last executing test programs:

14.935622982s ago: executing program 3 (id=927):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$nl_route(0x10, 0x3, 0x0)

11.939011217s ago: executing program 3 (id=931):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r3, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

10.309052322s ago: executing program 0 (id=938):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x1d4c, &(0x7f0000000040)={0x0, 0xcf78, 0xc000, 0x2, 0x58})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9.128409241s ago: executing program 0 (id=939):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

8.62758996s ago: executing program 3 (id=940):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4)

8.125109159s ago: executing program 3 (id=942):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000900))
close_range(r0, 0xffffffffffffffff, 0x0)

6.783501407s ago: executing program 1 (id=946):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
getpid()
sched_setscheduler(r1, 0x3, &(0x7f0000000180)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5401000010000100feffffff000100007f00000100"/32, @ANYRES64=r2, @ANYRES32=0x0], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r4)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000240)={0x12, 0x0, 0x0, 0x0, 0x1000000009, 0x0, 0x0, 0x7, 0x0, "002546e3aa02e11c073d19e6c41dc85e57c88dcb0beceb261df83228d5e07180252d19ead217705e99f7906e044e246f726495c45e940000000100", "131baeb9c2f06041a56fa2b226bb94ce7cadf37e68998fe9d212f3fb2a2a3fbbddaa414ad649565c244427cb0cd26affa0d5956c888ebce027a1aedcf83aee5a", "e978332d4728ebf2cab7d407b8f8e318743509536547e06c6548ffbca79e0f83", [0x8000000000000000, 0x200]})
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0)
r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f0000001dc0)={0x9, 0x84, 0x80000, {r7}}, 0x20)
r8 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x480, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d1c, &(0x7f0000000100))

6.249414009s ago: executing program 3 (id=948):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x1d4c, &(0x7f0000000040)={0x0, 0xcf78, 0xc000, 0x2, 0x58})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.170020413s ago: executing program 0 (id=949):
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0x2020)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil})

4.831726711s ago: executing program 1 (id=952):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4.718756538s ago: executing program 0 (id=953):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0x80009, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x8000)
close(0x3)
socket$kcm(0x29, 0x2, 0x0)
r7 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x237b, 0x400, 0x7, 0x28b}, &(0x7f00000000c0)=<r8=>0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)="da64bb0c27d0", 0x6}, {&(0x7f00000003c0)="a461a461f47cbce685a1298202253497a27b852558d7786ae6", 0x19}, {&(0x7f0000000400)="456a9449aaeef8e99013d9e1ec9074d5ce3e6c64239838f98e34a97ca7a6995d9a264841f5", 0x25}], 0x3, &(0x7f0000000500)=[@init={0x18, 0x84, 0x0, {0x6, 0x6, 0x1, 0xd431}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x800}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x9, 0x0, 0x8, 0xb}}, @sndrcv={0x30, 0x84, 0x1, {0x8a3d, 0xfff9, 0x200, 0x9, 0x48, 0x5, 0x3, 0x9d2}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0xd8, 0x3cd68c9b91dccf8b}, 0x20000811)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)

4.643579892s ago: executing program 2 (id=954):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
connect$inet(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0xffffffff, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.420112735s ago: executing program 1 (id=955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x1f, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000003000080000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000f08500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4.021309978s ago: executing program 2 (id=956):
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008450}, 0x1)
sendmsg$NFT_MSG_GETCHAIN(r0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/14], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000880)={{r1}, "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"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x308}, 0x0, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ffffffffee, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)

3.975544491s ago: executing program 1 (id=957):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

3.952040902s ago: executing program 0 (id=958):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0)
mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r5, 0xdffaa000)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3)
ioctl$KVM_GET_REG_LIST(r8, 0xc008aeb0, &(0x7f00000008c0))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
lseek(r0, 0x8, 0x0)

2.147840118s ago: executing program 1 (id=959):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6(0xa, 0x2, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.946722629s ago: executing program 0 (id=960):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
getpid()
sched_setscheduler(r1, 0x3, &(0x7f0000000180)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5401000010000100feffffff000100007f00000100"/32, @ANYRES64=r2, @ANYRES32=0x0], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r4)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000240)={0x12, 0x0, 0x0, 0x0, 0x1000000009, 0x0, 0x0, 0x7, 0x0, "002546e3aa02e11c073d19e6c41dc85e57c88dcb0beceb261df83228d5e07180252d19ead217705e99f7906e044e246f726495c45e940000000100", "131baeb9c2f06041a56fa2b226bb94ce7cadf37e68998fe9d212f3fb2a2a3fbbddaa414ad649565c244427cb0cd26affa0d5956c888ebce027a1aedcf83aee5a", "e978332d4728ebf2cab7d407b8f8e318743509536547e06c6548ffbca79e0f83", [0x8000000000000000, 0x200]})
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0)
r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f0000001dc0)={0x9, 0x84, 0x80000, {r7}}, 0x20)
r8 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x480, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d1c, &(0x7f0000000100))

1.867555224s ago: executing program 2 (id=961):
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0x2020)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000ffc000/0x4000)=nil})

1.572625131s ago: executing program 3 (id=962):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8002, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x1, 0x6249, &(0x7f000000c6c0)="$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")
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)

1.317552527s ago: executing program 1 (id=963):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000)

447.132282ms ago: executing program 2 (id=964):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
connect$inet(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000140)=0xffffffff, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

