge_slave_1: entered promiscuous mode
[   30.846822][ T4711] team0: Port device team_slave_0 added
[   30.847560][ T4711] team0: Port device team_slave_1 added
[   30.854198][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.855588][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.861476][ T4720] team0: Port device team_slave_0 added
[   30.863077][ T4720] team0: Port device team_slave_1 added
[   30.866720][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.866728][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.866738][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.870084][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.870093][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.870109][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.870686][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.870693][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.870707][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.883330][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.883339][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.883353][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.894338][ T4719] hsr_slave_0: entered promiscuous mode
[   30.894751][ T4719] hsr_slave_1: entered promiscuous mode
[   30.905525][ T4711] hsr_slave_0: entered promiscuous mode
[   30.905784][ T4711] hsr_slave_1: entered promiscuous mode
[   30.905968][ T4711] debugfs: 'hsr0' already exists in 'hsr'
[   30.905999][ T4711] Cannot create hsr debugfs directory
[   30.909174][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.909182][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.909197][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.909813][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.909821][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.909834][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.918900][ T4718] hsr_slave_0: entered promiscuous mode
[   30.919193][ T4718] hsr_slave_1: entered promiscuous mode
[   30.919383][ T4718] debugfs: 'hsr0' already exists in 'hsr'
[   30.919392][ T4718] Cannot create hsr debugfs directory
[   30.930885][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.931950][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.947507][ T4720] hsr_slave_0: entered promiscuous mode
[   30.947801][ T4720] hsr_slave_1: entered promiscuous mode
[   30.948006][ T4720] debugfs: 'hsr0' already exists in 'hsr'
[   30.948015][ T4720] Cannot create hsr debugfs directory
[   30.956158][ T4712] team0: Port device team_slave_0 added
[   30.964781][ T4712] team0: Port device team_slave_1 added
[   30.987464][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.987474][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.987488][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.002694][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.002704][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.002720][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.041198][ T4712] hsr_slave_0: entered promiscuous mode
[   31.041480][ T4712] hsr_slave_1: entered promiscuous mode
[   31.041676][ T4712] debugfs: 'hsr0' already exists in 'hsr'
[   31.041687][ T4712] Cannot create hsr debugfs directory
[   31.108531][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.110638][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.110968][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.112859][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.118223][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.119624][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.122103][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.124583][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.139350][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.139379][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.139525][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.139555][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.141137][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.143697][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.144000][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.145874][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.149965][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.152052][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.155964][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.157569][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.183098][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.185573][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.188460][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.188954][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.189869][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.190199][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.191313][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.191605][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.193505][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.200995][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.201023][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.201100][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.201130][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.218026][ T1913] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.218466][ T1913] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.219794][ T1913] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.220029][ T1913] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.236227][ T4711] 8021q: adding VLAN 0 to HW filter on device team0
[   31.240330][ T4720] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.242939][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.254542][ T1913] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.254579][ T1913] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.255021][ T1913] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.255042][ T1913] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.255731][ T4720] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.256900][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.257218][ T4720] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.258444][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.274736][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.277371][ T4720] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.278453][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.281810][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.298431][ T4719] 8021q: adding VLAN 0 to HW filter on device team0
[   31.302146][ T4718] 8021q: adding VLAN 0 to HW filter on device team0
[   31.309648][ T1932] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.309673][ T1932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.310062][ T1932] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.310080][ T1932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.320507][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.326273][ T1932] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.326296][ T1932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.337499][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.339840][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.342001][ T1932] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.342037][ T1932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.344399][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.346042][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.348001][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.371869][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.376488][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.377848][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.378140][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.379062][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.389808][ T4720] 8021q: adding VLAN 0 to HW filter on device team0
[   31.391210][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.402079][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.402108][ T1772] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.410496][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.410532][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.421962][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.421977][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.477290][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.480810][ T4712] 8021q: adding VLAN 0 to HW filter on device team0
[   31.495772][ T1913] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.495798][ T1913] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.498218][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.498252][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.511136][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.511153][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.556474][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.621341][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.635686][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.650159][ T4711] veth0_vlan: entered promiscuous mode
[   31.659486][ T4718] veth0_vlan: entered promiscuous mode
[   31.661231][ T4711] veth1_vlan: entered promiscuous mode
[   31.678331][ T4711] veth0_macvtap: entered promiscuous mode
[   31.680447][ T4718] veth1_vlan: entered promiscuous mode
[   31.689117][ T4718] veth0_macvtap: entered promiscuous mode
[   31.690282][ T4718] veth1_macvtap: entered promiscuous mode
[   31.698022][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.699385][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.701876][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.702025][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.707540][ T4711] veth1_macvtap: entered promiscuous mode
[   31.711473][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.716594][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.728498][ T4719] veth0_vlan: entered promiscuous mode
[   31.733648][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.740618][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.754771][   T87] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.754801][   T87] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.754818][   T87] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.754835][   T87] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.771142][ T4719] veth1_vlan: entered promiscuous mode
[   31.777678][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.789677][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.789690][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.793801][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.793811][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.800562][ T4719] veth0_macvtap: entered promiscuous mode
[   31.801989][ T4719] veth1_macvtap: entered promiscuous mode
[   31.808854][ T4712] veth0_vlan: entered promiscuous mode
[   31.810742][ T4712] veth1_vlan: entered promiscuous mode
[   31.823449][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.826353][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.827914][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.846064][ T4718] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.850522][ T4720] veth0_vlan: entered promiscuous mode
[   31.860781][ T4720] veth1_vlan: entered promiscuous mode
[   31.873364][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.873396][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.873417][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.888799][ T4712] veth0_macvtap: entered promiscuous mode
[   31.889876][ T4712] veth1_macvtap: entered promiscuous mode
[   31.899048][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.899059][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.908073][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.909198][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.910663][   T87] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.910738][   T87] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.910928][   T87] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.915001][ T4720] veth0_macvtap: entered promiscuous mode
[   31.917410][ T4720] veth1_macvtap: entered promiscuous mode
[   31.943140][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.947078][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.948085][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.965708][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.965719][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.996406][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.996420][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.010886][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.010897][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.013687][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.014090][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.014285][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.014442][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.014506][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.020835][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.020846][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.031918][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.031929][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.081619][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.081710][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.097336][ T4896] ip6t_srh: unknown srh match flags  4000
[   32.307309][  T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.307321][  T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.367701][ T4715] Bluetooth: hci2: command tx timeout
[   32.367858][ T4715] Bluetooth: hci1: command tx timeout
[   32.367925][ T4715] Bluetooth: hci0: command tx timeout
[   32.368341][ T4727] Bluetooth: hci4: command tx timeout
[   32.402416][ T4727] Bluetooth: hci3: command tx timeout
[   32.486577][ T4911] process 'syz.3.4' launched '/dev/fd/6' with NULL argv: empty string added
[   32.681096][ T4913] syz.0.1: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   32.681164][ T4913] CPU: 0 UID: 0 PID: 4913 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT 
[   32.681176][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   32.681182][ T4913] Call trace:
[   32.681185][ T4913]  show_stack+0x2c/0x3c (C)
[   32.681209][ T4913]  __dump_stack+0x30/0x40
[   32.681231][ T4913]  dump_stack_lvl+0xd8/0x12c
[   32.681243][ T4913]  dump_stack+0x1c/0x28
[   32.681255][ T4913]  warn_alloc+0x1c4/0x1d8
[   32.681265][ T4913]  __vmalloc_node_range_noprof+0x110/0xe9c
[   32.681276][ T4913]  xskq_create+0x178/0x278
[   32.681287][ T4913]  xsk_init_queue+0x9c/0xf8
[   32.681296][ T4913]  xsk_setsockopt+0x49c/0x6c4
[   32.681304][ T4913]  do_sock_setsockopt+0x1f0/0x330
[   32.681316][ T4913]  __sys_setsockopt+0x104/0x170
[   32.681326][ T4913]  __arm64_sys_setsockopt+0xc8/0xe4
[   32.681337][ T4913]  invoke_syscall+0x98/0x244
[   32.681350][ T4913]  el0_svc_common+0xec/0x23c
[   32.681361][ T4913]  do_el0_svc+0x4c/0x5c
[   32.681372][ T4913]  el0_svc+0x64/0x260
[   32.681384][ T4913]  el0t_64_sync_handler+0x44/0x104
[   32.681396][ T4913]  el0t_64_sync+0x198/0x19c
[   32.684897][ T4913] Mem-Info:
[   32.684907][ T4913] active_anon:24 inactive_anon:10800 isolated_anon:0
[   32.684907][ T4913]  active_file:1815 inactive_file:4734 isolated_file:0
[   32.684907][ T4913]  unevictable:768 dirty:1660 writeback:0
[   32.684907][ T4913]  slab_reclaimable:8499 slab_unreclaimable:86021
[   32.684907][ T4913]  mapped:34839 shmem:6662 pagetables:984
[   32.684907][ T4913]  sec_pagetables:0 bounce:0
[   32.684907][ T4913]  kernel_misc_reclaimable:0
[   32.684907][ T4913]  free:1493610 free_pcp:4631 free_cma:7616
[   32.684940][ T4913] Node 0 active_anon:96kB inactive_anon:43200kB active_file:7260kB inactive_file:18936kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:139356kB dirty:6640kB writeback:0kB shmem:26648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9108kB pagetables:3936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   32.684963][ T4913] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB
[   32.684988][ T4913] lowmem_reserve[]: 0 0 3650 3650 3650
[   32.685008][ T4913] Node 0 Normal free:2896552kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96kB inactive_anon:43200kB active_file:7260kB inactive_file:18936kB unevictable:3072kB writepending:6640kB zspages:0kB present:5242880kB managed:3738576kB mlocked:0kB bounce:0kB free_pcp:18524kB local_pcp:16008kB free_cma:0kB
[   32.685032][ T4913] lowmem_reserve[]: 0 0 0 0 0
[   32.685050][ T4913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB
[   32.685122][ T4913] Node 0 Normal: 2*4kB (UE) 3*8kB (UME) 1*16kB (U) 2*32kB (ME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 1*2048kB (M) 706*4096kB (M) = 2896496kB
[   32.685201][ T4913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   32.685208][ T4913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   32.685215][ T4913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   32.685222][ T4913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   32.685228][ T4913] 13258 total pagecache pages
[   32.685232][ T4913] 0 pages in swap cache
[   32.685235][ T4913] Free swap  = 124996kB
[   32.685239][ T4913] Total swap = 124996kB
[   32.685243][ T4913] 2097152 pages RAM
[   32.685246][ T4913] 0 pages HighMem/MovableOnly
[   32.685249][ T4913] 392460 pages reserved
[   32.685253][ T4913] 8192 pages cma reserved
[   32.685256][ T4913] 0 pages hwpoisoned
[   32.718762][ T4912] FAULT_INJECTION: forcing a failure.
