last executing test programs:

14m9.860973031s ago: executing program 2 (id=35):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
close(r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[])
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000002f00090027bd7000fddbdf2504000000a4001a80"], 0xb8}, 0x1, 0x0, 0x0, 0x42800}, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000)

14m4.230663818s ago: executing program 2 (id=42):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000})

14m2.237537774s ago: executing program 2 (id=45):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
close(r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080)
r6 = syz_usb_connect_ath9k(0x3, 0xc4, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[])
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000002f00090027bd7000fddbdf2504000000a4001a80"], 0xb8}, 0x1, 0x0, 0x0, 0x42800}, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000)

13m51.820604638s ago: executing program 2 (id=62):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x14, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

13m48.774767673s ago: executing program 2 (id=69):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
listen(0xffffffffffffffff, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000})

13m45.400769238s ago: executing program 2 (id=72):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0xc8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf6, 0x6})
syz_read_part_table(0x5e4, &(0x7f0000000000)="$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")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x4, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x1004a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = dup(r1)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r8 = syz_ublk_setup_io_uring(0x49c1, &(0x7f0000000ac0)={0x0, 0x6632, 0x40, 0x4, 0x1dc, 0x0, r6}, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0))
r9 = syz_io_uring_setup(0x580e, &(0x7f0000000080)={0x0, 0x4034, 0x3010, 0x100003, 0x3, 0x0, r8}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0, &(0x7f0000000180)=<r12=>0x0)
syz_io_uring_modify_offsets$generic(r10, r11, 0x2c, 0x8)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000440)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, <r13=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0)
r14 = eventfd2(0x1, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000200)=r14, 0x1)
io_uring_enter(r9, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000080)=0x4, 0x4e)
recvmmsg(r7, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/21, 0x15}, 0x3}], 0x47, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x3, 0x10000002, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x100, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000600)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r13, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)

13m29.810086556s ago: executing program 32 (id=72):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0xc8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf6, 0x6})
syz_read_part_table(0x5e4, &(0x7f0000000000)="$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")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x4, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x1004a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = dup(r1)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r8 = syz_ublk_setup_io_uring(0x49c1, &(0x7f0000000ac0)={0x0, 0x6632, 0x40, 0x4, 0x1dc, 0x0, r6}, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0))
r9 = syz_io_uring_setup(0x580e, &(0x7f0000000080)={0x0, 0x4034, 0x3010, 0x100003, 0x3, 0x0, r8}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0, &(0x7f0000000180)=<r12=>0x0)
syz_io_uring_modify_offsets$generic(r10, r11, 0x2c, 0x8)
syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000440)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, <r13=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0)
r14 = eventfd2(0x1, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000200)=r14, 0x1)
io_uring_enter(r9, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000080)=0x4, 0x4e)
recvmmsg(r7, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/21, 0x15}, 0x3}], 0x47, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x3, 0x10000002, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x100, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000600)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r13, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)

12m5.20546642s ago: executing program 4 (id=239):
socket$netlink(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$unix(0x1, 0x5, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x8)
socket(0x1, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff00000000800000001801", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

12m4.743668688s ago: executing program 4 (id=241):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) (async)
fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
close(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x8, &(0x7f00000000c0)=<r2=>0x0)
eventfd2(0x0, 0x0) (async)
r3 = eventfd2(0x0, 0x0)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) (async)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_getevents(r2, 0x7, 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x0)
io_submit(r2, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}])
r4 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x6, 0x81)
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000700)={0x22c, "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"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x14, r7, 0x0, 0xfffffffffffffffc, 0x1541})
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r8, 0x0, 0x1a, &(0x7f00000002c0)=""/3, &(0x7f0000000080)=0x3) (async)
getsockopt$inet_opts(r8, 0x0, 0x1a, &(0x7f00000002c0)=""/3, &(0x7f0000000080)=0x3)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r10 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0)=<r11=>0x0, &(0x7f0000000540)=<r12=>0x0, &(0x7f0000000500)=<r13=>0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r10, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) (async)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r10, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000440)={0x2e, 0x41, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc5e, 0x0, 0x0, 0x1000, 0x8000, 0x0, 0x0, 0x10}}}, &(0x7f00000004c0)) (async)
syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000440)={0x2e, 0x41, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc5e, 0x0, 0x0, 0x1000, 0x8000, 0x0, 0x0, 0x10}}}, &(0x7f00000004c0))
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f00000009c0)=ANY=[@ANYBLOB='zero_size_dir,discard,discard,allow_utime=00000000000000000000015,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6b6565705f6c6173745f646f74732c7a65726f5f73697a655f6469722c74696d655f6f66667365743d3078303030303030303030303030303064322c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031362c008ffbe5b08d2bbfcd5990d15d41a05b17b892bf114a48769b2c1e2e"], 0x1, 0x1547, &(0x7f0000004880)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194a468, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) (async)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194a468, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180))
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="0042ea2404c8985f7101c9c98fe9", 0xe}], 0x1)

12m0.564227399s ago: executing program 4 (id=242):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") (fail_nth: 3)

11m59.256350948s ago: executing program 4 (id=245):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
pipe(0x0)
tee(r0, 0xffffffffffffffff, 0x8f5, 0x0)

11m57.262984909s ago: executing program 4 (id=248):
unshare(0x6020400)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000bc0)={0xd8, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004080}, 0x50)
r4 = msgget(0x1, 0x9)
getresuid(&(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080), &(0x7f00000001c0))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000300)=0xc)
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getgid()
msgctl$IPC_SET(r4, 0x1, &(0x7f0000000440)={{0x1, r5, r6, r7, r8, 0x1}, 0x0, 0x0, 0xe59, 0x40, 0x3, 0x7f, 0x5, 0x1, 0x1c00, 0x9, r1, r1})
syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd602cffffffffffffff8000000000000000000000000000bbff"], 0x0)
ptrace(0x10, r1)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
socket$inet_udp(0x2, 0x2, 0x0)
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000180)={0x0, 0x6c00})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90)

11m53.894431612s ago: executing program 4 (id=254):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
close(r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r6 = syz_usb_connect_ath9k(0x3, 0xc4, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[])
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000002f00090027bd7000fddbdf2504000000a4001a80"], 0xb8}, 0x1, 0x0, 0x0, 0x42800}, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000)

11m38.445650992s ago: executing program 33 (id=254):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
close(r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
r6 = syz_usb_connect_ath9k(0x3, 0xc4, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[])
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000002f00090027bd7000fddbdf2504000000a4001a80"], 0xb8}, 0x1, 0x0, 0x0, 0x42800}, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000)

7m58.181734113s ago: executing program 3 (id=600):
syz_mount_image$nilfs2(&(0x7f0000000b80), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa86, &(0x7f0000009b40)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
chdir(&(0x7f0000000140)='./bus\x00')
mknod$loop(0x0, 0x40, 0x1)

7m57.261536391s ago: executing program 3 (id=601):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)}}, {{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r2, 0xfffffffe, 0x20}, 0xc)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000000)={0x7, 0x0, [{0xd, 0x40, 0x1, 0x8, 0x0, 0x7, 0x2}, {0xd, 0xf0, 0x1, 0x8, 0x3, 0x6, 0x4}, {0x40000001, 0x6, 0x0, 0x7, 0xfffff16d, 0x7fff, 0x7}, {0xb, 0x81, 0x2, 0x0, 0x3, 0x4, 0x5}, {0x0, 0x3, 0x2, 0xf, 0x9c, 0x9, 0x7ff}, {0xc0000001, 0x847e, 0x0, 0x5, 0x3, 0x3, 0xa71}, {0x40000000, 0x8, 0x3, 0x6, 0x86e, 0x5, 0x2}]}})
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x2)

7m56.838405307s ago: executing program 3 (id=602):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpgid(r0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r3, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040), 0x10)
syz_emit_vhci(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8)
sendto$inet6(r4, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e)

7m55.752585056s ago: executing program 3 (id=604):
syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef0101"], 0x0)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x58)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_getoverrun(r1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100"/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000180), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r8, &(0x7f00000004c0)}, 0x20)
r9 = syz_pidfd_open(r7, 0x0)
setns(r9, 0x24020000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@norecovery}, {@errors_continue}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80241, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x210011, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')

7m52.110516767s ago: executing program 3 (id=608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12)
getpgid(r0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
listen(0xffffffffffffffff, 0x0)
clock_gettime(0x3, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={r4, r5/1000+60000}, 0x10)
syz_emit_vhci(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000001000006)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x84d, 0x40000)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000340)={0x7, 0x0, '\x00', {0x0, @reserved}})
r7 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e24, 0x80000001, @loopback, 0x5}, 0x1c)

7m45.789376773s ago: executing program 3 (id=616):
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
fchown(r0, 0xee00, 0xee01)
fchown(r0, 0x0, 0x0)