183.511428ms ago: executing program 2 (id=965):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x1f, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000003000080000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000f08500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 2 (id=966):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0x80009, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x8000)
close(0x3)
socket$kcm(0x29, 0x2, 0x0)
r8 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x237b, 0x400, 0x7, 0x28b}, &(0x7f00000000c0)=<r9=>0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)="da64bb0c27d0", 0x6}, {&(0x7f00000003c0)="a461a461f47cbce685a1298202253497a27b852558d7786ae6", 0x19}, {&(0x7f0000000400)="456a9449aaeef8e99013d9e1ec9074d5ce3e6c64239838f98e34a97ca7a6995d9a264841f5", 0x25}], 0x3, &(0x7f0000000500)=[@init={0x18, 0x84, 0x0, {0x6, 0x6, 0x1, 0xd431}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x800}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x9, 0x0, 0x8, 0xb}}, @sndrcv={0x30, 0x84, 0x1, {0x8a3d, 0xfff9, 0x200, 0x9, 0x48, 0x5, 0x3, 0x9d2}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0xd8, 0x3cd68c9b91dccf8b}, 0x20000811)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r8, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts.
[   69.774481][ T5756] cgroup: Unknown subsys name 'net'
[   69.912300][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.577814][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.711152][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[   71.717889][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[   73.263651][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.286653][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.294980][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.295382][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.304070][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.309683][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.317075][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.325126][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.332685][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.337501][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.345111][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.360664][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.360844][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.377146][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.377610][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   73.393652][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.395349][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.402116][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   73.415363][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.417916][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.430318][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   73.441002][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.450676][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   73.460648][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.938180][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   73.949122][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   74.039210][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   74.076605][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   74.196428][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.203602][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.214188][ T5776] bridge_slave_0: entered allmulticast mode
[   74.221320][ T5776] bridge_slave_0: entered promiscuous mode
[   74.232018][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.239434][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.247140][ T5773] bridge_slave_0: entered allmulticast mode
[   74.253896][ T5773] bridge_slave_0: entered promiscuous mode
[   74.286614][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.293808][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.303649][ T5776] bridge_slave_1: entered allmulticast mode
[   74.310598][ T5776] bridge_slave_1: entered promiscuous mode
[   74.327393][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.334545][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.341804][ T5773] bridge_slave_1: entered allmulticast mode
[   74.349310][ T5773] bridge_slave_1: entered promiscuous mode
[   74.356064][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.363185][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.370814][ T5769] bridge_slave_0: entered allmulticast mode
[   74.378496][ T5769] bridge_slave_0: entered promiscuous mode
[   74.386514][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.393619][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.401801][ T5769] bridge_slave_1: entered allmulticast mode
[   74.409436][ T5769] bridge_slave_1: entered promiscuous mode
[   74.443926][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.471029][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.521616][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.533934][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.547133][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.573760][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.616542][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.623703][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.633876][ T5768] bridge_slave_0: entered allmulticast mode
[   74.640841][ T5768] bridge_slave_0: entered promiscuous mode
[   74.650147][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.657436][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.664766][ T5768] bridge_slave_1: entered allmulticast mode
[   74.672524][ T5768] bridge_slave_1: entered promiscuous mode
[   74.682095][ T5776] team0: Port device team_slave_0 added
[   74.693718][ T5773] team0: Port device team_slave_0 added
[   74.714075][ T5769] team0: Port device team_slave_0 added
[   74.732569][ T5769] team0: Port device team_slave_1 added
[   74.741255][ T5776] team0: Port device team_slave_1 added
[   74.757761][ T5773] team0: Port device team_slave_1 added
[   74.803417][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.813717][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.820854][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.848475][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.881793][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.901280][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.908559][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.934773][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.952877][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.961622][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.988315][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.000265][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.009743][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.036255][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.074618][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.081913][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.108098][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.126019][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.133026][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.159333][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.173179][ T5768] team0: Port device team_slave_0 added
[   75.183817][ T5768] team0: Port device team_slave_1 added
[   75.216809][ T5776] hsr_slave_0: entered promiscuous mode
[   75.223402][ T5776] hsr_slave_1: entered promiscuous mode
[   75.279560][ T5769] hsr_slave_0: entered promiscuous mode
[   75.286555][ T5769] hsr_slave_1: entered promiscuous mode
[   75.292760][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.301167][ T5769] Cannot create hsr debugfs directory
[   75.307462][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.314442][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.343506][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.382267][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.391878][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.418340][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.466142][ T5777] Bluetooth: hci1: command tx timeout
[   75.492783][ T5773] hsr_slave_0: entered promiscuous mode
[   75.499734][ T5773] hsr_slave_1: entered promiscuous mode
[   75.506185][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.513759][ T5773] Cannot create hsr debugfs directory
[   75.545551][ T5777] Bluetooth: hci3: command tx timeout
[   75.545599][ T5781] Bluetooth: hci0: command tx timeout
[   75.551815][ T5771] Bluetooth: hci2: command tx timeout
[   75.653156][ T5768] hsr_slave_0: entered promiscuous mode
[   75.660358][ T5768] hsr_slave_1: entered promiscuous mode
[   75.666677][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.674376][ T5768] Cannot create hsr debugfs directory