[   32.718762][ T4912] name fail_futex, interval 1, probability 0, space 0, times 1
[   32.718784][ T4912] CPU: 0 UID: 0 PID: 4912 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT 
[   32.718796][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   32.718801][ T4912] Call trace:
[   32.718804][ T4912]  show_stack+0x2c/0x3c (C)
[   32.718819][ T4912]  __dump_stack+0x30/0x40
[   32.718831][ T4912]  dump_stack_lvl+0xd8/0x12c
[   32.718842][ T4912]  dump_stack+0x1c/0x28
[   32.718853][ T4912]  should_fail_ex+0x41c/0x590
[   32.718866][ T4912]  should_fail+0x14/0x24
[   32.718878][ T4912]  get_futex_key+0x1ec/0x12b0
[   32.718889][ T4912]  futex_wait_setup+0x58/0x674
[   32.718900][ T4912]  __futex_wait+0x108/0x25c
[   32.718914][ T4912]  futex_wait+0x108/0x2c0
[   32.718925][ T4912]  do_futex+0x320/0x378
[   32.718935][ T4912]  __arm64_sys_futex+0x2e4/0x418
[   32.718946][ T4912]  invoke_syscall+0x98/0x244
[   32.718958][ T4912]  el0_svc_common+0xec/0x23c
[   32.718969][ T4912]  do_el0_svc+0x4c/0x5c
[   32.718980][ T4912]  el0_svc+0x64/0x260
[   32.718991][ T4912]  el0t_64_sync_handler+0x44/0x104
[   32.719002][ T4912]  el0t_64_sync+0x198/0x19c
[   32.729709][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   32.911519][ T4920] loop2: detected capacity change from 0 to 512
[   32.953646][ T4924] loop4: detected capacity change from 0 to 1024
[   32.959884][ T4924] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   32.969253][ T4924] JBD2: no valid journal superblock found
[   32.969764][ T4924] EXT4-fs (loop4): Could not load journal inode
[   32.981958][ T4920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   32.982026][ T4920] System zones: 1-12
[   32.989343][ T4920] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.8: missing EA_INODE flag
[   32.989385][ T4920] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   32.991044][ T4920] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.8: error while reading EA inode 12 err=-117
[   32.991082][ T4920] loop2: lost filesystem error report for type 5 error -117
[   32.991311][ T4920] EXT4-fs (loop2): 1 orphan inode deleted
[   32.991813][ T4920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.000762][   T30] audit: type=1400 audit(32.990:2): lsm=SMACK fn=smack_inode_rmdir action=denied subject="_" object="lowerdif" requested=w pid=4918 comm="syz.2.8" name="file0" dev="loop2" ino=15
[   33.456049][ T4931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.456255][ T4931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.735661][ T4929] loop3: detected capacity change from 0 to 256
[   33.777103][ T4934] loop0: detected capacity change from 0 to 1024
[   33.790684][ T4929] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10'.
[   33.805806][ T4934] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   33.806809][ T4934] JBD2: no valid journal superblock found
[   33.809375][ T4934] EXT4-fs (loop0): Could not load journal inode
[   33.811697][ T4929] Zero length message leads to an empty skb
[   33.823970][ T4937] loop1: detected capacity change from 0 to 1024
[   33.830345][ T4937] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   33.831073][ T4937] JBD2: no valid journal superblock found
[   33.831626][ T4937] EXT4-fs (loop1): Could not load journal inode
[   34.904736][ T4727] Bluetooth: hci1: command tx timeout
[   34.904769][ T4727] Bluetooth: hci2: command tx timeout
[   34.904787][ T4727] Bluetooth: hci4: command tx timeout
[   34.904802][ T4727] Bluetooth: hci0: command tx timeout
[   34.904817][ T4727] Bluetooth: hci3: command tx timeout
[   35.103190][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.104318][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.150108][ T4945] loop3: detected capacity change from 0 to 512
[   35.177698][ T4945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.602575][ T4807] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   35.754188][ T4807] usb 1-1: not running at top speed; connect to a high speed hub
[   35.754232][ T4807] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   35.756634][ T4807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.756646][ T4807] usb 1-1: Product: А
[   35.756654][ T4807] usb 1-1: Manufacturer: й
[   35.756661][ T4807] usb 1-1: SerialNumber: 둕벹龳寎佤῵ﻟ搋㏲䙚즃起ὧ荄茄ᢳᬎ鉦⪅犙砐ঢ়拉廋ﻢ停⦡鞧皽㩃棋ຈ䩐흁⊝輰쬃늲떚誘೫ႁ䰌熎？쵹䶘׉찯塈挙
[   36.005730][ T4953] syz.4.14 uses obsolete (PF_INET,SOCK_PACKET)
[   36.026876][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.061956][ T4956] loop3: detected capacity change from 0 to 512
[   36.065077][ T4956] EXT4-fs: Ignoring removed bh option
[   36.067333][ T4956] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   36.069123][ T4956] EXT4-fs (loop3): 1 truncate cleaned up
[   36.069856][ T4956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.094942][ T4956] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.15: bg 0: block 465: padding at end of block bitmap is not set
[   36.098046][ T4956] EXT4-fs error (device loop3) in ext4_setattr:6247: error 28
[   36.104192][ T4956] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   36.105014][ T4956] sch_tbf: burst 7725 is lower than device lo mtu (65550) !
[   36.160413][ T4959] loop4: detected capacity change from 0 to 512
[   36.170193][ T4959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.16: bg 0: block 5: invalid block bitmap
[   36.170216][ T4959] loop4: lost filesystem error report for type 5 error -117
[   36.171223][ T4959] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   36.171239][ T4959] loop4: lost filesystem error report for type 5 error -117
[   36.171446][ T4959] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.16: invalid indirect mapped block 3 (level 2)
[   36.171465][ T4959] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   36.171656][ T4959] EXT4-fs (loop4): 1 orphan inode deleted
[   36.171664][ T4959] EXT4-fs (loop4): 1 truncate cleaned up
[   36.187450][ T4959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.205998][ T4959] EXT4-fs error (device loop4): __ext4_iget:5592: inode #16: block 2147418144: comm syz.4.16: invalid block
[   36.349556][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.455742][ T4964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.458020][ T4964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.626811][ T4966] loop2: detected capacity change from 0 to 1024
[   36.627853][ T4966] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   36.632372][ T4966] JBD2: no valid journal superblock found
[   36.634271][ T4966] EXT4-fs (loop2): Could not load journal inode
[   36.858782][ T4968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.860417][ T4968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.024204][ T4725] Bluetooth: hci3: command tx timeout
[   37.024237][ T4725] Bluetooth: hci0: command tx timeout
[   37.024258][ T4725] Bluetooth: hci4: command tx timeout
[   37.024277][ T4725] Bluetooth: hci2: command tx timeout
[   37.024292][ T4725] Bluetooth: hci1: command tx timeout
[   37.074681][ T4970] loop1: detected capacity change from 0 to 512
[   37.079825][   T26] usb 1-1: USB disconnect, device number 2
[   37.090309][ T4970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   37.090366][ T4970] System zones: 1-12
[   37.091465][ T4970] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.19: missing EA_INODE flag
[   37.091478][ T4970] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   37.092360][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   37.092373][    C0] EXT4-fs (loop1): initial error at time 37: ext4_xattr_inode_iget:437: inode 12
[   37.092391][    C0] EXT4-fs (loop1): last error at time 37: ext4_xattr_inode_iget:437: inode 12
[   37.105304][ T4970] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.19: error while reading EA inode 12 err=-117
[   37.105322][ T4970] loop1: lost filesystem error report for type 5 error -117
[   37.106159][ T4970] EXT4-fs (loop1): 1 orphan inode deleted
[   37.106721][ T4970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.110325][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.122069][ T4973] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   37.133780][ T4973] JBD2: no valid journal superblock found
[   37.135330][ T4973] EXT4-fs (loop0): Could not load journal inode
[   37.235303][ T4975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   37.235393][ T4975] System zones: 1-12
[   37.236133][ T4975] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.21: missing EA_INODE flag
[   37.236151][ T4975] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   37.236739][ T4975] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.21: error while reading EA inode 12 err=-117
[   37.236755][ T4975] loop3: lost filesystem error report for type 5 error -117
[   37.236888][ T4975] EXT4-fs (loop3): 1 orphan inode deleted
[   37.237346][ T4975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.281140][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.192446][ T4727] Bluetooth: hci1: command tx timeout
[   39.192480][ T4727] Bluetooth: hci2: command tx timeout
[   39.192500][ T4727] Bluetooth: hci4: command tx timeout
[   39.192516][ T4727] Bluetooth: hci0: command tx timeout
[   39.192537][ T4727] Bluetooth: hci3: command tx timeout
[   39.227189][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.542244][ T4386] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   40.615865][ T5007] set_capacity_and_notify: 2 callbacks suppressed
[   40.615881][ T5007] loop1: detected capacity change from 0 to 256
[   40.616279][ T5007] vfat: Unknown parameter 'hash'
[   40.928463][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'.
[   41.589372][ T5023] loop0: detected capacity change from 0 to 512
[   41.612282][ T5025] bond1: up delay (2) is not a multiple of miimon (4), value rounded to 0 ms
[   41.612303][ T5025] bond1: option downdelay: invalid value (18446744073709547521)
[   41.612317][ T5025] bond1: option downdelay: allowed values 0 - 2147483647
[   41.617802][ T5025] bond1 (unregistering): Released all slaves
[   41.633889][ T5023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   41.633938][ T5023] System zones: 1-12
[   41.641483][ T5023] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.29: missing EA_INODE flag
[   41.641500][ T5023] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   41.641654][ T5023] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.29: error while reading EA inode 12 err=-117
[   41.641670][ T5023] loop0: lost filesystem error report for type 5 error -117
[   41.641970][ T5023] EXT4-fs (loop0): 1 orphan inode deleted
[   41.657918][ T5023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.673538][ T5032] loop2: detected capacity change from 0 to 512
[   41.745125][ T5032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   41.745181][ T5032] System zones: 1-12
[   41.746653][ T5032] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.31: missing EA_INODE flag
[   41.746667][ T5032] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   41.747050][ T5032] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.31: error while reading EA inode 12 err=-117
[   41.747066][ T5032] loop2: lost filesystem error report for type 5 error -117
[   41.747210][ T5032] EXT4-fs (loop2): 1 orphan inode deleted
[   41.747683][ T5032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.743430][ T5049] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   42.790216][ T5050] netlink: 164 bytes leftover after parsing attributes in process `syz.1.32'.
[   42.795107][ T5050] loop1: detected capacity change from 0 to 512
[   43.718220][ T5050] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   43.743600][ T5050] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.32: invalid indirect mapped block 2683928664 (level 1)
[   43.744062][ T5050] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   43.745254][ T5050] EXT4-fs (loop1): 1 truncate cleaned up
[   43.745748][ T5050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.986703][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.005719][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.123620][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.244429][ T5071] loop1: detected capacity change from 0 to 512
[   45.289740][ T5064] loop0: detected capacity change from 0 to 8192
[   45.311443][ T5071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   45.311527][ T5071] System zones: 1-12
[   45.319951][ T5071] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.40: missing EA_INODE flag
[   45.319965][ T5071] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   45.320146][ T5071] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.40: error while reading EA inode 12 err=-117
[   45.320166][ T5071] loop1: lost filesystem error report for type 5 error -117
[   45.320321][ T5071] EXT4-fs (loop1): 1 orphan inode deleted
[   45.320793][ T5071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.060488][ T5091] loop0: detected capacity change from 0 to 512
[   46.060810][ T5091] EXT4-fs: Ignoring removed bh option
[   46.061789][ T5091] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   46.068967][ T5091] EXT4-fs (loop0): 1 truncate cleaned up
[   46.069401][ T5091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.414943][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.760826][ T5099] loop0: detected capacity change from 0 to 8192
[   46.863897][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.898667][ T5118] netlink: 'syz.1.52': attribute type 11 has an invalid length.