7m45.230332365s ago: executing program 34 (id=616):
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
fchown(r0, 0xee00, 0xee01)
fchown(r0, 0x0, 0x0)

16.081032259s ago: executing program 7 (id=1271):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/38, 0x26}], 0x1}, 0x10040)

15.970662325s ago: executing program 7 (id=1272):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8a9ff9519def28791bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000000039bf727cf8c8df22e7b00314ab6264c931e35661fc189441e0880f04197ad3", 0x60}, {&(0x7f0000000a80)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f5312", 0x95}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2d", 0xab}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d87", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b593118702364", 0x47}, {&(0x7f00000006c0)="b341fb6dec9d6baff227ce715d28bba280448ea83b64e4ec946efaa25c427594c9a4f3fb33d0290cb6ba0de93d437c1798bb5011adf07e62a87371fb3e0e058dad986005c8762d0b6b0be62bd69a21979a54201e81d64a61a481e0e8264d01c8a80d2fa08c4c07845f4cd9", 0x6b}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

14.207724015s ago: executing program 7 (id=1275):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfba)
syz_emit_ethernet(0x4e, &(0x7f0000006980)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x5, 0x2}]}}}}}}}}, 0x0)

13.880087251s ago: executing program 7 (id=1276):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
umount2(&(0x7f0000000180)='.\x00', 0x0)

13.665158819s ago: executing program 7 (id=1277):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB=' \f,\x00\x00\x00!'], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000011c0)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="2010650000006803d2feba79e277e057aab296b9e33194cdf8665c"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0x9}, 0x0})

6.746262726s ago: executing program 0 (id=1289):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=@newsa={0x180, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71a, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x1000000000000192, 0x9ba3, 0xffff, 0x82519, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'sha224-avx\x00'}}}]}, 0x180}}, 0x844)

6.659104946s ago: executing program 0 (id=1290):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x70, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xf, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

6.602366166s ago: executing program 7 (id=1291):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd2e}, 0x65)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.86663662s ago: executing program 1 (id=1293):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r0 = fsopen(&(0x7f00000000c0)='iso9660\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

4.665156338s ago: executing program 0 (id=1294):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x8, 0xfffffff6, 0x238d117e5a1d544d, 0x4, 0x4, 0x5930, 0x4, 0xc00, 0x0, 0x4}}, 0x50)

3.873043374s ago: executing program 1 (id=1295):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_snmp6\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = inotify_init()
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r4=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90703600000f007529e0ff065581f", 0x0, 0x104, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r4, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r4, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}}}}}}}, 0x0)
r11 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x2, 0x0, 0x1000})
ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f00000001c0)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.480891982s ago: executing program 0 (id=1296):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x20182)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0)

2.820714432s ago: executing program 0 (id=1297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.310992087s ago: executing program 1 (id=1298):
chdir(0x0)
mkdir(0x0, 0x0)
rename(0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000900)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@nouser_xattr}, {@jqfmt_vfsold}, {@errors_remount}]}, 0xff, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1)
pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe)

1.253972681s ago: executing program 0 (id=1299):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2af01, 0x44d5ad4426ee0bc6)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff34, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

981.159196ms ago: executing program 1 (id=1300):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x700, 0x8700, 0x2c}, 0x50)

243.047807ms ago: executing program 1 (id=1301):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

0s ago: executing program 1 (id=1302):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0xfc, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
dup3(r1, r0, 0x80000)
ioctl$TIOCMSET(r0, 0x5418, 0x0)

kernel console output (not intermixed with test programs):