[   75.976655][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.991780][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   76.002327][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   76.021386][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.067065][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.078469][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.098183][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.131832][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.197672][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.212981][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.224169][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.234019][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.339764][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.376543][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.388043][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.411790][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.503593][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.538884][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.578334][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   76.592722][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.625136][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.632636][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.649354][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   76.658437][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   76.677811][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.684920][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.711997][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.719188][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.761381][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.768620][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.780514][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.787900][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.799189][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.806394][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.939008][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.981574][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.046479][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   77.064768][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.071941][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.130527][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.137852][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.423552][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.522817][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.547582][ T5771] Bluetooth: hci1: command tx timeout
[   77.559246][ T5776] veth0_vlan: entered promiscuous mode
[   77.577525][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.621184][ T5776] veth1_vlan: entered promiscuous mode
[   77.627250][ T5771] Bluetooth: hci0: command tx timeout
[   77.636328][ T5777] Bluetooth: hci3: command tx timeout
[   77.641857][ T5771] Bluetooth: hci2: command tx timeout
[   77.732922][ T5773] veth0_vlan: entered promiscuous mode
[   77.748785][ T5769] veth0_vlan: entered promiscuous mode
[   77.771514][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.788499][ T5769] veth1_vlan: entered promiscuous mode
[   77.812302][ T5773] veth1_vlan: entered promiscuous mode
[   77.822449][ T5776] veth0_macvtap: entered promiscuous mode
[   77.840220][ T5776] veth1_macvtap: entered promiscuous mode
[   77.907269][ T5768] veth0_vlan: entered promiscuous mode
[   77.928578][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.941259][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.953715][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.962781][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.971776][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.981092][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.015017][ T5769] veth0_macvtap: entered promiscuous mode
[   78.024503][ T5768] veth1_vlan: entered promiscuous mode
[   78.047616][ T5769] veth1_macvtap: entered promiscuous mode
[   78.057664][ T5773] veth0_macvtap: entered promiscuous mode
[   78.082911][ T5773] veth1_macvtap: entered promiscuous mode
[   78.123178][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.139446][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.151412][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.171737][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.183441][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.196914][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.240259][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.251068][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.264313][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.275828][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.287666][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.302671][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.312282][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.323611][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.333276][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.384479][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.398886][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.409056][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.422391][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.434244][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.449804][ T5768] veth0_macvtap: entered promiscuous mode
[   78.476589][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.488265][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.498099][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.507725][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.520825][ T5768] veth1_macvtap: entered promiscuous mode
[   78.532827][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.556293][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.641807][ T4541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.641913][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.664422][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.664992][ T4541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.693267][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.705236][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.715920][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.726805][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.737928][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.749324][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.760860][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.776797][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.787706][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.798128][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.808892][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.819051][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.832385][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.843996][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.914354][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.923399][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.933641][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.941387][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.951755][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.962934][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.026467][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.034460][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.144942][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.186846][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.365954][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.375850][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.521606][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.545699][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.546956][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.565780][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.637518][ T5771] Bluetooth: hci1: command tx timeout
[   79.706329][ T5771] Bluetooth: hci2: command tx timeout
[   79.715618][ T5771] Bluetooth: hci3: command tx timeout
[   79.715996][ T5777] Bluetooth: hci0: command tx timeout
[   79.782360][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.813232][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.035650][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.055624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.065849][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.425875][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.721335][ T5777] Bluetooth: hci1: command tx timeout
[   81.792874][ T5777] Bluetooth: hci0: command tx timeout
[   81.802553][ T5777] Bluetooth: hci2: command tx timeout
[   81.802638][ T5771] Bluetooth: hci3: command tx timeout
[   82.112463][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   82.726036][ T5873] warning: `syz.2.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.806999][ T5886] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.899160][ T5878] ceph: No mds server is up or the cluster is laggy
[   82.911436][ T5880] libceph: connect (1)[c::]:6789 error -101
[   82.911892][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[   82.955661][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.996774][ T5873] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   83.565798][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   83.946486][   T23] usb 2-1: Using ep0 maxpacket: 16
[   83.958650][   T23] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.985335][   T23] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.015359][   T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   84.024479][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.228327][ T3437] wlan1: Trigger new scan to find an IBSS to join
[   85.309190][   T23] mcp2221 0003:04D8:00DD.0001: item fetching failed at offset 0/5
[   85.318766][   T23] mcp2221 0003:04D8:00DD.0001: can't parse reports
[   85.325452][   T23] mcp2221: probe of 0003:04D8:00DD.0001 failed with error -22
[   86.201585][ T5894] usb 2-1: USB disconnect, device number 2
[   86.430757][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.529302][  T787] cfg80211: failed to load regulatory.db
[   89.407453][ T3437] wlan1: Trigger new scan to find an IBSS to join
[   89.665090][ T5937] tipc: Started in network mode
[   89.670338][ T5937] tipc: Node identity 4, cluster identity 4711
[   89.676821][ T5937] tipc: Node number set to 4
[   91.819013][   T39] wlan1: Creating new IBSS network, BSSID fa:16:51:d4:3d:7f
[   93.317906][ T5960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.434035][ T5975] tipc: Started in network mode
[   94.439048][ T5975] tipc: Node identity 4, cluster identity 4711
[   94.445394][ T5975] tipc: Node number set to 4
[  101.640196][ T6007] tipc: Started in network mode
[  101.645210][ T6007] tipc: Node identity 4, cluster identity 4711
[  101.651541][ T6007] tipc: Node number set to 4
[  101.955907][ T6010] netlink: 'syz.3.30': attribute type 7 has an invalid length.
[  101.963895][ T6010] netlink: 'syz.3.30': attribute type 8 has an invalid length.