[   46.932231][ T5131] loop3: detected capacity change from 0 to 512
[   46.937800][ T5139] overlayfs: missing 'lowerdir'
[   46.979973][ T5131] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.54: iget: bad i_size value: 38620345925642
[   46.979992][ T5131] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   46.981660][ T5131] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.54: couldn't read orphan inode 15 (err -117)
[   46.981678][ T5131] loop3: lost filesystem error report for type 5 error -117
[   46.982198][ T5131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.994471][ T5125] bond1: option miimon: invalid value (18446744073709551609)
[   46.994483][ T5125] bond1: option miimon: allowed values 0 - 2147483647
[   47.013806][ T5125] bond1 (unregistering): Released all slaves
[   47.027045][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.039162][ T5145] loop2: detected capacity change from 0 to 128
[   47.089110][ T5149] loop3: detected capacity change from 0 to 512
[   47.106292][ T5149] EXT4-fs: Ignoring removed bh option
[   47.120508][ T5149] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   47.131802][ T5149] EXT4-fs (loop3): 1 truncate cleaned up
[   47.132816][ T5149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.152557][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   47.152582][ T5152] FAULT_INJECTION: forcing a failure.
[   47.152582][ T5152] name failslab, interval 1, probability 0, space 0, times 1
[   47.152598][ T5152] CPU: 1 UID: 0 PID: 5152 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT 
[   47.152608][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   47.152614][ T5152] Call trace:
[   47.152617][ T5152]  show_stack+0x2c/0x3c (C)
[   47.152638][ T5152]  __dump_stack+0x30/0x40
[   47.152650][ T5152]  dump_stack_lvl+0xd8/0x12c
[   47.152661][ T5152]  dump_stack+0x1c/0x28
[   47.152672][ T5152]  should_fail_ex+0x41c/0x590
[   47.152686][ T5152]  should_failslab+0xc4/0x120
[   47.152699][ T5152]  kmem_cache_alloc_noprof+0x94/0x5d4
[   47.152708][ T5152]  skb_clone+0x1ac/0x320
[   47.152720][ T5152]  __netlink_deliver_tap+0x364/0x6f4
[   47.152731][ T5152]  netlink_deliver_tap+0x1d8/0x1dc
[   47.152742][ T5152]  __netlink_sendskb+0x78/0xd0
[   47.152752][ T5152]  netlink_sendskb+0x2c/0xdc
[   47.152761][ T5152]  netlink_unicast+0x2c0/0x7f8
[   47.152770][ T5152]  netlink_ack+0x570/0x890
[   47.152780][ T5152]  netlink_rcv_skb+0x21c/0x414
[   47.152790][ T5152]  rtnetlink_rcv+0x28/0x38
[   47.152799][ T5152]  netlink_unicast+0x600/0x7f8
[   47.152809][ T5152]  netlink_sendmsg+0x648/0x948
[   47.152819][ T5152]  __sock_sendmsg+0xc8/0x17c
[   47.152828][ T5152]  ____sys_sendmsg+0x3d0/0x6c8
[   47.152839][ T5152]  ___sys_sendmsg+0x198/0x224
[   47.152849][ T5152]  __sys_sendmsg+0x158/0x204
[   47.152859][ T5152]  __arm64_sys_sendmsg+0x88/0x9c
[   47.152869][ T5152]  invoke_syscall+0x98/0x244
[   47.152881][ T5152]  el0_svc_common+0xec/0x23c
[   47.152893][ T5152]  do_el0_svc+0x4c/0x5c
[   47.152904][ T5152]  el0_svc+0x64/0x260
[   47.152916][ T5152]  el0t_64_sync_handler+0x44/0x104
[   47.152927][ T5152]  el0t_64_sync+0x198/0x19c
[   47.168848][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.230528][ T5167] fuse: Unknown parameter 'a㨽c�.'GIw_other'
[   47.237852][ T5167] loop3: detected capacity change from 0 to 128
[   47.238096][ T5167] vfat: Bad value for 'gid'
[   47.238103][ T5167] vfat: Bad value for 'gid'
[   47.267221][ T5172] loop2: detected capacity change from 0 to 512
[   47.275175][ T5172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[   47.275237][ T5172] System zones: 1-12
[   47.275848][ T5172] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.63: missing EA_INODE flag
[   47.275863][ T5172] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   47.275999][ T5172] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.63: error while reading EA inode 12 err=-117
[   47.276011][ T5172] loop2: lost filesystem error report for type 5 error -117
[   47.276250][ T5172] EXT4-fs (loop2): 1 orphan inode deleted
[   47.276715][ T5172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.296392][ T5171] loop1: detected capacity change from 0 to 512
[   47.367140][ T5171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.436348][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'.
[   47.548389][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.600519][ T5209] bond1: option packets_per_slave: invalid value (18446744071562067968)
[   47.600537][ T5209] bond1: option packets_per_slave: allowed values 0 - 65535
[   47.601633][ T5209] bond1 (unregistering): Released all slaves
[   47.622827][ T5213] loop0: detected capacity change from 0 to 1024
[   47.629652][ T5213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.635719][ T5213] EXT4-fs warning (device loop0): ext4_rmdir:3194: inode #11: comm syz.0.67: empty directory 'file1' has too many links (111)
[   47.648876][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.814634][ T5225] loop1: detected capacity change from 0 to 512
[   47.816829][ T5225] EXT4-fs: Ignoring removed bh option
[   47.820747][ T5225] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   47.821983][ T5225] EXT4-fs (loop1): 1 truncate cleaned up
[   47.822448][ T5225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.852861][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.892169][ T5228] =======================================================
[   47.892169][ T5228] WARNING: The mand mount option has been deprecated and
[   47.892169][ T5228]          and is ignored by this kernel. Remove the mand
[   47.892169][ T5228]          option from the mount to silence this warning.
[   47.892169][ T5228] =======================================================
[   47.897328][ T5228] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   47.897340][ T5228] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   47.897363][ T5228] System zones: 0-1, 15-15, 18-18, 34-34
[   47.897477][ T5228] EXT4-fs (loop1): orphan cleanup on readonly fs
[   47.897855][ T5228] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792).
[   47.897951][ T5228] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   47.897963][ T5228] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   47.899500][ T5228] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.72: bad orphan inode 16
[   47.899524][ T5228] loop1: lost filesystem error report for type 5 error -117
[   47.902674][ T5228] ext4_test_bit(bit=15, block=18) = 1
[   47.902694][ T5228] is_bad_inode(inode)=0
[   47.902701][ T5228] NEXT_ORPHAN(inode)=0
[   47.902707][ T5228] max_ino=32
[   47.902713][ T5228] i_nlink=2
[   47.903224][ T5228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.910906][ T5228] fscrypt (loop1, inode 16): Error -61 getting encryption context
[   47.944170][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.948312][ T5233] binder: 5232:5233 BC_FREE_BUFFER no match for buffer at offset 0
[   47.950990][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.950999][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.951038][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.951043][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956163][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956173][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956235][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956241][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956280][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956285][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956322][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956327][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956361][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956365][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956395][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956398][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956422][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956426][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956450][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956453][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956476][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956479][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956503][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956506][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956535][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956540][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956568][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956573][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956598][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956602][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956626][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956629][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956651][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956655][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956678][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956681][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956703][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956706][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956730][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956733][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956756][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956759][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956782][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956785][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956807][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956810][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956834][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956837][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956859][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956862][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956885][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956888][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956929][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956933][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956964][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956967][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.956990][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.956993][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.957015][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.957018][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.957040][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.957044][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.957067][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.957071][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.957093][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.957096][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.957118][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.957122][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.960917][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.960927][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.960976][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.960980][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961007][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961010][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961036][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961040][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961063][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961066][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961089][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961092][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961120][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961123][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961148][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961151][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961174][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961177][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961200][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961203][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961231][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961234][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961259][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961262][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961284][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961287][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961310][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961313][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961335][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961339][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961363][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961366][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961390][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961393][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961416][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961419][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961441][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961445][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961471][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961474][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961497][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.961500][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.961528][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966245][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.966308][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966312][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.966338][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966342][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.966369][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966373][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.966396][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966400][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.966430][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966433][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.966802][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966805][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.966829][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966833][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.966858][ T5234] binder: BINDER_SET_CONTEXT_MGR already set
[   47.966862][ T5234] binder: 5232:5234 ioctl 4018620d 20000100 returned -16
[   47.973139][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'.
[   48.140029][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.178623][ T5249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.196473][ T5257] tmpfs: Group quota inode hardlimit too large.
[   48.201218][ T5249] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.78: corrupted xattr block 6: invalid header
[   48.202145][ T5249] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.78: corrupted xattr block 6: invalid header
[   48.202674][ T5249] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.78: corrupted xattr block 6: invalid header
[   48.203392][ T5249] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #12: comm syz.1.78: corrupted xattr block 6: invalid header
[   48.241909][ T5249] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.306846][ T5249] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   48.307839][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[   48.334857][ T5285] Injecting memory failure for pfn 0x138e90 at process virtual address 0x20000000
[   48.336839][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.368126][ T5285] Memory failure: 0x138e90: Failed to invalidate
[   48.368142][ T5285] Memory failure: 0x138e90: dirty LRU page still referenced by 1 users
[   48.368157][ T5285] Memory failure: 0x138e90: recovery action for dirty LRU page: Failed
[   48.429064][ T5292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   48.443376][ T5289] FAULT_INJECTION: forcing a failure.
[   48.443376][ T5289] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   48.443412][ T5289] CPU: 0 UID: 0 PID: 5289 Comm: syz.3.87 Not tainted syzkaller #0 PREEMPT 
[   48.443423][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   48.443428][ T5289] Call trace:
[   48.443431][ T5289]  show_stack+0x2c/0x3c (C)
[   48.443450][ T5289]  __dump_stack+0x30/0x40
[   48.443463][ T5289]  dump_stack_lvl+0xd8/0x12c
[   48.443474][ T5289]  dump_stack+0x1c/0x28
[   48.443486][ T5289]  should_fail_ex+0x41c/0x590
[   48.443499][ T5289]  should_fail+0x14/0x24
[   48.443517][ T5289]  should_fail_usercopy+0x20/0x30
[   48.443529][ T5289]  strncpy_from_user+0x48/0x388
[   48.443539][ T5289]  __arm64_sys_add_key+0x150/0x43c
[   48.443550][ T5289]  invoke_syscall+0x98/0x244
[   48.443562][ T5289]  el0_svc_common+0xec/0x23c
[   48.443574][ T5289]  do_el0_svc+0x4c/0x5c
[   48.443585][ T5289]  el0_svc+0x64/0x260
[   48.443597][ T5289]  el0t_64_sync_handler+0x44/0x104
[   48.443609][ T5289]  el0t_64_sync+0x198/0x19c
[   48.444926][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'.