 solve the problem.
[  811.370352][T10340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  811.639903][T10552] loop1: detected capacity change from 0 to 2048
[  811.688415][T10552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  811.730356][T10551] binder: 10549:10551 unknown command 4215338966
[  811.730386][T10551] binder: 10549:10551 ioctl c0306201 2000000000c0 returned -22
[  812.328475][ T5716] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  812.519162][ T5716] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  812.519198][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.539538][ T1023] bridge_slave_1: left allmulticast mode
[  812.539582][ T1023] bridge_slave_1: left promiscuous mode
[  812.539908][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.581341][ T5716] usb 2-1: config 0 descriptor??
[  814.076081][ T5716] ath6kl: Failed to submit usb control message: -71
[  814.076137][ T5716] ath6kl: unable to send the bmi data to the device: -71
[  814.076154][ T5716] ath6kl: Unable to send get target info: -71
[  814.077227][ T5716] ath6kl: Failed to init ath6kl core: -71
[  814.079007][ T5716] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  814.118175][ T5716] usb 2-1: USB disconnect, device number 54
[  814.174486][T10562] loop0: detected capacity change from 0 to 256
[  814.267160][T10562] FAT-fs (loop0): Directory bread(block 1285) failed
[  814.267216][T10562] FAT-fs (loop0): Directory bread(block 1286) failed
[  814.267244][T10562] FAT-fs (loop0): Directory bread(block 1287) failed
[  814.267475][T10562] FAT-fs (loop0): Directory bread(block 1288) failed
[  814.327855][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  814.411183][T10562] FAT-fs (loop0): Directory bread(block 1285) failed
[  814.411220][T10562] FAT-fs (loop0): Directory bread(block 1286) failed
[  814.411245][T10562] FAT-fs (loop0): Directory bread(block 1287) failed
[  814.411272][T10562] FAT-fs (loop0): Directory bread(block 1288) failed
[  814.411354][T10562] FAT-fs (loop0): Directory bread(block 1285) failed
[  814.411381][T10562] FAT-fs (loop0): Directory bread(block 1286) failed
[  814.421761][ T1023] bridge_slave_0: left allmulticast mode
[  814.421801][ T1023] bridge_slave_0: left promiscuous mode
[  814.422113][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.478823][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  814.754195][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  814.846118][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  814.976994][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  815.076969][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  815.141718][ T1023] bond0 (unregistering): Released all slaves
[  815.316842][T10569] loop0: detected capacity change from 0 to 32768
[  815.492178][T10569] netlink: 'syz.0.1000': attribute type 1 has an invalid length.
[  815.621036][T10569] 
[  815.621036][T10569]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  815.621036][T10569] 
[  815.887851][ T5598] 
[  815.887851][ T5598]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  815.887851][ T5598] 
[  815.888282][ T5598] 
[  815.888282][ T5598]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  815.888282][ T5598] 
[  815.947150][T10340] hsr_slave_0: entered promiscuous mode
[  815.987357][T10340] hsr_slave_1: entered promiscuous mode
[  815.993028][T10340] debugfs: 'hsr0' already exists in 'hsr'
[  815.993059][T10340] Cannot create hsr debugfs directory
[  816.071485][   T38] kauditd_printk_skb: 38 callbacks suppressed
[  816.071505][   T38] audit: type=1326 audit(1784360406.281:411): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.071562][   T38] audit: type=1326 audit(1784360406.281:412): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.072291][   T38] audit: type=1326 audit(1784360406.281:413): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.072346][   T38] audit: type=1326 audit(1784360406.281:414): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.072663][   T38] audit: type=1326 audit(1784360406.281:415): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.073344][   T38] audit: type=1326 audit(1784360406.281:416): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.073397][   T38] audit: type=1326 audit(1784360406.281:417): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.073725][   T38] audit: type=1326 audit(1784360406.281:418): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.074795][   T38] audit: type=1326 audit(1784360406.281:419): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.074850][   T38] audit: type=1326 audit(1784360406.281:420): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10579 comm="syz.1.1002" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  816.335712][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  816.464265][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  816.837406][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  817.034303][ T1023] hsr_slave_0: left promiscuous mode
[  817.118928][ T1023] hsr_slave_1: left promiscuous mode
[  817.120633][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  817.154172][T10601] loop1: detected capacity change from 0 to 16
[  817.169543][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  817.373269][T10601] erofs (device loop1): mounted with root inode @ nid 36.
[  817.937599][ T1023] team0 (unregistering): Port device team_slave_1 removed
[  817.999830][ T1023] team0 (unregistering): Port device team_slave_0 removed
[  818.584473][T10606] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  818.701407][ T5597] do_umount: task=syz-executor[5597] propagate_mount_busy()!=0
[  818.701705][ T5597] do_umount: task=syz-executor[5597] propagate_mount_busy()!=0
[  819.187944][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  819.266210][    T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  819.276252][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  819.620968][    T9] usb 1-1: config 150 has an invalid interface number: 204 but max is 2
[  819.620990][    T9] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  819.621007][    T9] usb 1-1: config 150 has no interface number 0
[  819.621039][    T9] usb 1-1: config 150 interface 204 has no altsetting 0
[  819.639969][    T9] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  819.640001][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.640030][    T9] usb 1-1: Product: syz
[  819.640042][    T9] usb 1-1: Manufacturer: syz
[  819.640053][    T9] usb 1-1: SerialNumber: syz
[  820.383551][T10445] bridge0: port 1(bridge_slave_0) entered blocking state
[  820.384198][T10445] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.384776][T10445] bridge_slave_0: entered allmulticast mode
[  820.422074][T10445] bridge_slave_0: entered promiscuous mode
[  820.511002][T10445] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.511643][T10445] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.512119][T10445] bridge_slave_1: entered allmulticast mode
[  820.677899][    T9] xr_serial 1-1:150.204: skipping garbage
[  820.677952][    T9] xr_serial 1-1:150.204: xr_serial converter detected
[  820.683069][T10445] bridge_slave_1: entered promiscuous mode
[  821.089768][T10445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.437045][T10610] loop0: detected capacity change from 0 to 64
[  821.525875][T10610] Flush: task=syz.0.1007[10610] dev=loop0 state=2
[  821.646976][T10610] Teardown: task=syz.0.1007[10610] dev=loop0 state=2
[  821.673597][    T9] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  821.673660][    T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  821.708261][    T9] usb 1-1: USB disconnect, device number 43
[  821.824146][    T9] xr_serial 1-1:150.204: device disconnected
[  821.998952][T10445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  822.187784][T10445] team0: Port device team_slave_0 added
[  822.192424][T10445] team0: Port device team_slave_1 added
[  822.257053][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.257072][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.257102][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.312784][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.312802][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.312828][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.720664][T10445] hsr_slave_0: entered promiscuous mode
[  822.734090][T10445] hsr_slave_1: entered promiscuous mode
[  822.816114][    T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  822.990589][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  822.990629][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  822.990671][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  822.990696][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.044872][T10624] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  823.074719][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  823.433627][T10624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.472242][T10624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.474968][T10624] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1009'.
[  823.475051][T10624] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1009'.
[  823.932054][T10633] loop1: detected capacity change from 0 to 4096
[  823.948493][T10633] ntfs3: Unknown parameter 'preall„c'
[  823.948842][T10633] Flush: task=syz.1.1012[10633] dev=loop1 state=2
[  823.992431][ T5810] usb 1-1: USB disconnect, device number 44
[  824.088946][T10633] Teardown: task=syz.1.1012[10633] dev=loop1 state=2
[  824.553023][T10633] loop1: detected capacity change from 0 to 32768
[  824.553997][T10633] btrfs: Deprecated parameter 'usebackuproot'
[  824.554018][T10633] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  824.606460][T10633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1012 (10633)
[  824.695032][T10633] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  824.695069][T10633] BTRFS info (device loop1): using crc32c checksum algorithm
[  824.901699][ T1321] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  824.901943][T10633] BTRFS error (device loop1): failed to load root extent
[  824.901988][T10633] BTRFS warning (device loop1): try to load backup roots slot 1
[  824.907008][   T41] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  824.907432][T10633] BTRFS warning (device loop1): couldn't read tree root
[  824.907472][T10633] BTRFS warning (device loop1): try to load backup roots slot 2
[  824.920281][ T1321] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  824.924505][T10633] BTRFS warning (device loop1): couldn't read tree root
[  824.924552][T10633] BTRFS warning (device loop1): try to load backup roots slot 3
[  825.425725][T10633] BTRFS info (device loop1): rebuilding free space tree
[  826.043575][T10633] BTRFS info (device loop1): checking UUID tree
[  826.059261][T10633] BTRFS info (device loop1): enabling ssd optimizations
[  826.059289][T10633] BTRFS info (device loop1): turning on async discard
[  826.059309][T10633] BTRFS info (device loop1): enabling free space tree
[  826.059327][T10633] BTRFS info (device loop1): force clearing of disk cache
[  826.059345][T10633] BTRFS info (device loop1): enabling auto defrag
[  826.059365][T10633] BTRFS info (device loop1): trying to use backup root at mount time
[  826.059385][T10633] BTRFS info (device loop1): use zstd compression, level 3
[  828.851070][ T5597] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  829.074962][T10681] loop0: detected capacity change from 0 to 128
[  829.114769][T10681] FAT-fs (loop0): bogus number of reserved sectors
[  829.114794][T10681] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  829.114811][T10681] FAT-fs (loop0): Can't find a valid FAT filesystem
[  829.153969][ T6050] Flush: task=udevd[6050] dev=loop0 state=2