[  107.172494][ T6041] netlink: 100 bytes leftover after parsing attributes in process `syz.0.45'.
[  107.277603][ T6043] Zero length message leads to an empty skb
[  113.151866][ T6080] misc userio: Invalid payload size
[  113.158944][ T6080] misc userio: No port type given on /dev/userio
[  113.184750][ T6080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.55'.
[  115.055945][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.065874][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.527013][ T6094] syz.1.58 (6094) used greatest stack depth: 20680 bytes left
[  116.244322][ T6108] tipc: Started in network mode
[  116.249515][ T6108] tipc: Node identity 4, cluster identity 4711
[  116.255880][ T6108] tipc: Node number set to 4
[  120.555317][  T788] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  120.768739][  T788] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[  120.787495][  T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.831401][  T788] usb 1-1: config 0 has no interface number 0
[  120.850276][  T788] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x1C, skipping
[  120.965580][  T788] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping
[  121.015437][  T788] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping
[  121.161759][  T788] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  121.171043][  T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.195014][  T788] usb 1-1: Product: syz
[  121.205170][  T788] usb 1-1: Manufacturer: syz
[  121.216517][  T788] usb 1-1: SerialNumber: syz
[  121.224169][  T788] usb 1-1: config 0 descriptor??
[  121.253038][ T6127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  121.286070][  T788] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[  121.597987][  T788] usb 1-1: USB disconnect, device number 2
[  121.844231][   T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  127.058137][ T6167] overlayfs: missing 'lowerdir'
[  129.183738][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.80'.
[  132.707357][ T6204] trusted_key: encrypted_key: insufficient parameters specified
[  133.162247][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  133.168734][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  133.436740][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.444208][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.315390][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.90'.
[  140.297207][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.101'.
[  141.035491][ T6262] netlink: 'syz.3.102': attribute type 39 has an invalid length.
[  142.095837][ T6272] trusted_key: encrypted_key: insufficient parameters specified
[  145.971792][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'.
[  151.795829][ T6323] netlink: 'syz.0.119': attribute type 39 has an invalid length.
[  153.033167][ T4679] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  153.269466][ T6332] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  153.306229][ T6332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  153.920745][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.123'.
[  157.942683][ T6379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'.
[  160.225450][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'.
[  161.202522][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.140'.
[  163.880991][ T6426] Can't find ip_set type h
[  167.918877][ T6463] Can't find ip_set type h
[  171.592638][ T5880] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  171.912774][ T5880] usb 4-1: Using ep0 maxpacket: 16
[  172.599862][ T6499] Can't find ip_set type h
[  172.730429][ T5880] usb 4-1: unable to read config index 0 descriptor/all
[  172.740234][ T5880] usb 4-1: can't read configurations, error -71
[  173.657851][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[  175.215744][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.223539][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.318582][ T6550] xt_CT: You must specify a L4 protocol and not use inversions on it
[  177.403160][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'.
[  178.142837][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'.
[  183.971559][ T6600] overlayfs: failed to resolve './file0': -2
[  184.923063][ T4679] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  184.996486][ T6596] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  187.473820][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'.
[  190.530220][ T6626] syz.0.204[6626]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  194.606210][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.615590][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  197.299018][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[  197.306239][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  197.312707][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  201.659667][ T6679] Can't find ip_set type hash:ip,po
[  202.539645][ T6691] overlayfs: missing 'workdir'
[  206.735467][ T6707] sched: RT throttling activated
[  207.231311][ T5880] IPVS: starting estimator thread 0...
[  207.415444][ T6710] IPVS: using max 31 ests per chain, 74400 per kthread
[  207.813191][ T5880] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  208.040913][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  208.067190][ T5880] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  208.086630][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.094675][ T5880] usb 1-1: Product: syz
[  208.126040][ T5880] usb 1-1: Manufacturer: syz
[  208.130813][ T5880] usb 1-1: SerialNumber: syz
[  208.168729][ T5880] usb 1-1: config 0 descriptor??
[  208.184852][ T6712] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  208.198863][ T5880] powermate: probe of 1-1:0.0 failed with error -22
[  210.401040][ T6733] Can't find ip_set type hash:ip,po
[  210.590121][ T5880] usb 1-1: USB disconnect, device number 3
[  212.639268][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'.
[  213.332833][ T5811] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  213.613996][ T5811] usb 2-1: device descriptor read/64, error -71
[  213.925445][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  214.115558][ T5811] usb 2-1: device descriptor read/64, error -71
[  214.286694][ T5811] usb usb2-port1: attempt power cycle
[  217.497996][ T4679] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  218.023711][ T6776] Can't find ip_set type hash:ip,por
[  225.190688][ T6814] Can't find ip_set type hash:ip,por
[  239.406173][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'.
[  240.238604][   T28] audit: type=1800 audit(1771073572.368:2): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.280" name="bus" dev="overlay" ino=352 res=0 errno=0
[  242.895305][  T788] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  243.145386][  T788] usb 2-1: Using ep0 maxpacket: 8
[  243.160396][  T788] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  243.174155][  T788] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  243.189254][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.219959][  T788] usb 2-1: Product: syz
[  243.232748][  T788] usb 2-1: Manufacturer: syz
[  243.257614][  T788] usb 2-1: SerialNumber: syz
[  243.280904][  T788] usb 2-1: config 0 descriptor??
[  243.309669][  T788] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  243.329458][  T788] usb 2-1: setting power ON
[  243.344991][  T788] dvb-usb: bulk message failed: -22 (2/0)
[  243.391028][  T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  243.424041][  T788] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  243.458459][  T788] usb 2-1: media controller created
[  243.527864][ T6905] dvb-usb: bulk message failed: -22 (3/0)
[  243.555588][ T6905] dvb-usb: bulk message failed: -22 (4/0)
[  243.562291][  T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  243.572472][ T6905] cxusb: i2c read failed
[  243.635860][  T788] usb 2-1: selecting invalid altsetting 6
[  243.643067][  T788] usb 2-1: digital interface selection failed (-22)
[  243.658846][  T788] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  243.678480][  T788] usb 2-1: setting power OFF
[  243.684962][  T788] dvb-usb: bulk message failed: -22 (2/0)
[  243.725010][  T788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  243.735582][  T788] (NULL device *): no alternate interface
[  244.354811][  T788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  244.527059][  T788] usb 2-1: USB disconnect, device number 6
[  245.104225][ T6922] comedi comedi3: c6xdigio: I/O port conflict (0xcf7,3)
[  245.281243][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'.
[  248.045403][ T6945] netlink: 'syz.0.298': attribute type 39 has an invalid length.
[  248.157964][ T6943] syzkaller0: entered promiscuous mode
[  248.163647][ T6943] syzkaller0: entered allmulticast mode
[  249.026330][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  255.654210][ T6975] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  256.029505][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  256.036915][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  256.387845][ T6978] netlink: 'syz.1.307': attribute type 39 has an invalid length.
[  258.115506][ T5775] Bluetooth: hci2: command 0x0406 tx timeout
[  258.257151][ T6993] netlink: 64 bytes leftover after parsing attributes in process `syz.1.311'.
[  285.730199][ T4337] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  293.158718][ T7203] =======================================================
[  293.158718][ T7203] WARNING: The mand mount option has been deprecated and
[  293.158718][ T7203]          and is ignored by this kernel. Remove the mand
[  293.158718][ T7203]          option from the mount to silence this warning.
[  293.158718][ T7203] =======================================================
[  293.356868][ T7203] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  293.500266][ T7203] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  293.767946][ T7202] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[  293.776795][ T7202] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[  293.785502][ T7202] overlayfs: d_ino too big (94, ino=9223372036854776332, xinobits=3)