[   48.481354][ T5292] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 2: comm syz.1.85: lblock 2 mapped to illegal pblock 2 (length 4)
[   48.482064][ T5292] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.85: bg 0: block 112: padding at end of block bitmap is not set
[   48.486984][ T5292] overlayfs: failed to resolve './bus': -2
[   48.503650][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   48.541323][ T5290] overlay: ./file1 is not a directory
[   48.543485][ T5310] overlay: ./file1 is not a directory
[   48.559774][ T5290] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   48.559787][ T5290] FAT-fs (loop0): Filesystem has been set read-only
[   48.677764][ T5319] EXT4-fs: quotafile must be on filesystem root
[   48.754563][ T5319] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.91: inode has both inline data and extents flags
[   48.754600][ T5319] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   48.754740][ T5319] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.91: couldn't read orphan inode 15 (err -117)
[   48.754756][ T5319] loop0: lost filesystem error report for type 5 error -117
[   48.755300][ T5319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.827080][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.843778][ T5328] netlink: 14 bytes leftover after parsing attributes in process `syz.0.92'.
[   48.856629][ T5329] netlink: 14 bytes leftover after parsing attributes in process `syz.0.92'.
[   48.878879][ T5332] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   48.879486][ T5332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002]
[   48.879580][ T5332] EXT4-fs (loop0): orphan cleanup on readonly fs
[   48.885329][ T5332] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.93: bg 0: block 361: padding at end of block bitmap is not set
[   48.885353][ T5332] loop0: lost filesystem error report for type 5 error -117
[   48.885634][ T5332] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   48.885648][ T5332] loop0: lost filesystem error report for type 5 error -117
[   48.885794][ T5332] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.93: attempt to clear invalid blocks 33619980 len 1
[   48.885812][ T5332] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.886184][ T5332] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.93: invalid indirect mapped block 1811939328 (level 0)
[   48.886198][ T5332] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.886295][ T5332] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.93: invalid indirect mapped block 2185560079 (level 1)
[   48.886307][ T5332] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.886605][ T5332] EXT4-fs (loop0): 1 truncate cleaned up
[   48.889006][ T5332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   48.911682][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   48.942537][ T5335] 9p: Bad value for 'wfdno'
[   49.027260][ T5344] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) !
[   49.393110][ T5353] FAULT_INJECTION: forcing a failure.
[   49.393110][ T5353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.393130][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT 
[   49.393140][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   49.393146][ T5353] Call trace:
[   49.393149][ T5353]  show_stack+0x2c/0x3c (C)
[   49.393169][ T5353]  __dump_stack+0x30/0x40
[   49.393181][ T5353]  dump_stack_lvl+0xd8/0x12c
[   49.393193][ T5353]  dump_stack+0x1c/0x28
[   49.393204][ T5353]  should_fail_ex+0x41c/0x590
[   49.393217][ T5353]  should_fail+0x14/0x24
[   49.393229][ T5353]  should_fail_usercopy+0x20/0x30
[   49.393242][ T5353]  strncpy_from_user+0x48/0x388
[   49.393252][ T5353]  __arm64_sys_add_key+0x150/0x43c
[   49.393262][ T5353]  invoke_syscall+0x98/0x244
[   49.393275][ T5353]  el0_svc_common+0xec/0x23c
[   49.393286][ T5353]  do_el0_svc+0x4c/0x5c
[   49.393297][ T5353]  el0_svc+0x64/0x260
[   49.393310][ T5353]  el0t_64_sync_handler+0x44/0x104
[   49.393321][ T5353]  el0t_64_sync+0x198/0x19c
[   49.415936][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'.
[   49.478066][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'.
[   49.480262][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'.
[   49.558328][ T5371] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   49.558428][ T5371] EXT4-fs (loop3): orphan cleanup on readonly fs
[   49.558611][ T5371] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   49.559654][ T5371] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   49.560124][ T5371] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2933: inode #16: comm syz.3.103: corrupted xattr block 31: invalid header
[   49.560138][ T5371] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   49.560282][ T5371] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117)
[   49.560335][ T5371] EXT4-fs (loop3): 1 orphan inode deleted
[   49.560931][ T5371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.601307][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.627567][ T5376] netlink: 'syz.3.106': attribute type 1 has an invalid length.
[   49.633071][ T5376] bond1: entered promiscuous mode
[   49.633255][ T5376] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.491511][ T5396] vhci_hcd vhci_hcd.2: invalid port number 0
[   50.617330][ T5411] pimreg: entered allmulticast mode
[   50.617480][ T5412] pimreg: left allmulticast mode
[   50.790044][ T5432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.793212][ T5432] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   50.795764][ T5432] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   50.795782][ T5432] EXT4-fs (loop3): This should not happen!! Data will be lost
[   50.795782][ T5432] 
[   50.795791][ T5432] EXT4-fs (loop3): Total free blocks count 0
[   50.795798][ T5432] EXT4-fs (loop3): Free/Dirty block details
[   50.795809][ T5432] EXT4-fs (loop3): free_blocks=4096
[   50.795820][ T5432] EXT4-fs (loop3): dirty_blocks=64
[   50.795826][ T5432] EXT4-fs (loop3): Block reservation details
[   50.795833][ T5432] EXT4-fs (loop3): i_reserved_data_blocks=4
[   50.796680][ T5430] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   51.166033][ T5465] IPv6: addrconf: prefix option has invalid lifetime
[   51.214340][ T5468] set_capacity_and_notify: 11 callbacks suppressed
[   51.214352][ T5468] loop1: detected capacity change from 0 to 1024
[   51.245619][ T5468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.361949][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.423415][ T5478] FAULT_INJECTION: forcing a failure.
[   51.423415][ T5478] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.423439][ T5478] CPU: 0 UID: 0 PID: 5478 Comm: syz.4.130 Not tainted syzkaller #0 PREEMPT 
[   51.423453][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   51.423459][ T5478] Call trace:
[   51.423463][ T5478]  show_stack+0x2c/0x3c (C)
[   51.423482][ T5478]  __dump_stack+0x30/0x40
[   51.423496][ T5478]  dump_stack_lvl+0xd8/0x12c
[   51.423512][ T5478]  dump_stack+0x1c/0x28
[   51.423523][ T5478]  should_fail_ex+0x41c/0x590
[   51.423538][ T5478]  should_fail+0x14/0x24
[   51.423550][ T5478]  should_fail_usercopy+0x20/0x30
[   51.423563][ T5478]  strncpy_from_user+0x48/0x388
[   51.423573][ T5478]  __arm64_sys_add_key+0x150/0x43c
[   51.423584][ T5478]  invoke_syscall+0x98/0x244
[   51.423596][ T5478]  el0_svc_common+0xec/0x23c
[   51.423607][ T5478]  do_el0_svc+0x4c/0x5c
[   51.423619][ T5478]  el0_svc+0x64/0x260
[   51.423631][ T5478]  el0t_64_sync_handler+0x44/0x104
[   51.423642][ T5478]  el0t_64_sync+0x198/0x19c
[   51.481987][ T5485] loop1: detected capacity change from 0 to 1024
[   51.483566][ T5485] EXT4-fs: Ignoring removed bh option
[   51.544518][ T5485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.568378][ T5493] FAULT_INJECTION: forcing a failure.
[   51.568378][ T5493] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.568399][ T5493] CPU: 1 UID: 0 PID: 5493 Comm: syz.3.134 Not tainted syzkaller #0 PREEMPT 
[   51.568411][ T5493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   51.568416][ T5493] Call trace:
[   51.568419][ T5493]  show_stack+0x2c/0x3c (C)
[   51.568436][ T5493]  __dump_stack+0x30/0x40
[   51.568447][ T5493]  dump_stack_lvl+0xd8/0x12c
[   51.568457][ T5493]  dump_stack+0x1c/0x28
[   51.568466][ T5493]  should_fail_ex+0x41c/0x590
[   51.568478][ T5493]  should_fail+0x14/0x24
[   51.568487][ T5493]  should_fail_usercopy+0x20/0x30
[   51.568497][ T5493]  _inline_copy_from_user+0x3c/0x174
[   51.568508][ T5493]  copy_msghdr_from_user+0xb8/0x194
[   51.568517][ T5493]  ___sys_sendmsg+0x14c/0x224
[   51.568530][ T5493]  __sys_sendmmsg+0x204/0x580
[   51.568539][ T5493]  __arm64_sys_sendmmsg+0xac/0xc8
[   51.568548][ T5493]  invoke_syscall+0x98/0x244
[   51.568558][ T5493]  el0_svc_common+0xec/0x23c
[   51.568567][ T5493]  do_el0_svc+0x4c/0x5c
[   51.568576][ T5493]  el0_svc+0x64/0x260
[   51.568587][ T5493]  el0t_64_sync_handler+0x44/0x104
[   51.568596][ T5493]  el0t_64_sync+0x198/0x19c
[   51.952355][ T4712] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   51.953170][ T4712] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /32/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[   51.954046][ T4712] EXT4-fs (loop1): Remounting filesystem read-only
[   52.214413][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.266380][   T54] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.312828][   T54] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.372018][   T54] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.440238][   T54] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.608117][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.609100][ T4727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.639711][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.644867][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.645166][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.694917][ T5527] FAULT_INJECTION: forcing a failure.
[   52.694917][ T5527] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.695000][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT 
[   52.695012][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   52.695018][ T5527] Call trace:
[   52.695021][ T5527]  show_stack+0x2c/0x3c (C)
[   52.695040][ T5527]  __dump_stack+0x30/0x40
[   52.695052][ T5527]  dump_stack_lvl+0xd8/0x12c
[   52.695064][ T5527]  dump_stack+0x1c/0x28
[   52.695075][ T5527]  should_fail_ex+0x41c/0x590
[   52.695088][ T5527]  should_fail+0x14/0x24
[   52.695100][ T5527]  should_fail_usercopy+0x20/0x30
[   52.695113][ T5527]  strncpy_from_user+0x48/0x388
[   52.695122][ T5527]  __arm64_sys_add_key+0x150/0x43c
[   52.695133][ T5527]  invoke_syscall+0x98/0x244
[   52.695145][ T5527]  el0_svc_common+0xec/0x23c
[   52.695157][ T5527]  do_el0_svc+0x4c/0x5c
[   52.695168][ T5527]  el0_svc+0x64/0x260
[   52.695180][ T5527]  el0t_64_sync_handler+0x44/0x104
[   52.695191][ T5527]  el0t_64_sync+0x198/0x19c
[   52.695450][ T5527] __nla_validate_parse: 7 callbacks suppressed
[   52.695458][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'.
[   52.748446][   T54] bridge_slave_1: left allmulticast mode
[   52.748511][   T54] bridge_slave_1: left promiscuous mode
[   52.749375][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.560681][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'.