[  829.320375][ T6050] Teardown: task=udevd[6050] dev=loop0 state=2
[  830.108747][T10686] loop0: detected capacity change from 0 to 128
[  830.263168][T10686] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  830.398555][T10686] ext4 filesystem being mounted at /410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  830.584524][T10693] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1020'.
[  831.954439][ T5598] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  832.106097][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  832.276540][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  833.004745][ T5903] Flush: task=udevd[5903] dev=loop1 state=2
[  833.097167][ T5903] Teardown: task=udevd[5903] dev=loop1 state=2
[  834.508282][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  834.570606][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  834.593107][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  834.610468][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  834.619673][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  834.882786][T10721] loop0: detected capacity change from 0 to 2048
[  835.012923][T10722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  835.666490][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  835.770345][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  836.431246][T10735] loop0: detected capacity change from 0 to 2048
[  836.612034][T10735] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  836.655692][T10735] NILFS (loop0): invalid segment: Sequence number mismatch
[  836.655766][T10735] NILFS (loop0): unable to fall back to spare super block
[  836.655805][T10735] NILFS (loop0): error -22 while searching super root
[  836.732569][T10735] Flush: task=syz.0.1025[10735] dev=loop0 state=2
[  837.119632][ T9773] Bluetooth: hci3: command tx timeout
[  837.314814][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  837.406163][T10735] Teardown: task=syz.0.1025[10735] dev=loop0 state=2
[  837.442737][T10739] loop1: detected capacity change from 0 to 512
[  837.453651][T10739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  837.491098][T10734] loop0: detected capacity change from 0 to 2048
[  837.492112][T10734] udf: Bad value for 'anchor'
[  837.523957][ T5903] Flush: task=udevd[5903] dev=loop0 state=2
[  837.586058][T10739] EXT4-fs (loop1): 1 truncate cleaned up
[  837.606834][ T1023] bridge_slave_1: left allmulticast mode
[  837.606874][ T1023] bridge_slave_1: left promiscuous mode
[  837.607187][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state
[  837.610360][T10739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  837.766465][ T5903] Teardown: task=udevd[5903] dev=loop0 state=2
[  837.901092][ T1023] bridge_slave_0: left allmulticast mode
[  837.901129][ T1023] bridge_slave_0: left promiscuous mode
[  837.901438][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.090750][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  839.176174][ T9773] Bluetooth: hci3: command tx timeout
[  839.290010][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  839.386270][ T1023] bridge_slave_1: left allmulticast mode
[  839.386389][ T1023] bridge_slave_1: left promiscuous mode
[  839.386686][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.392076][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  839.670011][T10752] loop1: detected capacity change from 0 to 128
[  839.690003][T10752] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  839.690510][T10752] ext4 filesystem being mounted at /362/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  839.749876][ T1023] bridge_slave_0: left allmulticast mode
[  839.749916][ T1023] bridge_slave_0: left promiscuous mode
[  839.750206][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state
[  840.060550][T10756] loop0: detected capacity change from 0 to 512
[  840.552473][T10756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  840.658200][T10756] EXT4-fs (loop0): 1 truncate cleaned up
[  840.661259][T10756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  840.930857][ T5597] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  841.018860][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  841.138334][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  841.191436][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  841.234018][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  841.256494][ T9773] Bluetooth: hci3: command tx timeout
[  841.296806][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  841.511771][T10764] loop0: detected capacity change from 0 to 2048
[  841.632464][T10765] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  841.747570][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  841.850495][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  841.953755][ T1023] bond0 (unregistering): Released all slaves
[  842.188282][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  842.306276][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  842.628012][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  842.728388][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  842.755556][T10771] binder: 10770:10771 ioctl c018620b 0 returned -14
[  842.809185][ T1023] bond0 (unregistering): Released all slaves
[  842.832267][T10771] loop1: detected capacity change from 0 to 16
[  842.856299][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  842.923581][T10771] erofs (device loop1): mounted with root inode @ nid 36.
[  843.086311][    T9] usb 1-1: Using ep0 maxpacket: 16
[  843.109799][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  843.153969][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  843.154090][    T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  843.186902][    T9] usb 1-1: string descriptor 0 read error: -22
[  843.187048][    T9] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  843.187075][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.273497][    T9] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  843.274000][    T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  843.336033][ T9773] Bluetooth: hci3: command tx timeout
[  844.158690][T10771] erofs (device loop1): not enough plain data on disk @ la 4096 of nid 89
[  844.158724][T10771] erofs (device loop1): readahead error at folio 1 @ nid 89
[  844.401140][T10771] syz.1.1036: attempt to access beyond end of device
[  844.401140][T10771] loop1: rw=524288, sector=128, nr_sectors = 256 limit=16
[  844.491215][T10771] syz.1.1036: attempt to access beyond end of device
[  844.491215][T10771] loop1: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  844.934093][T10771] erofs (device loop1): not enough plain data on disk @ la 20480 of nid 89
[  844.934136][T10771] erofs (device loop1): readahead error at folio 5 @ nid 89
[  845.243619][T10771] erofs (device loop1): not enough plain data on disk @ la 4096 of nid 89
[  845.243654][T10771] erofs (device loop1): not enough plain data on disk @ la 4096 of nid 89
[  845.243674][T10771] erofs (device loop1): read error -117 @ 1 of nid 89
[  845.288034][   T38] kauditd_printk_skb: 36 callbacks suppressed
[  845.288054][   T38] audit: type=1800 audit(1784360435.451:457): pid=10771 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.1036" name="file2" dev="loop1" ino=89 res=0 errno=0
[  845.414770][ T1023] hsr_slave_0: left promiscuous mode
[  845.445417][ T1023] hsr_slave_1: left promiscuous mode
[  845.452254][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  845.477226][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  845.701848][ T1023] hsr_slave_0: left promiscuous mode
[  845.797121][ T1023] hsr_slave_1: left promiscuous mode
[  845.798689][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  845.990674][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  846.063508][    T9] usb 1-1: USB disconnect, device number 45
[  846.109528][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  846.203901][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  846.246169][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  846.253541][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  846.254836][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  846.539904][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  846.964881][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  847.048533][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  847.438461][ T1023] team0 (unregistering): Port device team_slave_1 removed
[  847.664745][ T1023] team0 (unregistering): Port device team_slave_0 removed
[  848.559132][ T9773] Bluetooth: hci4: command tx timeout
[  850.256906][ T1023] team0 (unregistering): Port device team_slave_1 removed
[  850.306924][ T1023] team0 (unregistering): Port device team_slave_0 removed
[  850.616113][ T9773] Bluetooth: hci4: command tx timeout
[  850.630357][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14
[  852.732404][ T9773] Bluetooth: hci4: command tx timeout
[  854.070112][ T5254] 8021q: adding VLAN 0 to HW filter on device eth15
[  854.790426][ T9773] Bluetooth: hci4: command tx timeout
[  855.236096][    T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  855.415143][    T9] usb 2-1: Using ep0 maxpacket: 8
[  855.432683][    T9] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  855.432723][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  855.483663][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40
[  855.483698][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.483721][    T9] usb 2-1: Product: 䀊
[  855.483747][    T9] usb 2-1: Manufacturer: �穧�銲밴஛ꉆ륲藰篟쟯㌀韢䜙Ჟ㇠갘䤇ြౠ毊誒譔ᜃ賉쀭⹎苖⮦ﳙ纯�雒엒롖১௦᣽✡㴭ᆗᲿ漣ﱟ噠蚼㠹뙩ᩰ鯔뼺粓����緓뒽䦉앳ℰ㠂蓵悺ডƞ후ᘳ늾飚㙪谠县
[  855.483778][    T9] usb 2-1: SerialNumber: 㡸�ꮆ收�⇆ⵣ뜆᫾伦Ṱ�挑⅑涾ź훑剦輯�薙抻♨�꺼�柩減섒ꋥ濴ՙ㳀홎肚縦儸繀⺹둜 �ⴆӆꒊ賂᧓뻈�쇡떕�櫿땼澙娽鞅윻桇闬�릴
[  855.891432][    T9] usbhid 2-1:1.0: can't add hid device: -71
[  855.891529][    T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  855.903465][    T9] usb 2-1: USB disconnect, device number 55
[  856.039597][T10868] loop0: detected capacity change from 0 to 256
[  856.192143][T10868] FAT-fs (loop0): Directory bread(block 1285) failed
[  856.192185][T10868] FAT-fs (loop0): Directory bread(block 1286) failed
[  856.192209][T10868] FAT-fs (loop0): Directory bread(block 1287) failed
[  856.192474][T10868] FAT-fs (loop0): Directory bread(block 1288) failed
[  856.232546][T10868] FAULT_INJECTION: forcing a failure.
[  856.232546][T10868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  856.232585][T10868] CPU: 0 UID: 0 PID: 10868 Comm: syz.0.1050 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  856.232611][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  856.232627][T10868] Call Trace:
[  856.232636][T10868]  <TASK>
[  856.232646][T10868]  dump_stack_lvl+0xe8/0x150
[  856.232685][T10868]  should_fail_ex+0x467/0x600
[  856.232736][T10868]  strncpy_from_user+0x36/0x2c0
[  856.232771][T10868]  do_getname+0x77/0x250
[  856.232800][T10868]  do_sys_openat2+0xcc/0x200
[  856.232830][T10868]  ? __pfx_do_sys_openat2+0x10/0x10
[  856.232861][T10868]  ? ksys_write+0x248/0x270
[  856.232894][T10868]  ? __pfx_ksys_write+0x10/0x10
[  856.232928][T10868]  __x64_sys_openat+0x138/0x170
[  856.232961][T10868]  do_syscall_64+0x17b/0x530
[  856.232994][T10868]  ? irqentry_exit+0x10f/0x8f0
[  856.233026][T10868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.233050][T10868]  ? clear_bhb_loop+0x40/0x90
[  856.233077][T10868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.233101][T10868] RIP: 0033:0x7f57fa91de99
[  856.233123][T10868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.233143][T10868] RSP: 002b:00007f57f8b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  856.233169][T10868] RAX: ffffffffffffffda RBX: 00007f57faba5fa0 RCX: 00007f57fa91de99
[  856.233186][T10868] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c