[  293.793940][ T7202] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[  293.802926][ T7202] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[  293.811847][ T7202] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[  293.820167][ T7202] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[  293.828808][ T7202] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[  293.837277][ T7202] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3)
[  293.846041][ T7202] overlayfs: d_ino too big (kernel, ino=4611686018427389232, xinobits=3)
[  294.283252][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'.
[  298.204458][   T28] audit: type=1800 audit(1771073630.328:3): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.380" name="bus" dev="overlay" ino=575 res=0 errno=0
[  302.775414][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  303.065451][ T5880] usb 2-1: Using ep0 maxpacket: 16
[  303.251079][ T5880] usb 2-1: config 3 has an invalid interface number: 8 but max is 0
[  303.259410][ T5880] usb 2-1: config 3 has no interface number 0
[  303.269905][ T5880] usb 2-1: config 3 interface 8 has no altsetting 0
[  303.309338][ T5880] usb 2-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=59.30
[  303.326737][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.005377][ T5880] usb 2-1: string descriptor 0 read error: -71
[  304.019538][ T5880] gspca_main: etoms-2.14.0 probing 102c:6251
[  305.519426][ T5880] usb 2-1: USB disconnect, device number 7
[  316.405930][ T7296] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  318.475906][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  318.482276][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  318.967034][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  322.136890][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.409'.
[  330.508960][ T7386] ieee802154 phy0 wpan0: encryption failed: -22
[  331.596262][ T7388] syz.2.426 (7388) used greatest stack depth: 17864 bytes left
[  332.572526][   T28] audit: type=1800 audit(1771073664.698:4): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.431" name="bus" dev="overlay" ino=685 res=0 errno=0
[  333.372930][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.382040][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.138234][ T7408] autofs4:pid:7408:autofs_fill_super: called with bogus options
[  334.622762][ T7415] netlink: 100 bytes leftover after parsing attributes in process `syz.2.436'.
[  340.220038][   T28] audit: type=1800 audit(1771073671.858:5): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.446" name="bus" dev="overlay" ino=542 res=0 errno=0
[  342.837319][ T7462] netlink: 100 bytes leftover after parsing attributes in process `syz.1.448'.
[  349.238790][ T7500] netlink: 100 bytes leftover after parsing attributes in process `syz.1.462'.
[  351.866893][ T4541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  362.851031][ T7569] fuse: Bad value for 'fd'
[  363.050575][ T7567] netlink: 100 bytes leftover after parsing attributes in process `syz.1.473'.
[  363.253485][ T7573] sp0: Synchronizing with TNC
[  363.419045][ T7577] syzkaller0: entered promiscuous mode
[  363.434873][ T7577] syzkaller0: entered allmulticast mode
[  367.854477][ T7618] fuse: Bad value for 'fd'
[  367.874846][ T7613] netlink: 100 bytes leftover after parsing attributes in process `syz.3.491'.
[  375.134621][ T7656] netlink: 100 bytes leftover after parsing attributes in process `syz.0.503'.
[  376.362339][   T28] audit: type=1800 audit(1771073708.488:6): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.506" name="bus" dev="overlay" ino=708 res=0 errno=0
[  378.919502][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  378.926038][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  380.924488][   T28] audit: type=1800 audit(1771073713.048:7): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.516" name="bus" dev="overlay" ino=747 res=0 errno=0
[  381.482265][ T7701] netlink: 100 bytes leftover after parsing attributes in process `syz.1.514'.
[  384.872353][ T7737] xt_hashlimit: size too large, truncated to 1048576
[  385.526128][   T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  386.232746][ T7750] netlink: 'syz.3.530': attribute type 1 has an invalid length.
[  386.679803][ T7753] netlink: 100 bytes leftover after parsing attributes in process `syz.2.532'.
[  388.687487][ T7762] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.534'.
[  389.706463][ T7771] random: crng reseeded on system resumption
[  395.776033][ T7793] netlink: 100 bytes leftover after parsing attributes in process `syz.1.544'.
[  397.115861][ T7811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.548'.
[  404.215026][   T28] audit: type=1800 audit(1771073736.338:8): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.559" name="bus" dev="overlay" ino=801 res=0 errno=0
[  404.715638][ T5811] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  407.523130][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short
[  407.547793][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -71
[  407.566125][ T5811] usb 1-1: can't read configurations, error -71
[  408.926634][ T7873] netlink: 100 bytes leftover after parsing attributes in process `syz.2.563'.
[  410.827262][   T28] audit: type=1800 audit(1771073742.958:9): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.569" name="bus" dev="overlay" ino=907 res=0 errno=0
[  416.756351][ T4541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  418.196726][   T28] audit: type=1800 audit(1771073750.328:10): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.579" name="bus" dev="overlay" ino=823 res=0 errno=0
[  420.064416][ T7941] netlink: 100 bytes leftover after parsing attributes in process `syz.1.575'.
[  423.979469][ T7966] fuse: Bad value for 'fd'
[  424.052272][   T28] audit: type=1800 audit(1771073756.178:11): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.589" name="bus" dev="overlay" ino=939 res=0 errno=0
[  425.229161][ T7978] netlink: 100 bytes leftover after parsing attributes in process `syz.0.593'.
[  428.394163][ T8003] fuse: Bad value for 'fd'
[  430.807521][   T28] audit: type=1800 audit(1771073762.938:12): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.602" name="bus" dev="overlay" ino=891 res=0 errno=0
[  430.847807][ T8013] netlink: 100 bytes leftover after parsing attributes in process `syz.3.604'.
[  432.887569][ T8030] fuse: Bad value for 'fd'
[  434.242871][ T5818] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  434.532925][ T5818] usb 2-1: Using ep0 maxpacket: 16
[  434.664055][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.778459][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  434.819908][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  434.840460][ T5818] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  434.859852][ T5818] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  434.917088][ T5818] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  434.927379][ T5818] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  434.946053][ T5818] usb 2-1: Manufacturer: syz
[  434.961101][ T5818] usb 2-1: config 0 descriptor??
[  435.725800][ T5818] rc_core: IR keymap rc-hauppauge not found
[  435.739046][ T5818] Registered IR keymap rc-empty
[  435.751751][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  435.796047][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  435.857244][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  435.911944][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28
[  436.003055][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.047782][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.101098][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.138202][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.181734][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.221836][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.259364][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.298147][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.346453][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.860438][ T5818] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  436.919679][ T5818] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  436.941118][ T5818] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  436.988558][ T5818] usb 2-1: USB disconnect, device number 8
[  439.222740][ T8083] netlink: 100 bytes leftover after parsing attributes in process `syz.3.619'.
[  439.881893][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'.
[  439.963390][ T8079] bridge_slave_1: left allmulticast mode
[  440.014427][ T8079] bridge_slave_1: left promiscuous mode
[  440.038872][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.090924][ T8079] bridge_slave_0: left allmulticast mode
[  440.116875][ T8079] bridge_slave_0: left promiscuous mode
[  440.128421][   T28] audit: type=1800 audit(1771073772.258:13): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.621" name="bus" dev="overlay" ino=759 res=0 errno=0
[  440.276208][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.398176][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.404640][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  444.427650][   T28] audit: type=1800 audit(1771073776.558:14): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.632" name="bus" dev="overlay" ino=1001 res=0 errno=0
[  445.086134][ T8124] netlink: 100 bytes leftover after parsing attributes in process `syz.1.629'.
[  448.709236][  T156] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  450.904281][ T8162] netlink: 100 bytes leftover after parsing attributes in process `syz.1.642'.
[  452.635912][ T8176] xt_hashlimit: size too large, truncated to 1048576
[  456.165518][ T8195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.653'.
[  456.696744][ T8202] netlink: 100 bytes leftover after parsing attributes in process `syz.2.652'.
[  457.658308][   T28] audit: type=1800 audit(1771073789.788:15): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.656" name="bus" dev="overlay" ino=824 res=0 errno=0