[   53.672905][   T54] bridge_slave_0: left allmulticast mode
[   53.672923][   T54] bridge_slave_0: left promiscuous mode
[   53.673006][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.754182][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.791028][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.802573][   T54] bond0 (unregistering): Released all slaves
[   53.815297][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0
[   53.990306][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1
[   54.053012][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.053075][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.053132][ T5516] bridge_slave_0: entered allmulticast mode
[   54.053561][ T5516] bridge_slave_0: entered promiscuous mode
[   54.054328][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.054353][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.054403][ T5516] bridge_slave_1: entered allmulticast mode
[   54.054797][ T5516] bridge_slave_1: entered promiscuous mode
[   54.061834][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.062806][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.099646][ T5516] team0: Port device team_slave_0 added
[   54.101645][ T5516] team0: Port device team_slave_1 added
[   54.117141][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.117152][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.117165][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.117740][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.117747][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.117762][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.141081][ T5516] hsr_slave_0: entered promiscuous mode
[   54.141356][ T5516] hsr_slave_1: entered promiscuous mode
[   54.141531][ T5516] debugfs: 'hsr0' already exists in 'hsr'
[   54.141542][ T5516] Cannot create hsr debugfs directory
[   54.187582][   T54] hsr_slave_0: left promiscuous mode
[   54.187915][   T54] hsr_slave_1: left promiscuous mode
[   54.188234][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.188250][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.188678][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.188688][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.192376][   T54] veth1_macvtap: left promiscuous mode
[   54.192408][   T54] veth0_macvtap: left promiscuous mode
[   54.192486][   T54] veth1_vlan: left promiscuous mode
[   54.192536][   T54] veth0_vlan: left promiscuous mode
[   54.285292][   T54] team0 (unregistering): Port device team_slave_1 removed
[   54.292880][   T54] team0 (unregistering): Port device team_slave_0 removed
[   54.338720][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2
[   54.633480][ T5516] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.634551][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   54.634912][ T5516] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.635718][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   54.636020][ T5516] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.638580][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   54.639035][ T5516] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.640375][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   54.655063][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.655092][ T5516] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.655157][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.655185][ T5516] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.673872][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.678524][ T1835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.678859][ T1835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.681065][ T5516] 8021q: adding VLAN 0 to HW filter on device team0
[   54.684342][ T1835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.684365][ T1835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.684693][ T1835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.684719][ T1835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.718117][ T4727] Bluetooth: hci1: command tx timeout
[   54.804808][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.818733][ T5516] veth0_vlan: entered promiscuous mode
[   54.824407][ T5516] veth1_vlan: entered promiscuous mode
[   54.829987][ T5516] veth0_macvtap: entered promiscuous mode
[   54.836237][ T5516] veth1_macvtap: entered promiscuous mode
[   54.843230][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.845095][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.879609][ T1921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.879621][ T1921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.883586][   T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.883610][   T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.883626][   T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.883640][   T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.902574][ T1772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.902590][ T1772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.989875][   T30] audit: type=1800 audit(54.989:3): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.141" name="/newroot/0" dev="tmpfs" ino=13 res=0 errno=0
[   56.873236][ T4727] Bluetooth: hci1: command tx timeout
[   59.079938][ T4727] Bluetooth: hci1: command tx timeout
[   61.308265][ T4727] Bluetooth: hci1: command tx timeout
[   65.106403][ T1592] ieee802154 phy0 wpan0: encryption failed: -22
[   65.106454][ T1592] ieee802154 phy1 wpan1: encryption failed: -22
[   65.111673][    T9] cfg80211: failed to load regulatory.db
[  131.682902][ T1592] ieee802154 phy0 wpan0: encryption failed: -22
[  131.682933][ T1592] ieee802154 phy1 wpan1: encryption failed: -22
[  161.683775][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  161.683806][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  161.683846][ T4725] Bluetooth: hci3: command 0x0406 tx timeout
[  189.426347][ T4727] Bluetooth: hci1: command 0x0406 tx timeout
[  198.270052][ T1592] ieee802154 phy0 wpan0: encryption failed: -22
[  198.270100][ T1592] ieee802154 phy1 wpan1: encryption failed: -22
[  210.665374][ T5728] 
: renamed from bond_slave_0 (while UP)
[  210.753850][ T5724] FAULT_INJECTION: forcing a failure.
[  210.753850][ T5724] name failslab, interval 1, probability 0, space 0, times 0
[  210.753873][ T5724] CPU: 0 UID: 0 PID: 5724 Comm: syz.3.152 Not tainted syzkaller #0 PREEMPT 
[  210.753889][ T5724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  210.753895][ T5724] Call trace:
[  210.753898][ T5724]  show_stack+0x2c/0x3c (C)
[  210.753917][ T5724]  __dump_stack+0x30/0x40
[  210.753931][ T5724]  dump_stack_lvl+0xd8/0x12c
[  210.753942][ T5724]  dump_stack+0x1c/0x28
[  210.753953][ T5724]  should_fail_ex+0x41c/0x590
[  210.753967][ T5724]  should_failslab+0xc4/0x120
[  210.753980][ T5724]  __kmalloc_cache_node_noprof+0x98/0x618
[  210.753989][ T5724]  alloc_cpumask_var_node+0x90/0x138
[  210.754000][ T5724]  io_wq_create+0x128/0x738
[  210.754009][ T5724]  io_uring_alloc_task_context+0x200/0x598
[  210.754020][ T5724]  __io_uring_add_tctx_node+0x3ac/0x4e4
[  210.754032][ T5724]  io_uring_create+0x4c8/0x830
[  210.754042][ T5724]  __arm64_sys_io_uring_setup+0x284/0x290
[  210.754051][ T5724]  invoke_syscall+0x98/0x244
[  210.754064][ T5724]  el0_svc_common+0xec/0x23c
[  210.754075][ T5724]  do_el0_svc+0x4c/0x5c
[  210.754086][ T5724]  el0_svc+0x64/0x260
[  210.754097][ T5724]  el0t_64_sync_handler+0x44/0x104
[  210.754109][ T5724]  el0t_64_sync+0x198/0x19c
[  210.754388][ T5724] => alloc_cpumask_var: failed!
[  210.754395][ T5724] CPU: 0 UID: 0 PID: 5724 Comm: syz.3.152 Not tainted syzkaller #0 PREEMPT 
[  210.754404][ T5724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  210.754409][ T5724] Call trace:
[  210.754411][ T5724]  show_stack+0x2c/0x3c (C)
[  210.754423][ T5724]  __dump_stack+0x30/0x40
[  210.754435][ T5724]  dump_stack_lvl+0xd8/0x12c
[  210.754446][ T5724]  dump_stack+0x1c/0x28
[  210.754457][ T5724]  alloc_cpumask_var_node+0xfc/0x138
[  210.754466][ T5724]  io_wq_create+0x128/0x738
[  210.754475][ T5724]  io_uring_alloc_task_context+0x200/0x598
[  210.754485][ T5724]  __io_uring_add_tctx_node+0x3ac/0x4e4
[  210.754497][ T5724]  io_uring_create+0x4c8/0x830
[  210.754514][ T5724]  __arm64_sys_io_uring_setup+0x284/0x290
[  210.754524][ T5724]  invoke_syscall+0x98/0x244
[  210.754536][ T5724]  el0_svc_common+0xec/0x23c
[  210.754547][ T5724]  do_el0_svc+0x4c/0x5c
[  210.754558][ T5724]  el0_svc+0x64/0x260
[  210.754569][ T5724]  el0t_64_sync_handler+0x44/0x104
[  210.754580][ T5724]  el0t_64_sync+0x198/0x19c
[  211.786988][ T5753] FAULT_INJECTION: forcing a failure.
[  211.786988][ T5753] name failslab, interval 1, probability 0, space 0, times 0
[  211.787007][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz.2.157 Not tainted syzkaller #0 PREEMPT 
[  211.787017][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  211.787022][ T5753] Call trace:
[  211.787025][ T5753]  show_stack+0x2c/0x3c (C)
[  211.787043][ T5753]  __dump_stack+0x30/0x40
[  211.787056][ T5753]  dump_stack_lvl+0xd8/0x12c
[  211.787066][ T5753]  dump_stack+0x1c/0x28
[  211.787075][ T5753]  should_fail_ex+0x41c/0x590
[  211.787089][ T5753]  should_failslab+0xc4/0x120
[  211.787102][ T5753]  __kmalloc_flags_noprof+0x140/0x724
[  211.787111][ T5753]  alloc_slab_obj_exts+0x70/0x1bc
[  211.787122][ T5753]  __memcg_slab_post_alloc_hook+0x46c/0x8c0
[  211.787133][ T5753]  kmem_cache_alloc_node_noprof+0x3d8/0x604
[  211.787140][ T5753]  __alloc_skb+0x1f0/0x610
[  211.787149][ T5753]  alloc_skb_with_frags+0xb8/0x690
[  211.787156][ T5753]  sock_alloc_send_pskb+0x740/0x850
[  211.787163][ T5753]  unix_dgram_sendmsg+0x434/0x1078
[  211.787174][ T5753]  __sock_sendmsg+0xc8/0x17c
[  211.787182][ T5753]  ____sys_sendmsg+0x3f8/0x6c8
[  211.787190][ T5753]  ___sys_sendmsg+0x198/0x224
[  211.787199][ T5753]  __sys_sendmmsg+0x204/0x580
[  211.787207][ T5753]  __arm64_sys_sendmmsg+0xac/0xc8
[  211.787219][ T5753]  invoke_syscall+0x98/0x244
[  211.787232][ T5753]  el0_svc_common+0xec/0x23c
[  211.787244][ T5753]  do_el0_svc+0x4c/0x5c
[  211.787255][ T5753]  el0_svc+0x64/0x260
[  211.787265][ T5753]  el0t_64_sync_handler+0x44/0x104
[  211.787274][ T5753]  el0t_64_sync+0x198/0x19c
[  211.790050][ T5752] Bluetooth: MGMT ver 1.23
[  211.971200][ T5757] loop3: detected capacity change from 0 to 256
[  211.974759][ T5757] vfat: Unknown parameter 'hash'
[  212.184351][ T5759] FAULT_INJECTION: forcing a failure.
[  212.184351][ T5759] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.184372][ T5759] CPU: 0 UID: 0 PID: 5759 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT 
[  212.184383][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  212.184389][ T5759] Call trace:
[  212.184392][ T5759]  show_stack+0x2c/0x3c (C)
[  212.184413][ T5759]  __dump_stack+0x30/0x40
[  212.184427][ T5759]  dump_stack_lvl+0xd8/0x12c
[  212.184439][ T5759]  dump_stack+0x1c/0x28
[  212.184450][ T5759]  should_fail_ex+0x41c/0x590
[  212.184467][ T5759]  should_fail+0x14/0x24
[  212.184479][ T5759]  should_fail_usercopy+0x20/0x30
[  212.184492][ T5759]  strncpy_from_user+0x48/0x388
[  212.184502][ T5759]  __arm64_sys_add_key+0x150/0x43c
[  212.184519][ T5759]  invoke_syscall+0x98/0x244
[  212.184532][ T5759]  el0_svc_common+0xec/0x23c
[  212.184544][ T5759]  do_el0_svc+0x4c/0x5c
[  212.184555][ T5759]  el0_svc+0x64/0x260
[  212.184568][ T5759]  el0t_64_sync_handler+0x44/0x104
[  212.184579][ T5759]  el0t_64_sync+0x198/0x19c
[  212.184822][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'.