[  856.233202][T10868] RBP: 00007f57f8b76090 R08: 0000000000000000 R09: 0000000000000000
[  856.233217][T10868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  856.233232][T10868] R13: 00007f57faba6038 R14: 00007f57faba5fa0 R15: 00007fff28c67958
[  856.233268][T10868]  </TASK>
[  856.638849][ T6050] Flush: task=udevd[6050] dev=loop0 state=2
[  856.727708][ T6050] Teardown: task=udevd[6050] dev=loop0 state=2
[  857.287088][T10889] loop0: detected capacity change from 0 to 512
[  857.317965][T10889] EXT4-fs: Ignoring removed orlov option
[  857.421683][T10889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  857.421823][T10889] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  857.779658][T10901] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:337: inode #15: comm syz.0.1051: verity file corrupted; can't find descriptor
[  857.780331][T10901] EXT4-fs (loop0): Remounting filesystem read-only
[  857.780351][T10901] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size
[  857.930683][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  858.044120][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  858.048967][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  858.068221][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  858.071612][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  858.334580][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  858.580798][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  858.714477][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  858.821242][T10917] loop1: detected capacity change from 0 to 512
[  859.700001][T10917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  859.700215][T10917] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  860.330712][ T9773] Bluetooth: hci0: command tx timeout
[  861.356490][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  861.551509][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  861.698584][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  861.799842][T10955] loop1: detected capacity change from 0 to 256
[  861.831967][T10955] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  861.973016][T10955] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  862.220294][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  862.326068][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  862.381925][ T9773] Bluetooth: hci0: command tx timeout
[  862.474680][T10716] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.475024][T10716] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.475352][T10716] bridge_slave_0: entered allmulticast mode
[  862.504877][T10716] bridge_slave_0: entered promiscuous mode
[  862.636461][T10972] loop0: detected capacity change from 0 to 2048
[  862.743219][T10974] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  862.967065][T10716] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.967638][T10716] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.967956][T10716] bridge_slave_1: entered allmulticast mode
[  862.972663][T10716] bridge_slave_1: entered promiscuous mode
[  863.012043][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  863.066809][ T5810] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  863.168793][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  863.221225][ T5810] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  863.221264][ T5810] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  863.221309][ T5810] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  863.221335][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.238774][T10976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  863.329134][ T5810] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  863.511479][T10716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.679579][T10716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.833773][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  863.834362][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  863.867626][T10990] loop0: detected capacity change from 0 to 2048
[  863.978332][T10991] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  864.024122][T10976] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1061'.
[  864.024157][T10976] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1061'.
[  864.209352][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  864.294955][   T32] usb 2-1: USB disconnect, device number 56
[  864.296656][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  864.410305][T10793] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.410764][T10793] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.411058][T10793] bridge_slave_0: entered allmulticast mode
[  864.449996][T10793] bridge_slave_0: entered promiscuous mode
[  864.464220][ T9773] Bluetooth: hci0: command tx timeout
[  864.540424][T10716] team0: Port device team_slave_0 added
[  864.540972][T10793] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.541236][T10793] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.541436][T10793] bridge_slave_1: entered allmulticast mode
[  864.712992][T10793] bridge_slave_1: entered promiscuous mode
[  865.536639][T10716] team0: Port device team_slave_1 added
[  865.840202][T10999] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1066'.
[  865.840224][T10999] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  866.015062][T11005] FAULT_INJECTION: forcing a failure.
[  866.015062][T11005] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  866.015096][T11005] CPU: 0 UID: 0 PID: 11005 Comm: syz.1.1068 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  866.015118][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  866.015131][T11005] Call Trace:
[  866.015138][T11005]  <TASK>
[  866.015147][T11005]  dump_stack_lvl+0xe8/0x150
[  866.015182][T11005]  should_fail_ex+0x467/0x600
[  866.015216][T11005]  strncpy_from_user+0x36/0x2c0
[  866.015247][T11005]  do_getname+0x77/0x250
[  866.015274][T11005]  user_path_at+0x2a/0x160
[  866.015332][T11005]  __se_sys_mount+0x2dc/0x420
[  866.015361][T11005]  ? __pfx___se_sys_mount+0x10/0x10
[  866.015389][T11005]  ? __x64_sys_mount+0x20/0xc0
[  866.015413][T11005]  do_syscall_64+0x17b/0x530
[  866.015443][T11005]  ? irqentry_exit+0x10f/0x8f0
[  866.015470][T11005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.015490][T11005]  ? clear_bhb_loop+0x40/0x90
[  866.015514][T11005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.015534][T11005] RIP: 0033:0x7fcf646dde99
[  866.015553][T11005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  866.015571][T11005] RSP: 002b:00007fcf62936028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  866.015592][T11005] RAX: ffffffffffffffda RBX: 00007fcf64965fa0 RCX: 00007fcf646dde99
[  866.015607][T11005] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000
[  866.015620][T11005] RBP: 00007fcf62936090 R08: 0000200000000240 R09: 0000000000000000
[  866.015634][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  866.015645][T11005] R13: 00007fcf64966038 R14: 00007fcf64965fa0 R15: 00007ffe5405fe78
[  866.015674][T11005]  </TASK>
[  866.024162][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  866.229895][T10716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  866.229913][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  866.229945][T10716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  866.287174][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  866.329196][T10716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.329216][T10716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  866.329247][T10716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  866.495040][T11008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  866.523936][T10793] team0: Port device team_slave_0 added
[  866.543271][ T9773] Bluetooth: hci0: command tx timeout
[  866.573609][T10793] team0: Port device team_slave_1 added
[  866.996124][ T5810] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  867.180750][T11014] loop0: detected capacity change from 0 to 32768
[  867.198588][ T5810] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  867.198622][ T5810] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  867.198645][ T5810] usb 2-1: config 220 has no interface number 2
[  867.198718][ T5810] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  867.198750][ T5810] usb 2-1: config 220 interface 0 has no altsetting 0
[  867.198779][ T5810] usb 2-1: config 220 interface 76 has no altsetting 0
[  867.198799][ T5810] usb 2-1: config 220 interface 1 has no altsetting 0
[  867.201808][ T5810] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  867.201840][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.201862][ T5810] usb 2-1: Product: syz
[  867.201878][ T5810] usb 2-1: Manufacturer: syz
[  867.201894][ T5810] usb 2-1: SerialNumber: syz
[  867.312936][T11014] netlink: 'syz.0.1071': attribute type 1 has an invalid length.
[  867.338699][T11014] 
[  867.338699][T11014]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  867.338699][T11014] 
[  867.466846][ T5598] 
[  867.466846][ T5598]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  867.466846][ T5598] 
[  867.589643][ T5810] usb 2-1: selecting invalid altsetting 0
[  867.638436][ T5810] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  867.638538][ T5810] uvcvideo 2-1:220.0: No valid video chain found.
[  867.665254][ T5810] usb 2-1: selecting invalid altsetting 0
[  867.665283][ T5810] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  867.678928][ T5598] 
[  867.678928][ T5598]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  867.678928][ T5598] 
[  867.703949][ T5810] usb 2-1: USB disconnect, device number 57
[  867.723877][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  867.826191][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  867.910693][T10716] hsr_slave_0: entered promiscuous mode
[  867.913227][T10716] hsr_slave_1: entered promiscuous mode
[  867.929588][T10716] debugfs: 'hsr0' already exists in 'hsr'
[  867.929617][T10716] Cannot create hsr debugfs directory
[  868.057268][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  868.057288][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.057320][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  868.119736][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  868.119762][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.119794][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  868.658254][T11021] loop0: detected capacity change from 0 to 256
[  870.520389][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  870.520544][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  870.553577][T11021] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  871.063398][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  871.105101][T10793] hsr_slave_0: entered promiscuous mode
[  871.113545][T10793] hsr_slave_1: entered promiscuous mode
[  871.115625][T10793] debugfs: 'hsr0' already exists in 'hsr'
[  871.115650][T10793] Cannot create hsr debugfs directory
[  871.146077][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  871.183958][T11025] loop1: detected capacity change from 0 to 2048
[  871.190624][T11027] loop0: detected capacity change from 0 to 512
[  871.208975][T11027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  871.242356][T11027] EXT4-fs (loop0): 1 truncate cleaned up
[  871.249607][T11027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  871.280516][ T1023] bridge_slave_1: left allmulticast mode
[  871.280554][ T1023] bridge_slave_1: left promiscuous mode
[  871.280854][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.372515][T11030] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  871.556576][ T1023] bridge_slave_0: left allmulticast mode