[  463.876924][ T8244] netlink: 100 bytes leftover after parsing attributes in process `syz.1.663'.
[  464.855277][ T8265] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  468.126616][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  468.328285][    T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  468.347291][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.374217][    T9] usb 1-1: config 0 descriptor??
[  468.416652][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  468.828702][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  468.870869][    T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  468.896358][    T9] usb 1-1: media controller created
[  468.938917][   T28] audit: type=1800 audit(1771073801.068:16): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.677" name="bus" dev="overlay" ino=942 res=0 errno=0
[  468.979853][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  469.103900][    T9] gp8psk_fe: Frontend attached
[  469.120699][    T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  469.131285][    T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  469.377368][    T9] gp8psk: usb in 138 operation failed.
[  469.390928][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  469.421893][    T9] gp8psk: found Genpix USB device pID = 203 (hex)
[  469.461085][    T9] usb 1-1: USB disconnect, device number 6
[  469.662377][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  470.807298][ T8304] netlink: 100 bytes leftover after parsing attributes in process `syz.2.681'.
[  471.635795][ T8308] sctp: failed to load transform for md5: -4
[  477.699068][ T8344] netlink: 100 bytes leftover after parsing attributes in process `syz.2.691'.
[  477.955372][   T28] audit: type=1800 audit(1771073810.078:17): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.694" name="bus" dev="overlay" ino=875 res=0 errno=0
[  479.963160][  T156] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  481.493314][ T8375] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  483.208600][ T8388] netlink: 100 bytes leftover after parsing attributes in process `syz.1.703'.
[  486.474005][ T8407] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  487.065191][   T28] audit: type=1800 audit(1771073819.168:18): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.711" name="bus" dev="overlay" ino=1043 res=0 errno=0
[  489.137966][ T8424] netlink: 100 bytes leftover after parsing attributes in process `syz.3.714'.
[  494.522632][ T8464] netlink: 100 bytes leftover after parsing attributes in process `syz.1.725'.
[  494.596039][   T28] audit: type=1800 audit(1771073826.718:19): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.726" name="bus" dev="overlay" ino=1072 res=0 errno=0
[  500.666770][ T8505] netlink: 100 bytes leftover after parsing attributes in process `syz.3.737'.
[  501.912172][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  501.918699][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  505.661635][ T8550] netlink: 100 bytes leftover after parsing attributes in process `syz.0.749'.
[  506.994667][   T28] audit: type=1800 audit(1771073839.108:20): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.754" name="bus" dev="overlay" ino=1178 res=0 errno=0
[  509.234431][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  509.454615][    T9] usb 4-1: Using ep0 maxpacket: 8
[  509.463084][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  509.505715][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.540931][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  509.575774][    T9] pvrusb2: **********
[  509.579835][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  509.619928][    T9] pvrusb2: Important functionality might not be entirely working.
[  509.656226][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  509.708701][    T9] pvrusb2: **********
[  509.736939][ T8591] netlink: 100 bytes leftover after parsing attributes in process `syz.0.759'.
[  509.794089][ T2320] pvrusb2: Invalid write control endpoint
[  510.017276][    T9] usb 4-1: USB disconnect, device number 4
[  510.025799][ T2320] pvrusb2: Invalid write control endpoint
[  510.041943][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  510.063457][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  510.099027][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  510.129056][ T2320] pvrusb2: Device being rendered inoperable
[  510.149615][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  510.171489][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  510.330270][ T2320] pvrusb2: Attached sub-driver cx25840
[  510.336915][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  510.355721][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  511.256887][   T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  511.274264][   T28] audit: type=1800 audit(1771073843.398:21): pid=8605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.766" name="bus" dev="overlay" ino=982 res=0 errno=0
[  511.362968][ T8609] netlink: 'syz.1.767': attribute type 5 has an invalid length.
[  513.453290][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  513.845787][ T5818] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  514.026910][ T5818] usb 3-1: Using ep0 maxpacket: 8
[  514.036524][ T5818] usb 3-1: config 0 has an invalid interface number: 176 but max is 0
[  514.055890][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.072351][ T5818] usb 3-1: config 0 has no interface number 0
[  514.089229][ T5818] usb 3-1: config 0 interface 176 altsetting 56 endpoint 0x8 has invalid wMaxPacketSize 0
[  514.149389][ T5818] usb 3-1: config 0 interface 176 altsetting 56 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  514.234791][ T5818] usb 3-1: config 0 interface 176 has no altsetting 0
[  514.304739][ T5818] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=68.dc
[  514.336065][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.344566][ T5818] usb 3-1: Product: syz
[  514.381233][ T5818] usb 3-1: Manufacturer: syz
[  514.410140][ T5818] usb 3-1: SerialNumber: syz
[  514.445773][ T5818] usb 3-1: config 0 descriptor??
[  514.682077][ T5818] usb 3-1: probing VID:PID(0424:012C)   
[  514.698000][ T5818] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 08
[  514.738932][ T5818] usb 3-1: vub300 ignoring EndPoint(0) 08
[  514.763149][ T5818] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  514.817381][ T5818] vub300: probe of 3-1:0.176 failed with error -22
[  514.883959][ T5818] usb 3-1: USB disconnect, device number 2
[  517.266118][ T8655] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  517.277882][ T8655] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  517.538953][ T8652] netlink: 100 bytes leftover after parsing attributes in process `syz.3.777'.
[  518.014311][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  518.308068][ T5818] usb 3-1: Using ep0 maxpacket: 32
[  518.327930][ T5818] usb 3-1: config 0 has no interfaces?
[  518.393346][ T5818] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  518.539237][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.559489][ T5818] usb 3-1: Product: syz
[  519.696140][ T5818] usb 3-1: Manufacturer: syz
[  519.700806][ T5818] usb 3-1: SerialNumber: syz
[  520.033098][ T5818] usb 3-1: config 0 descriptor??
[  520.186459][ T5818] usb 3-1: can't set config #0, error -71
[  520.226125][ T5818] usb 3-1: USB disconnect, device number 3
[  520.348533][ T8677] mkiss: ax0: crc mode is auto.
[  524.131102][ T8721] netlink: 100 bytes leftover after parsing attributes in process `syz.0.796'.
[  527.346353][ T8741] netlink: 'syz.3.799': attribute type 3 has an invalid length.
[  529.423952][ T8786] netlink: 100 bytes leftover after parsing attributes in process `syz.3.808'.
[  530.018395][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'.
[  532.612069][ T8819] loop9: detected capacity change from 0 to 7
[  532.633108][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.642592][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.657080][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.666348][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.677875][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.687090][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.699447][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.708746][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.765417][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.774689][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.784056][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.793353][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.808150][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.817430][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.825957][ T8819] ldm_validate_partition_table(): Disk read failed.
[  532.854556][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.863854][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.886948][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.896232][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.906096][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  532.915358][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  532.933599][ T8819] Dev loop9: unable to read RDB block 0
[  532.974168][ T8819]  loop9: unable to read partition table
[  532.987071][ T8819] loop9: partition table beyond EOD, truncated
[  533.041665][ T8819] loop_reread_partitions: partition scan of loop9 (D��iXK׉j̔S{����<�B/���c�:����ݡ>C(���z��U-1`�\	uRt��Oү�j) failed (rc=-5)
[  534.455685][ T8836] netlink: 'syz.2.821': attribute type 4 has an invalid length.
[  534.475906][ T8836] netlink: 152 bytes leftover after parsing attributes in process `syz.2.821'.
[  534.524060][ T8836] .`: renamed from bond0 (while UP)
[  534.726567][ T5818] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  535.103520][ T5818] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  535.220647][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.452250][ T5818] usb 4-1: config 0 descriptor??