[  212.339732][ T5781] loop1: detected capacity change from 0 to 512
[  212.372618][ T5767] cgroup: fork rejected by pids controller in /syz2
[  212.423368][ T5814] Bluetooth: MGMT ver 1.23
[  212.457384][ T5821] netlink: 'syz.0.166': attribute type 21 has an invalid length.
[  212.457424][ T5821] netlink: 132 bytes leftover after parsing attributes in process `syz.0.166'.
[  212.458981][ T5816] netlink: 64 bytes leftover after parsing attributes in process `syz.4.165'.
[  212.484633][ T5824] loop2: detected capacity change from 0 to 1024
[  212.490778][ T5824] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  212.490821][ T5824] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  212.491544][ T5824] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  212.491657][ T5824] EXT4-fs (loop2): orphan cleanup on readonly fs
[  212.492043][ T5824] EXT4-fs error (device loop2): ext4_quota_enable:7256: comm syz.2.167: Bad quota inum: 9, type: 2
[  212.492063][ T5824] loop2: lost filesystem error report for type 5 error -117
[  212.492150][ T5824] EXT4-fs (loop2): Remounting filesystem read-only
[  212.492158][ T5824] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix.
[  212.492322][ T5824] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  212.493473][ T5824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  212.519246][ T5827] loop1: detected capacity change from 0 to 128
[  212.522087][ T5827] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  212.527697][ T5827] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  212.530195][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.560091][ T5827] [U] ^R
[  212.577806][ T5829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.577978][ T5829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.595820][ T5837] Illegal XDP return value 3211726848 on prog  (id 79) dev syz_tun, expect packet loss!
[  212.613742][ T5841] FAULT_INJECTION: forcing a failure.
[  212.613742][ T5841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.613759][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.4.172 Not tainted syzkaller #0 PREEMPT 
[  212.613769][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  212.613775][ T5841] Call trace:
[  212.613778][ T5841]  show_stack+0x2c/0x3c (C)
[  212.613797][ T5841]  __dump_stack+0x30/0x40
[  212.613809][ T5841]  dump_stack_lvl+0xd8/0x12c
[  212.613820][ T5841]  dump_stack+0x1c/0x28
[  212.613831][ T5841]  should_fail_ex+0x41c/0x590
[  212.613845][ T5841]  should_fail+0x14/0x24
[  212.613856][ T5841]  should_fail_usercopy+0x20/0x30
[  212.613869][ T5841]  strncpy_from_user+0x48/0x388
[  212.613879][ T5841]  __arm64_sys_add_key+0x150/0x43c
[  212.613889][ T5841]  invoke_syscall+0x98/0x244
[  212.613901][ T5841]  el0_svc_common+0xec/0x23c
[  212.613913][ T5841]  do_el0_svc+0x4c/0x5c
[  212.613924][ T5841]  el0_svc+0x64/0x260
[  212.613936][ T5841]  el0t_64_sync_handler+0x44/0x104
[  212.613947][ T5841]  el0t_64_sync+0x198/0x19c
[  212.614174][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'.
[  212.688659][ T5848] bridge_slave_0: left allmulticast mode
[  212.688679][ T5848] bridge_slave_0: left promiscuous mode
[  212.688754][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.697075][ T5848] bridge_slave_1: left allmulticast mode
[  212.697092][ T5848] bridge_slave_1: left promiscuous mode
[  212.697153][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.714662][ T5848] bond0: (slave bond_slave_0): Releasing backup interface
[  212.721780][ T5848] bond0: (slave bond_slave_1): Releasing backup interface
[  212.774471][ T5848] team0: Port device team_slave_0 removed
[  212.777423][ T5848] team0: Port device team_slave_1 removed
[  212.777751][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.777760][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.790170][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.790182][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.802813][ T5848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  212.812157][   T30] audit: type=1326 audit(200.761:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.179" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2779368 code=0x0
[  212.869964][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.870123][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.890674][ T5872] mmap: syz.4.183 (5872) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  212.905936][ T5875] FAULT_INJECTION: forcing a failure.
[  212.905936][ T5875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.905954][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: syz.1.184 Not tainted syzkaller #0 PREEMPT 
[  212.905965][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  212.905970][ T5875] Call trace:
[  212.905974][ T5875]  show_stack+0x2c/0x3c (C)
[  212.905994][ T5875]  __dump_stack+0x30/0x40
[  212.906007][ T5875]  dump_stack_lvl+0xd8/0x12c
[  212.906018][ T5875]  dump_stack+0x1c/0x28
[  212.906030][ T5875]  should_fail_ex+0x41c/0x590
[  212.906043][ T5875]  should_fail+0x14/0x24
[  212.906055][ T5875]  should_fail_usercopy+0x20/0x30
[  212.906068][ T5875]  strncpy_from_user+0x48/0x388
[  212.906078][ T5875]  __arm64_sys_add_key+0x150/0x43c
[  212.906088][ T5875]  invoke_syscall+0x98/0x244
[  212.906101][ T5875]  el0_svc_common+0xec/0x23c
[  212.906112][ T5875]  do_el0_svc+0x4c/0x5c
[  212.906124][ T5875]  el0_svc+0x64/0x260
[  212.906136][ T5875]  el0t_64_sync_handler+0x44/0x104
[  212.906147][ T5875]  el0t_64_sync+0x198/0x19c
[  212.906372][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'.
[  213.001419][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'.
[  213.186927][ T5880] loop3: detected capacity change from 0 to 1024
[  213.187242][ T5880] EXT4-fs: Ignoring removed orlov option
[  213.206373][ T5880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.219276][ T5880] EXT4-fs error (device loop3): ext4_lookup:1787: inode #16: comm syz.3.185: unexpected EA_INODE flag
[  213.220396][ T5880] EXT4-fs error (device loop3): ext4_lookup:1787: inode #16: comm syz.3.185: unexpected EA_INODE flag
[  213.221009][ T5880] overlayfs: failed to resolve './file2': -117
[  213.222605][ T5880] overlay: ./file1 is not a directory
[  213.242545][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.300692][ T5891] FAULT_INJECTION: forcing a failure.
[  213.300692][ T5891] name failslab, interval 1, probability 0, space 0, times 0
[  213.300712][ T5891] CPU: 1 UID: 0 PID: 5891 Comm: syz.3.188 Not tainted syzkaller #0 PREEMPT 
[  213.300723][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  213.300728][ T5891] Call trace:
[  213.300731][ T5891]  show_stack+0x2c/0x3c (C)
[  213.300748][ T5891]  __dump_stack+0x30/0x40
[  213.300760][ T5891]  dump_stack_lvl+0xd8/0x12c
[  213.300769][ T5891]  dump_stack+0x1c/0x28
[  213.300778][ T5891]  should_fail_ex+0x41c/0x590
[  213.300790][ T5891]  should_failslab+0xc4/0x120
[  213.300801][ T5891]  kmem_cache_alloc_node_noprof+0x98/0x604
[  213.300809][ T5891]  __alloc_skb+0x1f0/0x610
[  213.300819][ T5891]  alloc_skb_with_frags+0xb8/0x690
[  213.300826][ T5891]  sock_alloc_send_pskb+0x740/0x850
[  213.300833][ T5891]  unix_dgram_sendmsg+0x434/0x1078
[  213.300843][ T5891]  __sock_sendmsg+0xc8/0x17c
[  213.300851][ T5891]  ____sys_sendmsg+0x3f8/0x6c8
[  213.300860][ T5891]  ___sys_sendmsg+0x198/0x224
[  213.300868][ T5891]  __sys_sendmmsg+0x204/0x580
[  213.300876][ T5891]  __arm64_sys_sendmmsg+0xac/0xc8
[  213.300885][ T5891]  invoke_syscall+0x98/0x244
[  213.300894][ T5891]  el0_svc_common+0xec/0x23c
[  213.300904][ T5891]  do_el0_svc+0x4c/0x5c
[  213.300913][ T5891]  el0_svc+0x64/0x260
[  213.300922][ T5891]  el0t_64_sync_handler+0x44/0x104
[  213.300932][ T5891]  el0t_64_sync+0x198/0x19c
[  213.384911][ T5894] loop2: detected capacity change from 0 to 256
[  213.389791][ T5894] vfat: Unknown parameter 'hash'
[  213.691331][ T5898] loop3: detected capacity change from 0 to 497
[  213.694655][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  213.756338][ T5898] loop3: detected capacity change from 0 to 497
[  213.761006][ T5903] loop0: detected capacity change from 0 to 512
[  213.761231][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  213.762925][ T5903] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  213.800439][ T5903] netlink: 80 bytes leftover after parsing attributes in process `syz.0.190'.
[  213.812350][ T5898] loop3: detected capacity change from 0 to 497
[  213.816360][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  213.848034][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  213.858037][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  213.940773][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  213.957546][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  213.960489][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  213.968399][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  214.043969][ T5927] Invalid ELF header type: 2 != 1
[  214.262006][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  214.272032][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  214.349655][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  214.358953][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  214.377311][ T5898] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (248 blocks)
[  215.144082][ T4820] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  215.245862][ T5992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.206'.
[  215.520058][ T4820] usb 1-1: not running at top speed; connect to a high speed hub
[  215.520092][ T4820] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  215.522490][   T30] audit: type=1326 audit(203.262:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5961 comm="syz.3.202" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2779368 code=0x0
[  215.533711][ T4820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.533730][ T4820] usb 1-1: Product: А
[  215.533740][ T4820] usb 1-1: Manufacturer: й
[  215.533748][ T4820] usb 1-1: SerialNumber: 둕벹龳寎佤῵ﻟ搋㏲䙚즃起ὧ荄茄ᢳᬎ鉦⪅犙砐ঢ়拉廋ﻢ停⦡鞧皽㩃棋ຈ䩐흁⊝輰쬃늲떚誘೫ႁ䰌熎？쵹䶘׉찯塈挙
[  215.777118][ T6029] bridge0: port 1(bridge_slave_0) entered listening state
[  215.777626][ T4820] usb 1-1: USB disconnect, device number 4
[  215.802556][ T6029] syzkaller0: tun_chr_ioctl cmd 1074025677
[  215.803495][ T6029] syzkaller0: linktype set to 776
[  216.154013][ T6058] capability: warning: `syz.1.219' uses deprecated v2 capabilities in a way that may be insecure
[  216.596482][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'.
[  216.675252][ T6065] EXT4-fs (loop1): Test dummy encryption mode enabled
[  216.677950][ T6065] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.220: inode has both inline data and extents flags
[  216.677971][ T6065] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  216.678399][ T6065] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.220: couldn't read orphan inode 15 (err -117)
[  216.678413][ T6065] loop1: lost filesystem error report for type 5 error -117
[  216.678957][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.728117][ T6065] fscrypt: AES-256-XTS using blk-crypto-fallback
[  216.834093][ T6065] geneve2: entered promiscuous mode
[  216.855944][ T5516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.050656][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'.