[  871.556610][ T1023] bridge_slave_0: left promiscuous mode
[  871.556873][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.611073][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  871.612113][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  871.684877][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  871.726527][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  871.766183][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  871.861189][T11034] loop0: detected capacity change from 0 to 128
[  871.951404][T11034] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  871.956415][T11034] ext4 filesystem being mounted at /443/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  873.042246][ T5598] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  873.117501][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  873.206801][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  873.222539][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  873.456797][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  873.504552][T11045] loop0: detected capacity change from 0 to 128
[  873.535692][T11045] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  873.538196][T11045] ext4 filesystem being mounted at /445/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  873.570698][ T1023] bond0 (unregistering): Released all slaves
[  874.958343][ T5598] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  874.993240][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  875.117130][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  876.414045][T11062] loop0: detected capacity change from 0 to 128
[  876.428371][T11062] EXT4-fs (loop0): Test dummy encryption mode enabled
[  876.446192][ T1023] hsr_slave_0: left promiscuous mode
[  876.449836][T11062] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  876.450330][T11062] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  876.707756][ T1023] hsr_slave_1: left promiscuous mode
[  876.710832][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  876.753752][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  876.987958][T11065] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  877.652266][ T5598] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  877.751581][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  877.856226][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  878.128171][   T32] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  879.137751][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  879.137804][   T32] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  879.137830][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.374774][   T32] usb 2-1: config 0 descriptor??
[  879.533371][T11068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  879.710436][T11075] loop0: detected capacity change from 0 to 128
[  879.803046][T11075] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  879.805555][T11075] ext4 filesystem being mounted at /449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  880.079770][   T32] hid (null): invalid report_size 5750
[  880.084929][   T32] hid_parser_main: 364 callbacks suppressed
[  880.084957][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.084989][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.085017][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.085045][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.085073][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.085099][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.085128][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.085156][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.085193][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.085222][   T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  880.091301][   T32] asus 0003:0B05:1ABE.0008: reserved main item tag 0xd
[  880.091409][   T32] asus 0003:0B05:1ABE.0008: invalid report_size 5750
[  880.091461][   T32] asus 0003:0B05:1ABE.0008: item 0 2 1 7 parsing failed
[  880.093547][   T32] asus 0003:0B05:1ABE.0008: Asus hid parse failed: -22
[  880.093945][   T32] asus 0003:0B05:1ABE.0008: probe with driver asus failed with error -22
[  880.576921][ T1023] team0 (unregistering): Port device team_slave_1 removed
[  880.907183][ T1023] team0 (unregistering): Port device team_slave_0 removed
[  880.929954][ T5598] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  881.003979][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  881.087313][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  881.131455][T11081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1087'.
[  881.438220][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'.
[  881.519542][T11067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  881.519567][T11067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  881.519678][T11067] hsr0: entered allmulticast mode
[  881.519694][T11067] hsr_slave_0: entered allmulticast mode
[  881.519717][T11067] hsr_slave_1: entered allmulticast mode
[  881.579423][ T5327] usb 2-1: USB disconnect, device number 58
[  881.774989][   T38] audit: type=1326 audit(1784360471.981:458): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fa91de99 code=0x7ffc0000
[  881.801772][   T38] audit: type=1326 audit(1784360472.001:460): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fa91de99 code=0x7ffc0000
[  881.801835][   T38] audit: type=1326 audit(1784360471.981:459): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fa91de99 code=0x7ffc0000
[  881.802815][   T38] audit: type=1326 audit(1784360472.001:461): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57fa91de99 code=0x7ffc0000
[  881.814898][   T38] audit: type=1326 audit(1784360472.021:462): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fa91de99 code=0x7ffc0000
[  881.870097][   T38] audit: type=1326 audit(1784360472.051:463): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fa91de99 code=0x7ffc0000
[  881.870160][   T38] audit: type=1326 audit(1784360472.051:464): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f57fa91dc02 code=0x7ffc0000
[  881.870210][   T38] audit: type=1326 audit(1784360472.051:465): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f57fa91dc97 code=0x7ffc0000
[  881.870259][   T38] audit: type=1326 audit(1784360472.051:466): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f57fa8dab91 code=0x7ffc0000
[  881.870310][   T38] audit: type=1326 audit(1784360472.051:467): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11087 comm="syz.0.1089" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f57fa91ec89 code=0x7ffc0000
[  882.180872][T11091] blktrace: Concurrent blktraces are not allowed on sg0
[  882.868992][T11104] loop0: detected capacity change from 0 to 128
[  882.950381][T11104] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  882.951774][T11104] ext4 filesystem being mounted at /454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  884.043135][T11116] loop1: detected capacity change from 0 to 256
[  884.053020][T11116] FAT-fs (loop1): Directory bread(block 1285) failed
[  884.053060][T11116] FAT-fs (loop1): Directory bread(block 1286) failed
[  884.053087][T11116] FAT-fs (loop1): Directory bread(block 1287) failed
[  884.053352][T11116] FAT-fs (loop1): Directory bread(block 1288) failed
[  884.235582][T11116] FAT-fs (loop1): Directory bread(block 1285) failed
[  884.235618][T11116] FAT-fs (loop1): Directory bread(block 1286) failed
[  884.235644][T11116] FAT-fs (loop1): Directory bread(block 1287) failed
[  884.235669][T11116] FAT-fs (loop1): Directory bread(block 1288) failed
[  884.280544][T11116] FAT-fs (loop1): Directory bread(block 1285) failed
[  884.280584][T11116] FAT-fs (loop1): Directory bread(block 1286) failed
[  884.318931][ T5598] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  884.351449][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  884.619158][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  884.687200][ T5903] Flush: task=udevd[5903] dev=loop1 state=2
[  885.000635][T10904] bridge0: port 1(bridge_slave_0) entered blocking state
[  885.001003][T10904] bridge0: port 1(bridge_slave_0) entered disabled state
[  885.001327][T10904] bridge_slave_0: entered allmulticast mode
[  885.267280][T10904] bridge_slave_0: entered promiscuous mode
[  885.476603][ T5903] Teardown: task=udevd[5903] dev=loop1 state=2
[  886.086593][T11133] loop0: detected capacity change from 0 to 4096
[  886.116060][T11133] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  886.135462][T10904] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.143543][T10904] bridge0: port 2(bridge_slave_1) entered disabled state
[  886.143877][T10904] bridge_slave_1: entered allmulticast mode
[  886.183127][T10904] bridge_slave_1: entered promiscuous mode
[  886.269873][T11137] blktrace: Concurrent blktraces are not allowed on sg0
[  886.438508][T11133] ntfs3(loop0): ino=19, mi_enum_attr
[  886.438544][T11133] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  886.458661][T11133] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  886.472089][T11133] FAULT_INJECTION: forcing a failure.
[  886.472089][T11133] name failslab, interval 1, probability 0, space 0, times 0
[  886.472127][T11133] CPU: 1 UID: 0 PID: 11133 Comm: syz.0.1100 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  886.472153][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  886.472167][T11133] Call Trace:
[  886.472176][T11133]  <TASK>
[  886.472187][T11133]  dump_stack_lvl+0xe8/0x150
[  886.472229][T11133]  should_fail_ex+0x467/0x600
[  886.472269][T11133]  should_failslab+0xa8/0x100
[  886.472297][T11133]  ? security_file_alloc+0x34/0x2d0
[  886.472330][T11133]  kmem_cache_alloc_noprof+0x9e/0x680
[  886.472365][T11133]  ? rcu_is_watching+0x15/0xb0
[  886.472396][T11133]  ? security_file_alloc+0x34/0x2d0
[  886.472429][T11133]  ? alloc_empty_file+0x5b/0x1d0
[  886.472457][T11133]  security_file_alloc+0x34/0x2d0
[  886.472493][T11133]  init_file+0x96/0x2d0
[  886.472519][T11133]  alloc_empty_file+0x74/0x1d0
[  886.472546][T11133]  path_openat+0x8f/0x3850
[  886.472583][T11133]  ? __lock_acquire+0x6df/0x2e40
[  886.472611][T11133]  ? kasan_save_track+0x4f/0x80
[  886.472633][T11133]  ? __kasan_slab_alloc+0x6c/0x80
[  886.472655][T11133]  ? kmem_cache_alloc_noprof+0x358/0x680
[  886.472691][T11133]  ? do_getname+0x2e/0x250
[  886.472713][T11133]  ? do_sys_openat2+0xcc/0x200
[  886.472737][T11133]  ? __x64_sys_open+0x11e/0x150
[  886.472761][T11133]  ? do_syscall_64+0x17b/0x530
[  886.472816][T11133]  ? do_raw_spin_lock+0x12b/0x2f0
[  886.472853][T11133]  do_file_open+0x23e/0x4a0
[  886.472884][T11133]  ? lockdep_hardirqs_on+0x7a/0x110
[  886.472921][T11133]  ? __pfx_do_file_open+0x10/0x10
[  886.472979][T11133]  ? alloc_fd+0x654/0x6d0
[  886.473017][T11133]  do_sys_openat2+0x115/0x200
[  886.473047][T11133]  ? __pfx_do_sys_openat2+0x10/0x10
[  886.473073][T11133]  ? ksys_write+0x248/0x270
[  886.473106][T11133]  ? __pfx_ksys_write+0x10/0x10
[  886.473141][T11133]  __x64_sys_open+0x11e/0x150
[  886.473171][T11133]  do_syscall_64+0x17b/0x530
[  886.473211][T11133]  ? irqentry_exit+0x10f/0x8f0
[  886.473244][T11133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.473267][T11133]  ? clear_bhb_loop+0x40/0x90
[  886.473295][T11133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.473318][T11133] RIP: 0033:0x7f57fa91de99
[  886.473340][T11133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  886.473360][T11133] RSP: 002b:00007f57f8b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  886.473386][T11133] RAX: ffffffffffffffda RBX: 00007f57faba5fa0 RCX: 00007f57fa91de99
[  886.473403][T11133] RDX: 78e22799f4a46ffe RSI: 00000000001607c0 RDI: 0000200000000000
[  886.473420][T11133] RBP: 00007f57f8b76090 R08: 0000000000000000 R09: 0000000000000000