[  535.487820][ T5818] cp210x 4-1:0.0: cp210x converter detected
[  537.494070][   T61] wlan1: Trigger new scan to find an IBSS to join
[  537.542468][ T8841] netlink: 100 bytes leftover after parsing attributes in process `syz.1.820'.
[  539.486440][ T5818] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  539.628463][ T5818] cp210x 4-1:0.0: querying part number failed
[  539.952128][ T5818] usb 4-1: cp210x converter now attached to ttyUSB0
[  540.037145][ T5818] usb 4-1: USB disconnect, device number 5
[  540.074259][ T5818] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  540.238047][ T5818] cp210x 4-1:0.0: device disconnected
[  540.497390][ T8886] sp0: Synchronizing with TNC
[  540.508254][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.518162][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.528434][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.538090][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.547910][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.557315][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.570327][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.582149][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.618804][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  540.631020][ T8886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.830'.
[  542.198908][ T3437] wlan1: Creating new IBSS network, BSSID 52:27:11:27:b9:29
[  544.111671][ T8909] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  546.121644][ T8929] __nla_validate_parse: 137 callbacks suppressed
[  546.122142][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'.
[  547.015298][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  548.827193][ T5894] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  548.845689][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.855831][ T5894] usb 1-1: Product: syz
[  548.864878][ T5894] usb 1-1: Manufacturer: syz
[  548.875247][ T5894] usb 1-1: SerialNumber: syz
[  548.896075][ T5894] usb 1-1: config 0 descriptor??
[  549.106708][ T5894] usb-storage 1-1:0.0: USB Mass Storage device detected
[  549.196116][ T5894] usb 1-1: USB disconnect, device number 7
[  550.250442][ T8954] loop3: detected capacity change from 0 to 256
[  555.673391][ T8978] netlink: 100 bytes leftover after parsing attributes in process `syz.0.849'.
[  556.713220][ T8986] capability: warning: `syz.3.852' uses 32-bit capabilities (legacy support in use)
[  556.725437][   T28] audit: type=1326 audit(1771073888.838:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8984 comm="syz.3.852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb09519bf79 code=0x0
[  557.141440][ T5818] IPVS: starting estimator thread 0...
[  557.452925][ T8996] IPVS: using max 16 ests per chain, 38400 per kthread
[  558.271800][ T9003] netlink: 'syz.1.848': attribute type 4 has an invalid length.
[  560.102780][ T9014] loop2: detected capacity change from 0 to 2048
[  560.269212][ T9016] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  561.342120][ T9024] loop0: detected capacity change from 0 to 512
[  561.593131][ T9024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  561.617823][ T9024] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  562.344894][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.877650][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  563.884440][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  564.341687][ T9050] netlink: 100 bytes leftover after parsing attributes in process `syz.1.861'.
[  570.662140][ T9091] netlink: 100 bytes leftover after parsing attributes in process `syz.3.882'.
[  575.058463][ T5781] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  575.070572][ T5781] CPU: 0 PID: 5781 Comm: kworker/u5:5 Not tainted syzkaller #0
[  575.078222][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  575.088314][ T5781] Workqueue: hci3 hci_rx_work
[  575.094013][ T5781] Call Trace:
[  575.097325][ T5781]  <TASK>
[  575.100488][ T5781]  dump_stack_lvl+0x18c/0x250
[  575.105315][ T5781]  ? show_regs_print_info+0x20/0x20
[  575.110565][ T5781]  ? load_image+0x400/0x400
[  575.115184][ T5781]  sysfs_create_dir_ns+0x26e/0x2a0
[  575.120381][ T5781]  ? sysfs_warn_dup+0xa0/0xa0
[  575.125096][ T5781]  ? do_raw_spin_unlock+0x121/0x230
[  575.130379][ T5781]  kobject_add_internal+0x61c/0xcc0
[  575.135860][ T5781]  kobject_add+0x164/0x240
[  575.140330][ T5781]  ? __rwlock_init+0x150/0x150
[  575.145240][ T5781]  ? kobject_init+0x1e0/0x1e0
[  575.149969][ T5781]  ? _raw_spin_unlock+0x28/0x40
[  575.154931][ T5781]  ? get_device_parent+0x366/0x390
[  575.160101][ T5781]  device_add+0x408/0xc20
[  575.164452][ T5781]  hci_conn_add_sysfs+0xd5/0x1e0
[  575.169447][ T5781]  le_conn_complete_evt+0xf5d/0x1540
[  575.174777][ T5781]  ? hci_event_packet+0x4cb/0x1270
[  575.179914][ T5781]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  575.186185][ T5781]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  575.191848][ T5781]  ? skb_pull_data+0xfb/0x200
[  575.196591][ T5781]  hci_le_conn_complete_evt+0x187/0x440
[  575.202160][ T5781]  ? hci_remote_host_features_evt+0x150/0x150
[  575.208247][ T5781]  hci_event_packet+0x7ba/0x1270
[  575.213214][ T5781]  ? bis_list+0x290/0x290
[  575.217563][ T5781]  ? lockdep_hardirqs_on+0x98/0x150
[  575.222783][ T5781]  ? hci_send_to_monitor+0xd7/0x4f0
[  575.228009][ T5781]  hci_rx_work+0x43a/0xd60
[  575.232457][ T5781]  ? process_scheduled_works+0x96f/0x15d0
[  575.238218][ T5781]  process_scheduled_works+0xa5d/0x15d0
[  575.243803][ T5781]  ? assign_work+0x430/0x430
[  575.248858][ T5781]  ? assign_work+0x3d0/0x430
[  575.253468][ T5781]  worker_thread+0xa55/0xfc0
[  575.258099][ T5781]  kthread+0x2fa/0x390
[  575.262182][ T5781]  ? pr_cont_work+0x560/0x560
[  575.266880][ T5781]  ? kthread_blkcg+0xd0/0xd0
[  575.271485][ T5781]  ret_from_fork+0x48/0x80
[  575.276025][ T5781]  ? kthread_blkcg+0xd0/0xd0
[  575.280687][ T5781]  ret_from_fork_asm+0x11/0x20
[  575.285506][ T5781]  </TASK>
[  575.290614][ T5781] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  575.305744][ T5781] Bluetooth: hci3: failed to register connection device
[  575.412153][ T3437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  577.148827][ T9112] loop0: detected capacity change from 0 to 40427
[  577.328990][ T9112] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable
[  581.499654][ T9152] netlink: 100 bytes leftover after parsing attributes in process `syz.3.896'.
[  582.905232][ T9149] Bluetooth: hci3: command 0x0406 tx timeout
[  585.066465][ T9179] loop3: detected capacity change from 0 to 256
[  585.117422][ T9179] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  585.286867][ T9181] loop1: detected capacity change from 0 to 128
[  585.417106][ T9181] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  585.433436][ T9181] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  585.580150][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  586.569183][ T9193] loop1: detected capacity change from 0 to 512
[  587.014654][ T9193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  587.028629][ T9193] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  588.768467][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.029592][ T9202] netlink: 100 bytes leftover after parsing attributes in process `syz.1.913'.
[  595.914365][ T9252] overlayfs: failed to resolve './file0': -2
[  597.183132][ T9243] loop2: detected capacity change from 0 to 32768
[  597.219433][ T9243] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  597.230040][ T9243] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  597.374583][ T9243] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  597.431278][ T5855] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  597.451433][ T5855] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  597.647424][ T5855] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 195ms
[  597.668031][ T5855] gfs2: fsid=syz:syz.0: jid=0: Done
[  597.684955][ T9243] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  597.738363][ T9243] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  598.914075][ T9264] netlink: 100 bytes leftover after parsing attributes in process `syz.0.928'.
[  601.229540][ T9288] loop2: detected capacity change from 0 to 40427
[  601.323221][ T9288] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  601.356152][ T9288] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  601.388100][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'.
[  601.397538][ T9298] netlink: 144 bytes leftover after parsing attributes in process `syz.1.941'.
[  601.406627][ T9298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.941'.
[  601.423358][ T9288] F2FS-fs (loop2): invalid crc value
[  601.585188][ T9288] F2FS-fs (loop2): Found nat_bits in checkpoint
[  601.894726][ T9288] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  601.911312][ T9288] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  602.152231][ T5855] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  602.369357][ T5855] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  602.600906][ T9312] overlayfs: failed to resolve './file0': -2
[  604.551986][ T9317] netlink: 100 bytes leftover after parsing attributes in process `syz.1.946'.
[  605.760611][ T9354] overlayfs: failed to resolve './file0': -2
[  607.386464][   T39] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  608.423533][ T9379] netlink: 100 bytes leftover after parsing attributes in process `syz.0.960'.
[  609.394918][ T9378] loop3: detected capacity change from 0 to 32768
[  609.488257][ T9378] 
[  609.488257][ T9378]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  609.488257][ T9378] 
[  609.612339][ T9378] read_mapping_page failed!
[  609.646589][ T9378] ERROR: (device loop3): txCommit: 
[  609.646589][ T9378] 
[  609.694812][ T9390] read_mapping_page failed!
[  609.726058][ T9390] ERROR: (device loop3): txCommit: 
[  609.726058][ T9390] 
[  609.751070][ T9392] ==================================================================
[  609.759205][ T9392] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xe8b/0x13e0