[  217.152918][ T6094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  217.152978][ T6094] System zones: 1-12
[  217.153464][ T6094] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.229: missing EA_INODE flag
[  217.153481][ T6094] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  217.153639][ T6094] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.229: error while reading EA inode 12 err=-117
[  217.153651][ T6094] loop1: lost filesystem error report for type 5 error -117
[  217.156001][ T6094] EXT4-fs (loop1): 1 orphan inode deleted
[  217.158555][ T6094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.182290][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.188996][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.219282][ T5516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.224600][ T6106] vxcan3: entered promiscuous mode
[  217.224614][ T6106] vxcan3: entered allmulticast mode
[  217.255715][ T6108] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  217.255731][ T6108] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  217.263385][ T6108] EXT4-fs (loop1): 1 truncate cleaned up
[  217.266041][ T6108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.361046][ T5516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.848082][ T6122] __nla_validate_parse: 3 callbacks suppressed
[  217.848098][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'.
[  217.851747][ T6122] smc: net device team0 applied user defined pnetid SYZ2
[  217.918824][ T6127] set_capacity_and_notify: 18 callbacks suppressed
[  217.918837][ T6127] loop3: detected capacity change from 0 to 8
[  217.936455][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'.
[  217.997641][   T30] audit: type=1807 audit(205.559:6): action=measure uid>+ res=0
[  217.997662][   T30] audit: type=1802 audit(205.559:7): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.242" res=0 errno=0
[  218.004395][ T6130] ima: policy update failed
[  218.004583][   T30] audit: type=1802 audit(205.559:8): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.242" res=0 errno=0
[  218.037315][ T6135] loop3: detected capacity change from 0 to 512
[  218.047887][ T6135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  218.047924][ T6135] System zones: 1-12
[  218.048182][ T6135] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.243: missing EA_INODE flag
[  218.048194][ T6135] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  218.048290][ T6135] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.243: error while reading EA inode 12 err=-117
[  218.048302][ T6135] loop3: lost filesystem error report for type 5 error -117
[  218.048398][ T6135] EXT4-fs (loop3): 1 orphan inode deleted
[  218.060886][ T6135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.084263][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.865350][ T6158] loop3: detected capacity change from 0 to 512
[  218.865660][ T6158] ext4: Bad value for 'max_dir_size_kb'
[  218.866050][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'.
[  218.956127][ T6163] loop3: detected capacity change from 0 to 8
[  219.302857][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'.
[  219.355467][ T6172] loop0: detected capacity change from 0 to 512
[  219.367130][ T6172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  219.367171][ T6172] System zones: 1-12
[  219.367376][ T6172] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.255: missing EA_INODE flag
[  219.367388][ T6172] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  219.367501][ T6172] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.255: error while reading EA inode 12 err=-117
[  219.367513][ T6172] loop0: lost filesystem error report for type 5 error -117
[  219.367768][ T6172] EXT4-fs (loop0): 1 orphan inode deleted
[  219.382142][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.451823][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.639551][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'.
[  219.667346][ T6193] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  219.667360][ T6193] CPU: 1 UID: 0 PID: 6193 Comm: syz.3.262 Not tainted syzkaller #0 PREEMPT 
[  219.667371][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  219.667376][ T6193] Call trace:
[  219.667379][ T6193]  show_stack+0x2c/0x3c (C)
[  219.667399][ T6193]  __dump_stack+0x30/0x40
[  219.667411][ T6193]  dump_stack_lvl+0xd8/0x12c
[  219.667423][ T6193]  dump_stack+0x1c/0x28
[  219.667434][ T6193]  sysfs_warn_dup+0x9c/0xb8
[  219.667447][ T6193]  sysfs_create_dir_ns+0x190/0x1f4
[  219.667460][ T6193]  kobject_add_internal+0x290/0x6f0
[  219.667473][ T6193]  kobject_add_varg+0x9c/0xe8
[  219.667485][ T6193]  kobject_add+0x110/0x1c8
[  219.667497][ T6193]  device_add+0x394/0x9e0
[  219.667507][ T6193]  device_register+0x28/0x38
[  219.667515][ T6193]  tty_register_device_attr+0x31c/0x5e8
[  219.667532][ T6193]  tty_register_device+0x3c/0x50
[  219.667542][ T6193]  gsm_activate_mux+0xdc/0x284
[  219.667553][ T6193]  gsmld_ioctl+0xea8/0x1414
[  219.667562][ T6193]  tty_ioctl+0x8a8/0xcb0
[  219.667571][ T6193]  __arm64_sys_ioctl+0x154/0x1cc
[  219.667584][ T6193]  invoke_syscall+0x98/0x244
[  219.667596][ T6193]  el0_svc_common+0xec/0x23c
[  219.667608][ T6193]  do_el0_svc+0x4c/0x5c
[  219.667619][ T6193]  el0_svc+0x64/0x260
[  219.667630][ T6193]  el0t_64_sync_handler+0x44/0x104
[  219.667641][ T6193]  el0t_64_sync+0x198/0x19c
[  219.667658][ T6193] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  220.099706][ T6212] gadgetfs: bound to dummy_udc driver
[  220.128250][ T6212] loop3: detected capacity change from 0 to 2048
[  220.155379][ T6212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.358986][  T866] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  220.360999][    C1] gadgetfs: connected
[  220.361125][  T866] gadgetfs: disconnected
[  220.478393][ T6211] gadgetfs: suspended from state 2
[  220.497034][ T6219] loop5: detected capacity change from 0 to 7
[  220.499177][ T6219]  loop5:
[  220.499200][ T6219] loop5: partition table partially beyond EOD, truncated
[  220.519238][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.578155][ T6223] loop3: detected capacity change from 0 to 512
[  220.579406][ T6221] loop1: detected capacity change from 0 to 1024
[  220.592867][ T6223] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  220.592893][ T6223] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  220.607498][ T6221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.662263][ T6232] loop3: detected capacity change from 0 to 512
[  220.662527][ T6232] ext4: Unknown parameter '.'
[  220.714329][ T5516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.736920][  T866] usb 1-1: device not accepting address 5, error -71
[  220.770840][ T6236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  220.770875][ T6236] System zones: 1-12
[  220.771120][ T6236] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.271: missing EA_INODE flag
[  220.771132][ T6236] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  220.771421][ T6236] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.271: error while reading EA inode 12 err=-117
[  220.771438][ T6236] loop0: lost filesystem error report for type 5 error -117
[  220.771568][ T6236] EXT4-fs (loop0): 1 orphan inode deleted
[  220.778001][ T6236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.782292][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[  220.800318][ T6243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  220.800358][ T6243] System zones: 1-12
[  220.803822][ T6243] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.274: missing EA_INODE flag
[  220.803837][ T6243] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  220.811685][ T6243] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.274: error while reading EA inode 12 err=-117
[  220.811708][ T6243] loop3: lost filesystem error report for type 5 error -117
[  220.812219][    C1] EXT4-fs (loop3): error count since last fsck: 2
[  220.812232][    C1] EXT4-fs (loop3): initial error at time 208: ext4_xattr_inode_iget:437: inode 12
[  220.812251][    C1] EXT4-fs (loop3): last error at time 208: ext4_xattr_inode_iget:442
[  220.824679][ T6243] EXT4-fs (loop3): 1 orphan inode deleted
[  220.825128][ T6243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.905735][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.923922][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.924055][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'.
[  220.924107][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.941302][ T6250] netlink: 'syz.3.275': attribute type 9 has an invalid length.
[  220.980392][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.982741][ T6236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.998432][ T6256] netlink: 'syz.3.275': attribute type 9 has an invalid length.
[  220.998824][ T6254] netlink: 'syz.3.275': attribute type 9 has an invalid length.
[  221.178391][ T6260] netlink: 'syz.3.278': attribute type 1 has an invalid length.
[  221.178405][ T6260] netlink: 228 bytes leftover after parsing attributes in process `syz.3.278'.
[  221.183028][ T5387] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.183523][ T5387] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.183545][ T5387] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.183560][ T5387] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.298574][ T6262] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  221.324076][ T6264] gadgetfs: bound to dummy_udc driver
[  221.361618][ T6264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.646990][  T866] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  221.647303][    C1] gadgetfs: connected
[  221.647484][  T866] gadgetfs: disconnected
[  221.680861][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.743047][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.253658][ T6279] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  222.310431][ T6288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  222.310469][ T6288] System zones: 1-12
[  222.310806][ T6288] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.286: missing EA_INODE flag
[  222.310819][ T6288] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  222.310931][ T6288] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.286: error while reading EA inode 12 err=-117
[  222.310945][ T6288] loop0: lost filesystem error report for type 5 error -117
[  222.311044][ T6288] EXT4-fs (loop0): 1 orphan inode deleted
[  222.311471][ T6288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.366639][ T6291] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  222.414291][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.441270][ T5516] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  222.550623][ T6294] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  222.550640][ T6294] FAT-fs (loop0): Filesystem has been set read-only
[  222.873196][ T6307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  222.873252][ T6307] System zones: 1-12
[  222.873443][ T6307] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.291: missing EA_INODE flag
[  222.873458][ T6307] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  222.874001][ T6307] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.291: error while reading EA inode 12 err=-117
[  222.874020][ T6307] loop3: lost filesystem error report for type 5 error -117
[  222.874395][ T6307] EXT4-fs (loop3): 1 orphan inode deleted
[  222.875708][ T6307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.945125][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.060345][ T6312] gadgetfs: bound to dummy_udc driver
[  223.182141][ T6312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.315778][ T4386] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  223.315977][    C0] gadgetfs: connected
[  223.316094][ T4386] gadgetfs: disconnected
[  223.484441][    C0] gadgetfs: connected
[  223.486900][ T4386] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  223.487121][ T4386] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  223.487138][ T4386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.490818][    C0] gadgetfs: configuration #1
[  223.504762][ T6311] gadgetfs: suspended from state 3
[  223.504791][ T6311] gadgetfs: disconnected
[  223.506276][ T4386] usb 1-1: USB disconnect, device number 7
[  223.562941][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.579734][ T6347] set_capacity_and_notify: 8 callbacks suppressed
[  224.579747][ T6347] loop0: detected capacity change from 0 to 512
[  224.590733][ T6347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  224.590792][ T6347] System zones: 1-12
[  224.590994][ T6347] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.302: missing EA_INODE flag
[  224.591008][ T6347] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  224.594099][ T6347] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.302: error while reading EA inode 12 err=-117
[  224.594120][ T6347] loop0: lost filesystem error report for type 5 error -117
[  224.594345][ T6347] EXT4-fs (loop0): 1 orphan inode deleted
[  224.596208][ T6347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.704709][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.858998][ T6368] gadgetfs: bound to dummy_udc driver
[  225.100869][ T6368] loop0: detected capacity change from 0 to 2048
[  225.109713][ T6368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.374938][ T4820] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  225.375128][    C1] gadgetfs: connected
[  225.376701][ T4820] gadgetfs: disconnected
[  225.537674][    C1] gadgetfs: connected
[  225.538291][ T4820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  225.538720][ T4820] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  225.538744][ T4820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.546197][    C1] gadgetfs: configuration #1
[  225.554409][ T6367] gadgetfs: suspended from state 3
[  225.554437][ T6367] gadgetfs: disconnected
[  225.561630][ T4820] usb 1-1: USB disconnect, device number 8
[  225.689671][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.731959][ T6380] tmpfs: Bad value for 'mpol'
[  226.327158][ T6395] FAULT_INJECTION: forcing a failure.