[  886.473436][T11133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  886.473449][T11133] R13: 00007f57faba6038 R14: 00007f57faba5fa0 R15: 00007fff28c67958
[  886.473484][T11133]  </TASK>
[  886.847080][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  886.946948][T10904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  886.954849][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  886.980849][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  887.027493][T10904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  887.399460][   T32] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  887.473289][T11153] loop1: detected capacity change from 0 to 128
[  887.498870][T10904] team0: Port device team_slave_0 added
[  887.516031][T10904] team0: Port device team_slave_1 added
[  887.537268][T11153] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  887.541882][T11153] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  887.556781][   T32] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  887.556817][   T32] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  887.556853][   T32] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  887.556876][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.648721][T11144] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  887.663510][   T32] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  888.661426][ T5597] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  888.691647][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  888.692605][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  888.793542][T11144] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1102'.
[  888.793589][T11144] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1102'.
[  888.848668][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  888.946375][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  889.117565][ T5327] usb 1-1: USB disconnect, device number 46
[  889.283352][T10904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  889.283370][T10904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  889.283394][T10904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  889.420642][T10904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  889.420656][T10904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  889.420678][T10904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  889.565060][T10904] hsr_slave_0: entered promiscuous mode
[  889.573347][T10904] hsr_slave_1: entered promiscuous mode
[  889.575401][T10904] debugfs: 'hsr0' already exists in 'hsr'
[  889.575429][T10904] Cannot create hsr debugfs directory
[  890.976221][ T1023] bridge_slave_1: left allmulticast mode
[  890.976261][ T1023] bridge_slave_1: left promiscuous mode
[  890.976579][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.117905][ T1023] bridge_slave_0: left allmulticast mode
[  891.117942][ T1023] bridge_slave_0: left promiscuous mode
[  891.118272][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.406449][ T1023] bridge_slave_1: left allmulticast mode
[  891.406489][ T1023] bridge_slave_1: left promiscuous mode
[  891.406779][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.547264][ T1023] bridge_slave_0: left allmulticast mode
[  891.547294][ T1023] bridge_slave_0: left promiscuous mode
[  891.547513][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.936774][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  892.016723][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  892.082378][ T1023] bond0 (unregistering): Released all slaves
[  892.346828][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  892.457239][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  892.518248][ T1023] bond0 (unregistering): Released all slaves
[  892.554556][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  893.656160][ T1023] hsr_slave_0: left promiscuous mode
[  893.696142][ T1023] hsr_slave_1: left promiscuous mode
[  893.697414][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  893.737675][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  893.916131][ T1023] hsr_slave_0: left promiscuous mode
[  893.956130][ T1023] hsr_slave_1: left promiscuous mode
[  893.957906][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  893.995035][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  894.407480][ T1023] team0 (unregistering): Port device team_slave_1 removed
[  894.468185][ T1023] team0 (unregistering): Port device team_slave_0 removed
[  894.638808][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  894.642811][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  894.644464][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  894.701275][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  894.760294][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  895.296736][ T1023] team0 (unregistering): Port device team_slave_1 removed
[  895.347738][ T1023] team0 (unregistering): Port device team_slave_0 removed
[  895.541466][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14
[  896.936162][ T9773] Bluetooth: hci5: command tx timeout
[  898.293156][T11202] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.293525][T11202] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.293763][T11202] bridge_slave_0: entered allmulticast mode
[  898.317714][T11202] bridge_slave_0: entered promiscuous mode
[  898.328084][T11202] bridge0: port 2(bridge_slave_1) entered blocking state
[  898.328477][T11202] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.328734][T11202] bridge_slave_1: entered allmulticast mode
[  898.331894][T11202] bridge_slave_1: entered promiscuous mode
[  898.414470][T11202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  898.436759][T11202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  898.570441][T11202] team0: Port device team_slave_0 added
[  898.645693][T11202] team0: Port device team_slave_1 added
[  898.828670][T11202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  898.828691][T11202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  898.828724][T11202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  898.873525][T11202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  898.873543][T11202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  898.873574][T11202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  899.019370][ T9773] Bluetooth: hci5: command tx timeout
[  899.096910][T11202] hsr_slave_0: entered promiscuous mode
[  899.098793][T11202] hsr_slave_1: entered promiscuous mode
[  899.859487][T10793] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  899.920549][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  900.074719][T10793] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  900.134598][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  900.166452][T10793] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  900.210383][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  900.295481][T10793] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  900.331644][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  900.871629][T10904] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  900.891604][T10904] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  900.913125][T10904] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  900.974052][T10904] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  901.076905][T10904] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  901.116625][ T9773] Bluetooth: hci5: command tx timeout
[  901.163165][T10904] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  901.178415][T10904] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  901.211465][T10904] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  901.429711][T10793] 8021q: adding VLAN 0 to HW filter on device bond0
[  901.579957][T10793] 8021q: adding VLAN 0 to HW filter on device team0
[  901.808947][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.809973][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state
[  901.904996][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.905181][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  901.972378][T10904] 8021q: adding VLAN 0 to HW filter on device bond0
[  902.106481][   T12] bridge_slave_1: left allmulticast mode
[  902.106513][   T12] bridge_slave_1: left promiscuous mode
[  902.106774][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.227865][   T12] bridge_slave_0: left allmulticast mode
[  902.227897][   T12] bridge_slave_0: left promiscuous mode
[  902.228096][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  902.666757][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  902.747217][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  902.828091][   T12] bond0 (unregistering): Released all slaves
[  903.041208][T10904] 8021q: adding VLAN 0 to HW filter on device team0
[  903.196156][ T9773] Bluetooth: hci5: command tx timeout
[  903.467745][   T12] hsr_slave_0: left promiscuous mode
[  903.507181][   T12] hsr_slave_1: left promiscuous mode
[  903.508389][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  903.548064][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  903.936862][   T12] team0 (unregistering): Port device team_slave_1 removed
[  903.996864][   T12] team0 (unregistering): Port device team_slave_0 removed
[  904.260922][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.261176][ T8326] bridge0: port 1(bridge_slave_0) entered forwarding state
[  904.588072][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.588342][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  905.655589][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  907.183295][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  907.237474][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  907.241994][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  907.292526][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  907.388898][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  908.293689][T10904] 8021q: adding VLAN 0 to HW filter on device batadv0
[  909.233405][T11202] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  909.280248][T11202] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  909.296711][T11202] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  909.341142][T11202] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  909.636415][T11202] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  909.657135][ T5606] Bluetooth: hci3: command tx timeout
[  909.661662][T11202] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  909.691850][T11202] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  909.735277][T11202] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  910.192904][T10904] veth0_vlan: entered promiscuous mode
[  910.313669][T10904] veth1_vlan: entered promiscuous mode
[  910.966264][ T5950] bridge_slave_1: left allmulticast mode
[  910.966305][ T5950] bridge_slave_1: left promiscuous mode
[  910.966615][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[  911.087428][ T5950] bridge_slave_0: left allmulticast mode
[  911.087459][ T5950] bridge_slave_0: left promiscuous mode
[  911.087744][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[  911.769427][ T5606] Bluetooth: hci3: command tx timeout
[  912.066895][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  912.160671][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  912.191324][ T5950] bond0 (unregistering): Released all slaves
[  912.210187][T11332] loop1: detected capacity change from 0 to 2048
[  912.322901][T11332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  912.668443][   T38] kauditd_printk_skb: 39 callbacks suppressed
[  912.668462][   T38] audit: type=1326 audit(1784360502.871:507): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  912.670518][   T38] audit: type=1326 audit(1784360502.881:508): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf646dde99 code=0x7ffc0000