[  609.766798][ T9392] Read of size 4 at addr ffff888059dd404c by task syz.3.962/9392
[  609.774554][ T9392] 
[  609.776916][ T9392] CPU: 1 PID: 9392 Comm: syz.3.962 Not tainted syzkaller #0
[  609.784226][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  609.794322][ T9392] Call Trace:
[  609.797626][ T9392]  <TASK>
[  609.800585][ T9392]  dump_stack_lvl+0x18c/0x250
[  609.805415][ T9392]  ? __lock_acquire+0x7d40/0x7d40
[  609.810476][ T9392]  ? show_regs_print_info+0x20/0x20
[  609.815795][ T9392]  ? load_image+0x400/0x400
[  609.820343][ T9392]  ? __virt_addr_valid+0x469/0x540
[  609.825495][ T9392]  print_report+0xa8/0x210
[  609.829968][ T9392]  ? dtInsertEntry+0xe8b/0x13e0
[  609.834823][ T9392]  kasan_report+0x117/0x150
[  609.839380][ T9392]  ? dtInsertEntry+0xe8b/0x13e0
[  609.844244][ T9392]  dtInsertEntry+0xe8b/0x13e0
[  609.848934][ T9392]  ? release_metapage+0x703/0x870
[  609.853976][ T9392]  dtSplitPage+0x2925/0x37d0
[  609.858615][ T9392]  dtInsert+0x1072/0x5de0
[  609.862947][ T9392]  ? kasan_quarantine_put+0xd8/0x220
[  609.868252][ T9392]  ? UniStrupr+0x2e0/0x2e0
[  609.872688][ T9392]  ? dtSearch+0x1d20/0x21b0
[  609.877234][ T9392]  jfs_symlink+0x8b5/0xfa0
[  609.881681][ T9392]  ? jfs_unlink+0xa10/0xa10
[  609.886247][ T9392]  ? make_vfsuid+0x51/0xb0
[  609.890775][ T9392]  ? inode_permission+0xf3/0x480
[  609.895809][ T9392]  ? bpf_lsm_inode_symlink+0x9/0x10
[  609.901053][ T9392]  ? security_inode_symlink+0xb6/0x100
[  609.906538][ T9392]  vfs_symlink+0x138/0x2b0
[  609.910970][ T9392]  do_symlinkat+0x1ba/0x400
[  609.915479][ T9392]  ? vfs_symlink+0x2b0/0x2b0
[  609.920084][ T9392]  ? getname_flags+0x20a/0x500
[  609.924848][ T9392]  __x64_sys_symlink+0x7e/0x90
[  609.929616][ T9392]  do_syscall_64+0x55/0xa0
[  609.934033][ T9392]  ? clear_bhb_loop+0x40/0x90
[  609.938786][ T9392]  ? clear_bhb_loop+0x40/0x90
[  609.943576][ T9392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  609.949484][ T9392] RIP: 0033:0x7fb09519bf79
[  609.953926][ T9392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.973797][ T9392] RSP: 002b:00007fb095fbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  609.982227][ T9392] RAX: ffffffffffffffda RBX: 00007fb095416180 RCX: 00007fb09519bf79
[  609.990230][ T9392] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000100
[  609.998231][ T9392] RBP: 00007fb0952327e0 R08: 0000000000000000 R09: 0000000000000000
[  610.006224][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.014210][ T9392] R13: 00007fb095416218 R14: 00007fb095416180 R15: 00007ffc89824c68
[  610.022217][ T9392]  </TASK>
[  610.025259][ T9392] 
[  610.027595][ T9392] Allocated by task 9378:
[  610.032103][ T9392]  kasan_set_track+0x4e/0x70
[  610.036718][ T9392]  __kasan_slab_alloc+0x6c/0x80
[  610.041596][ T9392]  slab_post_alloc_hook+0x6e/0x4b0
[  610.046737][ T9392]  kmem_cache_alloc_lru+0x111/0x2d0
[  610.051959][ T9392]  jfs_alloc_inode+0x28/0x60
[  610.056584][ T9392]  iget_locked+0x1ad/0x840
[  610.061020][ T9392]  jfs_iget+0x24/0x440
[  610.065110][ T9392]  jfs_lookup+0x221/0x420
[  610.069547][ T9392]  __lookup_slow+0x2a1/0x400
[  610.074173][ T9392]  lookup_slow+0x53/0x70
[  610.078438][ T9392]  walk_component+0x2be/0x3f0
[  610.083123][ T9392]  path_lookupat+0x169/0x440
[  610.087710][ T9392]  filename_lookup+0x228/0x560
[  610.092496][ T9392]  user_path_at_empty+0x42/0x60
[  610.097393][ T9392]  __se_sys_chdir+0x9c/0x280
[  610.102004][ T9392]  do_syscall_64+0x55/0xa0
[  610.106428][ T9392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  610.112318][ T9392] 
[  610.114639][ T9392] The buggy address belongs to the object at ffff888059dd3780
[  610.114639][ T9392]  which belongs to the cache jfs_ip of size 2240
[  610.128369][ T9392] The buggy address is located 12 bytes to the right of
[  610.128369][ T9392]  allocated 2240-byte region [ffff888059dd3780, ffff888059dd4040)
[  610.143030][ T9392] 
[  610.145369][ T9392] The buggy address belongs to the physical page:
[  610.151787][ T9392] page:ffffea0001677400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59dd0
[  610.161929][ T9392] head:ffffea0001677400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  610.170855][ T9392] memcg:ffff888022c16301
[  610.175096][ T9392] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  610.183083][ T9392] page_type: 0xffffffff()
[  610.187412][ T9392] raw: 00fff00000000840 ffff888019356780 dead000000000122 0000000000000000
[  610.195989][ T9392] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff888022c16301
[  610.204573][ T9392] page dumped because: kasan: bad access detected
[  610.210986][ T9392] page_owner tracks the page as allocated
[  610.216693][ T9392] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 9378, tgid 9377 (syz.3.962), ts 609440415552, free_ts 480837728034
[  610.240309][ T9392]  post_alloc_hook+0x1c1/0x200
[  610.245158][ T9392]  get_page_from_freelist+0x1951/0x19e0
[  610.250736][ T9392]  __alloc_pages+0x1f0/0x460
[  610.255333][ T9392]  alloc_slab_page+0x5d/0x160
[  610.260036][ T9392]  new_slab+0x87/0x2d0
[  610.264102][ T9392]  ___slab_alloc+0xc5d/0x12f0
[  610.268780][ T9392]  kmem_cache_alloc_lru+0x1aa/0x2d0
[  610.273979][ T9392]  jfs_alloc_inode+0x28/0x60
[  610.278575][ T9392]  new_inode_pseudo+0x63/0x1d0
[  610.283358][ T9392]  new_inode+0x22/0x1b0
[  610.287604][ T9392]  jfs_fill_super+0x39c/0xad0
[  610.292279][ T9392]  mount_bdev+0x221/0x2d0
[  610.296607][ T9392]  legacy_get_tree+0xea/0x180
[  610.301305][ T9392]  vfs_get_tree+0x8c/0x280
[  610.305784][ T9392]  do_new_mount+0x24b/0xa40
[  610.310329][ T9392]  __se_sys_mount+0x2e7/0x3d0
[  610.315028][ T9392] page last free stack trace:
[  610.319703][ T9392]  free_unref_page_prepare+0x7b2/0x8c0
[  610.325166][ T9392]  free_unref_page+0x32/0x2e0
[  610.329865][ T9392]  __slab_free+0x35a/0x400
[  610.334274][ T9392]  qlist_free_all+0x75/0xd0
[  610.338775][ T9392]  kasan_quarantine_reduce+0x143/0x160
[  610.344228][ T9392]  __kasan_slab_alloc+0x22/0x80
[  610.349073][ T9392]  slab_post_alloc_hook+0x6e/0x4b0
[  610.354180][ T9392]  kmem_cache_alloc+0x11a/0x2d0
[  610.359025][ T9392]  ptlock_alloc+0x20/0x70
[  610.363353][ T9392]  pte_alloc_one+0xcc/0x530
[  610.367860][ T9392]  __pte_alloc+0x22/0x2a0
[  610.372193][ T9392]  copy_page_range+0x2d96/0x3670
[  610.377154][ T9392]  copy_mm+0x11cb/0x1d50
[  610.381395][ T9392]  copy_process+0x16f7/0x3d80
[  610.386067][ T9392]  kernel_clone+0x24b/0x8a0
[  610.390571][ T9392]  __x64_sys_clone+0x1b7/0x230
[  610.395363][ T9392] 
[  610.397691][ T9392] Memory state around the buggy address:
[  610.403309][ T9392]  ffff888059dd3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  610.411470][ T9392]  ffff888059dd3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  610.419545][ T9392] >ffff888059dd4000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  610.427632][ T9392]                                               ^
[  610.434043][ T9392]  ffff888059dd4080: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  610.442101][ T9392]  ffff888059dd4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  610.450173][ T9392] ==================================================================
[  610.500701][ T9392] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  610.507964][ T9392] CPU: 0 PID: 9392 Comm: syz.3.962 Not tainted syzkaller #0
[  610.515288][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  610.525477][ T9392] Call Trace:
[  610.528876][ T9392]  <TASK>
[  610.531843][ T9392]  dump_stack_lvl+0x18c/0x250
[  610.536580][ T9392]  ? show_regs_print_info+0x20/0x20
[  610.541818][ T9392]  ? load_image+0x400/0x400
[  610.546376][ T9392]  panic+0x2dc/0x730
[  610.550327][ T9392]  ? bpf_jit_dump+0xd0/0xd0
[  610.554859][ T9392]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  610.560902][ T9392]  ? _raw_spin_unlock+0x40/0x40
[  610.565785][ T9392]  ? print_memory_metadata+0x314/0x400
[  610.571287][ T9392]  ? dtInsertEntry+0xe8b/0x13e0
[  610.576172][ T9392]  check_panic_on_warn+0x84/0xa0
[  610.581154][ T9392]  ? dtInsertEntry+0xe8b/0x13e0
[  610.586024][ T9392]  end_report+0x6f/0x130
[  610.590260][ T9392]  kasan_report+0x128/0x150
[  610.594756][ T9392]  ? dtInsertEntry+0xe8b/0x13e0
[  610.599603][ T9392]  dtInsertEntry+0xe8b/0x13e0
[  610.604293][ T9392]  ? release_metapage+0x703/0x870
[  610.609439][ T9392]  dtSplitPage+0x2925/0x37d0
[  610.614104][ T9392]  dtInsert+0x1072/0x5de0
[  610.618473][ T9392]  ? kasan_quarantine_put+0xd8/0x220
[  610.623821][ T9392]  ? UniStrupr+0x2e0/0x2e0
[  610.628281][ T9392]  ? dtSearch+0x1d20/0x21b0
[  610.632851][ T9392]  jfs_symlink+0x8b5/0xfa0
[  610.637306][ T9392]  ? jfs_unlink+0xa10/0xa10
[  610.641845][ T9392]  ? make_vfsuid+0x51/0xb0
[  610.646275][ T9392]  ? inode_permission+0xf3/0x480
[  610.651231][ T9392]  ? bpf_lsm_inode_symlink+0x9/0x10
[  610.656433][ T9392]  ? security_inode_symlink+0xb6/0x100
[  610.661903][ T9392]  vfs_symlink+0x138/0x2b0
[  610.666330][ T9392]  do_symlinkat+0x1ba/0x400
[  610.670836][ T9392]  ? vfs_symlink+0x2b0/0x2b0
[  610.675432][ T9392]  ? getname_flags+0x20a/0x500
[  610.680205][ T9392]  __x64_sys_symlink+0x7e/0x90
[  610.684967][ T9392]  do_syscall_64+0x55/0xa0
[  610.689392][ T9392]  ? clear_bhb_loop+0x40/0x90
[  610.694072][ T9392]  ? clear_bhb_loop+0x40/0x90
[  610.698751][ T9392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  610.704647][ T9392] RIP: 0033:0x7fb09519bf79
[  610.709070][ T9392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.728697][ T9392] RSP: 002b:00007fb095fbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  610.737122][ T9392] RAX: ffffffffffffffda RBX: 00007fb095416180 RCX: 00007fb09519bf79
[  610.745102][ T9392] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000100
[  610.753075][ T9392] RBP: 00007fb0952327e0 R08: 0000000000000000 R09: 0000000000000000
[  610.761049][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.769020][ T9392] R13: 00007fb095416218 R14: 00007fb095416180 R15: 00007ffc89824c68
[  610.777001][ T9392]  </TASK>
[  610.780588][ T9392] Kernel Offset: disabled
[  610.784908][ T9392] Rebooting in 86400 seconds..