[  226.327158][ T6395] name failslab, interval 1, probability 0, space 0, times 0
[  226.327177][ T6395] CPU: 1 UID: 0 PID: 6395 Comm: syz.0.316 Not tainted syzkaller #0 PREEMPT 
[  226.327187][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  226.327191][ T6395] Call trace:
[  226.327194][ T6395]  show_stack+0x2c/0x3c (C)
[  226.327212][ T6395]  __dump_stack+0x30/0x40
[  226.327222][ T6395]  dump_stack_lvl+0xd8/0x12c
[  226.327231][ T6395]  dump_stack+0x1c/0x28
[  226.327240][ T6395]  should_fail_ex+0x41c/0x590
[  226.327252][ T6395]  should_failslab+0xc4/0x120
[  226.327263][ T6395]  __kmalloc_noprof+0x108/0x6c8
[  226.327270][ T6395]  tomoyo_encode2+0x10c/0x330
[  226.327280][ T6395]  tomoyo_encode+0x34/0x50
[  226.327289][ T6395]  tomoyo_realpath_from_path+0x488/0x4dc
[  226.327298][ T6395]  tomoyo_path_number_perm+0x1f0/0x500
[  226.327307][ T6395]  tomoyo_file_ioctl+0x2c/0x3c
[  226.327316][ T6395]  security_file_ioctl+0xdc/0x2b0
[  226.327324][ T6395]  __arm64_sys_ioctl+0xb0/0x1cc
[  226.327335][ T6395]  invoke_syscall+0x98/0x244
[  226.327345][ T6395]  el0_svc_common+0xec/0x23c
[  226.327354][ T6395]  do_el0_svc+0x4c/0x5c
[  226.327363][ T6395]  el0_svc+0x64/0x260
[  226.327373][ T6395]  el0t_64_sync_handler+0x44/0x104
[  226.327382][ T6395]  el0t_64_sync+0x198/0x19c
[  226.327394][ T6395] ERROR: Out of memory at tomoyo_realpath_from_path.
[  226.331129][ T6394] loop0: detected capacity change from 0 to 512
[  226.331449][ T6394] ext4: Unknown parameter 'noacl'
[  226.336752][ T6392] loop1: detected capacity change from 0 to 8
[  226.498636][ T6403] loop1: detected capacity change from 0 to 256
[  226.550701][ T6406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'.
[  228.418912][ T6425] gadgetfs: bound to dummy_udc driver
[  228.821691][ T4386] gadgetfs: suspended from state 2
[  228.824560][ T4719] ==================================================================
[  228.824567][ T4719] BUG: KASAN: slab-use-after-free in __mutex_lock+0x130/0xf14
[  228.824586][ T4719] Read of size 8 at addr ffff0000f32da058 by task syz-executor/4719
[  228.824593][ T4719] 
[  228.824598][ T4719] CPU: 0 UID: 0 PID: 4719 Comm: syz-executor Not tainted syzkaller #0 PREEMPT 
[  228.824606][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  228.824611][ T4719] Call trace:
[  228.824614][ T4719]  show_stack+0x2c/0x3c (C)
[  228.824626][ T4719]  __dump_stack+0x30/0x40
[  228.824636][ T4719]  dump_stack_lvl+0xd8/0x12c
[  228.824645][ T4719]  print_address_description+0xb0/0x238
[  228.824653][ T4719]  print_report+0x68/0x84
[  228.824659][ T4719]  kasan_report+0x8c/0xc4
[  228.824668][ T4719]  __asan_report_load8_noabort+0x20/0x2c
[  228.824677][ T4719]  __mutex_lock+0x130/0xf14
[  228.824685][ T4719]  mutex_lock_interruptible_nested+0x24/0x30
[  228.824694][ T4719]  ep_open+0x58/0x25c
[  228.824704][ T4719]  do_dentry_open+0x5c4/0xfc0
[  228.824714][ T4719]  vfs_open+0x44/0x2dc
[  228.824722][ T4719]  path_openat+0x1084/0x18f4
[  228.824731][ T4719]  do_file_open+0x1c8/0x2e8
[  228.824739][ T4719]  do_sys_openat2+0x114/0x1e8
[  228.824748][ T4719]  do_sys_open+0xb0/0xe0
[  228.824757][ T4719]  __arm64_sys_openat+0xa8/0xc4
[  228.824767][ T4719]  invoke_syscall+0x98/0x244
[  228.824777][ T4719]  el0_svc_common+0xec/0x23c
[  228.824786][ T4719]  do_el0_svc+0x4c/0x5c
[  228.824795][ T4719]  el0_svc+0x64/0x260
[  228.824803][ T4719]  el0t_64_sync_handler+0x44/0x104
[  228.824812][ T4719]  el0t_64_sync+0x198/0x19c
[  228.824820][ T4719] 
[  228.824822][ T4719] Allocated by task 6425:
[  228.824826][ T4719]  kasan_save_track+0x40/0x78
[  228.824833][ T4719]  kasan_save_alloc_info+0x40/0x50
[  228.824840][ T4719]  __kasan_kmalloc+0x9c/0xb4
[  228.824846][ T4719]  __kmalloc_cache_noprof+0x2f4/0x5fc
[  228.824852][ T4719]  gadgetfs_bind+0x204/0x75c
[  228.824860][ T4719]  gadget_bind_driver+0x274/0x834
[  228.824868][ T4719]  really_probe+0x29c/0x800
[  228.824874][ T4719]  __driver_probe_device+0x1e0/0x350
[  228.824879][ T4719]  driver_probe_device+0x6c/0x19c
[  228.824885][ T4719]  __driver_attach+0x168/0x384
[  228.824890][ T4719]  bus_for_each_dev+0x128/0x1b4
[  228.824898][ T4719]  driver_attach+0x50/0x60
[  228.824903][ T4719]  bus_add_driver+0x208/0x500
[  228.824910][ T4719]  driver_register+0x220/0x310
[  228.824916][ T4719]  usb_gadget_register_driver_owner+0xf0/0x25c
[  228.824923][ T4719]  dev_config+0x91c/0xcc0
[  228.824931][ T4719]  vfs_write+0x2a4/0xa0c
[  228.824939][ T4719]  ksys_write+0x12c/0x228
[  228.824947][ T4719]  __arm64_sys_write+0x84/0x98
[  228.824955][ T4719]  invoke_syscall+0x98/0x244
[  228.824963][ T4719]  el0_svc_common+0xec/0x23c
[  228.824971][ T4719]  do_el0_svc+0x4c/0x5c
[  228.824978][ T4719]  el0_svc+0x64/0x260
[  228.824986][ T4719]  el0t_64_sync_handler+0x44/0x104
[  228.824994][ T4719]  el0t_64_sync+0x198/0x19c
[  228.824999][ T4719] 
[  228.825000][ T4719] Freed by task 4386:
[  228.825004][ T4719]  kasan_save_track+0x40/0x78
[  228.825009][ T4719]  kasan_save_free_info+0x54/0x6c
[  228.825016][ T4719]  __kasan_slab_free+0x74/0xa4
[  228.825023][ T4719]  kfree+0x188/0x698
[  228.825027][ T4719]  put_ep+0xd0/0x144
[  228.825035][ T4719]  destroy_ep_files+0x244/0x2dc
[  228.825043][ T4719]  gadgetfs_unbind+0x114/0x1f0
[  228.825050][ T4719]  gadget_unbind_driver+0x188/0x790
[  228.825057][ T4719]  device_remove+0xc4/0x134
[  228.825063][ T4719]  device_release_driver_internal+0x124/0x20c
[  228.825068][ T4719]  driver_detach+0x124/0x1b4
[  228.825073][ T4719]  bus_remove_driver+0x124/0x22c
[  228.825081][ T4719]  driver_unregister+0x78/0xac
[  228.825087][ T4719]  usb_gadget_unregister_driver+0x50/0x78
[  228.825094][ T4719]  dev_release+0x8c/0x15c
[  228.825101][ T4719]  __fput+0x338/0x74c
[  228.825107][ T4719]  delayed_fput+0x78/0xac
[  228.825112][ T4719]  process_scheduled_works+0x91c/0x1250
[  228.825120][ T4719]  worker_thread+0x798/0xbd0
[  228.825127][ T4719]  kthread+0x304/0x3d4
[  228.825133][ T4719]  ret_from_fork+0x10/0x20
[  228.825138][ T4719] 
[  228.825139][ T4719] The buggy address belongs to the object at ffff0000f32da000
[  228.825139][ T4719]  which belongs to the cache kmalloc-512 of size 512
[  228.825145][ T4719] The buggy address is located 88 bytes inside of
[  228.825145][ T4719]  freed 512-byte region [ffff0000f32da000, ffff0000f32da200)
[  228.825152][ T4719] 
[  228.825154][ T4719] The buggy address belongs to the physical page:
[  228.825158][ T4719] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1332d8
[  228.825165][ T4719] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  228.825170][ T4719] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  228.825178][ T4719] page_type: f5(slab)
[  228.825185][ T4719] raw: 05ffc00000000040 ffff0000c0001c80 dead000000000100 dead000000000122
[  228.825190][ T4719] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  228.825196][ T4719] head: 05ffc00000000040 ffff0000c0001c80 dead000000000100 dead000000000122
[  228.825201][ T4719] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  228.825207][ T4719] head: 05ffc00000000002 fffffdffc3ccb601 00000000ffffffff 00000000ffffffff
[  228.825212][ T4719] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  228.825215][ T4719] page dumped because: kasan: bad access detected
[  228.825218][ T4719] 
[  228.825219][ T4719] Memory state around the buggy address:
[  228.825223][ T4719]  ffff0000f32d9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.825227][ T4719]  ffff0000f32d9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.825232][ T4719] >ffff0000f32da000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.825235][ T4719]                                                     ^
[  228.825238][ T4719]  ffff0000f32da080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.825242][ T4719]  ffff0000f32da100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.825245][ T4719] ==================================================================
[  228.825599][ T4719] Disabling lock debugging due to kernel taint
[  251.038681][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 24s! [syz.1.326:6437]
[  251.038697][    C1] Modules linked in:
[  251.038703][    C1] irq event stamp: 0
[  251.142657][    C1] hardirqs last  enabled at (0): [<0000000000000000>] 0x0
[  251.143866][    C1] hardirqs last disabled at (0): [<ffff8000802efd80>] copy_process+0x1398/0x3354
[  251.145471][    C1] softirqs last  enabled at (0): [<ffff8000802efda0>] copy_process+0x13b8/0x3354
[  251.147083][    C1] softirqs last disabled at (0): [<0000000000000000>] 0x0