[  912.764347][   T38] audit: type=1326 audit(1784360502.971:509): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6469e6ce code=0x7ffc0000
[  912.815533][   T38] audit: type=1326 audit(1784360503.011:510): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6469e6ce code=0x7ffc0000
[  912.856363][   T38] audit: type=1326 audit(1784360503.051:511): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6469e6ce code=0x7ffc0000
[  912.859477][   T38] audit: type=1326 audit(1784360503.071:512): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6469e6ce code=0x7ffc0000
[  912.859521][   T38] audit: type=1326 audit(1784360503.071:513): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6469e6ce code=0x7ffc0000
[  912.861473][   T38] audit: type=1326 audit(1784360503.071:514): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6469e6ce code=0x7ffc0000
[  912.863141][   T38] audit: type=1326 audit(1784360503.071:515): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6469e6ce code=0x7ffc0000
[  912.885275][   T38] audit: type=1326 audit(1784360503.091:516): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11331 comm="syz.1.1106" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6469e6ce code=0x7ffc0000
[  913.184108][T11332] kAFS: unable to lookup cell '(,c¾ûL'
[  913.189735][T11290] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.190075][T11290] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.190358][T11290] bridge_slave_0: entered allmulticast mode
[  913.195344][T11290] bridge_slave_0: entered promiscuous mode
[  913.234504][T10904] veth0_macvtap: entered promiscuous mode
[  913.256965][T11290] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.257303][T11290] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.257578][T11290] bridge_slave_1: entered allmulticast mode
[  913.260185][T11290] bridge_slave_1: entered promiscuous mode
[  913.374034][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  913.399525][T11330] loop0: detected capacity change from 0 to 32768
[  913.460849][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  913.556581][T11330] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  913.628360][T11330] 
[  913.628360][T11330]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  913.628360][T11330] 
[  913.647016][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  913.676423][T11290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  913.677745][T10904] veth1_macvtap: entered promiscuous mode
[  913.828274][ T5606] Bluetooth: hci3: command tx timeout
[  913.828428][ T5598] 
[  913.828428][ T5598]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  913.828428][ T5598] 
[  913.828917][ T5598] 
[  913.828917][ T5598]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  913.828917][ T5598] 
[  913.890462][ T5950] hsr_slave_0: left promiscuous mode
[  913.936762][ T5950] hsr_slave_1: left promiscuous mode
[  913.940173][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  913.958499][ T5903] Flush: task=udevd[5903] dev=loop0 state=2
[  913.991037][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  914.056166][T11341] FAULT_INJECTION: forcing a failure.
[  914.056166][T11341] name failslab, interval 1, probability 0, space 0, times 0
[  914.056204][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.0.1108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  914.056230][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  914.056244][T11341] Call Trace:
[  914.056253][T11341]  <TASK>
[  914.056263][T11341]  dump_stack_lvl+0xe8/0x150
[  914.056304][T11341]  should_fail_ex+0x467/0x600
[  914.056342][T11341]  should_failslab+0xa8/0x100
[  914.056373][T11341]  __kmalloc_noprof+0xfb/0x790
[  914.056397][T11341]  ? tomoyo_realpath_from_path+0xef/0x640
[  914.056423][T11341]  ? tomoyo_realpath_from_path+0xef/0x640
[  914.056457][T11341]  tomoyo_realpath_from_path+0xef/0x640
[  914.056495][T11341]  ? tomoyo_path_number_perm+0x219/0x5f0
[  914.056613][T11341]  tomoyo_path_number_perm+0x246/0x5f0
[  914.056652][T11341]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  914.056687][T11341]  ? lockdep_hardirqs_on+0x7a/0x110
[  914.056720][T11341]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  914.056753][T11341]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  914.056819][T11341]  ? __pfx_current_check_access_path+0x10/0x10
[  914.056922][T11341]  tomoyo_path_mknod+0x14a/0x1a0
[  914.056956][T11341]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  914.056990][T11341]  ? __pfx_filename_create+0x10/0x10
[  914.057030][T11341]  security_path_mknod+0x16c/0x330
[  914.057061][T11341]  filename_mknodat+0x2c2/0x670
[  914.057103][T11341]  ? __pfx_filename_mknodat+0x10/0x10
[  914.057136][T11341]  ? strncpy_from_user+0x150/0x2c0
[  914.057171][T11341]  ? do_getname+0x151/0x250
[  914.057199][T11341]  __se_sys_mknod+0x3a/0x150
[  914.057236][T11341]  do_syscall_64+0x17b/0x530
[  914.057269][T11341]  ? irqentry_exit+0x10f/0x8f0
[  914.057301][T11341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.057324][T11341]  ? clear_bhb_loop+0x40/0x90
[  914.057352][T11341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.057375][T11341] RIP: 0033:0x7f57fa91de99
[  914.057397][T11341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  914.057417][T11341] RSP: 002b:00007f57f8b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  914.057441][T11341] RAX: ffffffffffffffda RBX: 00007f57faba5fa0 RCX: 00007f57fa91de99
[  914.057459][T11341] RDX: 0000000000000701 RSI: 0000000000000040 RDI: 0000200000000200
[  914.057474][T11341] RBP: 00007f57f8b76090 R08: 0000000000000000 R09: 0000000000000000
[  914.057489][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  914.057503][T11341] R13: 00007f57faba6038 R14: 00007f57faba5fa0 R15: 00007fff28c67958
[  914.057538][T11341]  </TASK>
[  914.057575][T11341] ERROR: Out of memory at tomoyo_realpath_from_path.
[  914.170805][ T5903] Teardown: task=udevd[5903] dev=loop0 state=2
[  914.977314][ T5950] team0 (unregistering): Port device team_slave_1 removed
[  915.009949][T11352] FAULT_INJECTION: forcing a failure.
[  915.009949][T11352] name failslab, interval 1, probability 0, space 0, times 0
[  915.009987][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.1.1111 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  915.010016][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  915.010031][T11352] Call Trace:
[  915.010039][T11352]  <TASK>
[  915.010049][T11352]  dump_stack_lvl+0xe8/0x150
[  915.010088][T11352]  should_fail_ex+0x467/0x600
[  915.010126][T11352]  should_failslab+0xa8/0x100
[  915.010155][T11352]  kmem_cache_alloc_node_noprof+0xac/0x660
[  915.010192][T11352]  ? __alloc_skb+0x1d7/0x7a0
[  915.010218][T11352]  ? __alloc_skb+0x1d7/0x7a0
[  915.010261][T11352]  __alloc_skb+0x1d7/0x7a0
[  915.010293][T11352]  alloc_skb_with_frags+0xc6/0x760
[  915.010323][T11352]  ? __lock_acquire+0x6df/0x2e40
[  915.010349][T11352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.010375][T11352]  ? pointer+0x7dd/0x1120
[  915.010406][T11352]  sock_alloc_send_pskb+0x884/0x9a0
[  915.010458][T11352]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  915.010510][T11352]  tun_get_user+0x9a6/0x4380
[  915.010545][T11352]  ? __pfx_snprintf+0x10/0x10
[  915.010593][T11352]  ? __pfx_trim_netdev_trace+0x10/0x10
[  915.010626][T11352]  ? stack_trace_save+0xa9/0x100
[  915.010651][T11352]  ? __pfx_tun_get_user+0x10/0x10
[  915.010692][T11352]  ? save_netdev_trace_buffer+0x18f/0x5e0
[  915.010732][T11352]  ? save_netdev_trace_buffer+0x4c3/0x5e0
[  915.010777][T11352]  ? ref_tracker_alloc+0x353/0x4c0
[  915.010892][T11352]  ? tun_get+0x157/0x2f0
[  915.010924][T11352]  ? tun_chr_write_iter+0x63/0x210
[  915.010958][T11352]  ? vfs_write+0x61e/0xbb0
[  915.010989][T11352]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  915.011029][T11352]  ? tun_get+0x1c/0x2f0
[  915.011069][T11352]  ? tun_get+0x1c/0x2f0
[  915.011104][T11352]  ? tun_get+0x1c/0x2f0
[  915.011145][T11352]  tun_chr_write_iter+0x119/0x210
[  915.011208][T11352]  vfs_write+0x61e/0xbb0
[  915.011255][T11352]  ? __pfx_vfs_write+0x10/0x10
[  915.011297][T11352]  ? __fget_files+0x2a/0x420
[  915.011334][T11352]  ksys_write+0x156/0x270
[  915.011367][T11352]  ? __pfx_ksys_write+0x10/0x10
[  915.011407][T11352]  do_syscall_64+0x17b/0x530
[  915.011439][T11352]  ? irqentry_exit+0x10f/0x8f0
[  915.011470][T11352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.011493][T11352]  ? clear_bhb_loop+0x40/0x90
[  915.011521][T11352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.011544][T11352] RIP: 0033:0x7fcf6469e6ce
[  915.011565][T11352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  915.011586][T11352] RSP: 002b:00007fcf62935fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  915.011610][T11352] RAX: ffffffffffffffda RBX: 00007fcf629366c0 RCX: 00007fcf6469e6ce
[  915.011629][T11352] RDX: 00000000fffffefc RSI: 0000200000000ac0 RDI: 00000000000000c8
[  915.011644][T11352] RBP: 00007fcf62936090 R08: 0000000000000000 R09: 0000000000000000
[  915.011659][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  915.011674][T11352] R13: 00007fcf64966038 R14: 00007fcf64965fa0 R15: 00007ffe5405fe78
[  915.011709][T11352]  </TASK>
[  915.041669][ T5950] team0 (unregistering): Port device team_slave_0 removed
[  915.508419][T11290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.698157][T11202] 8021q: adding VLAN 0 to HW filter on device bond0
[  915.714700][T11290] team0: Port device team_slave_0 added
[  915.751801][T11290] team0: Port device team_slave_1 added
[  915.908913][ T5606] Bluetooth: hci3: command tx timeout
[  916.156448][T10904] batman_adv: batadv0: Interface activated: batadv_slave_0
[  916.158492][T11290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  916.158506][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  916.158530][T11290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  916.323653][T11290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  916.323667][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  916.323690][T11290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  916.648060][T11202] 8021q: adding VLAN 0 to HW filter on device team0
[  916.789034][T10904] batman_adv: batadv0: Interface activated: batadv_slave_1
[  916.908919][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.909201][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  917.169601][T11290] hsr_slave_0: entered promiscuous mode
[  917.173071][T11290] hsr_slave_1: entered promiscuous mode
[  917.174985][T11290] debugfs: 'hsr0' already exists in 'hsr'
[  917.175013][T11290] Cannot create hsr debugfs directory
[  917.213872][T11374] loop1: detected capacity change from 0 to 128
[  917.420310][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.420581][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state
[  917.437266][   T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  917.529866][   T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  917.676250][T11374] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  917.676314][T11374] hpfs: filesystem error: improperly stopped
[  917.676328][T11374] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  917.676344][T11374] hpfs: You really don't want any checks? You are crazy...
[  917.676385][T11374] hpfs: Code page index out of array
[  917.676395][T11374] hpfs: code page support is disabled
[  917.687810][   T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  917.763370][   T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  917.886595][T11374] hpfs: hpfs_map_4sectors(): unaligned read
[  917.964315][T11374] hpfs: hpfs_map_4sectors(): unaligned read
[  917.964345][T11374] hpfs: filesystem error: unable to find root dir
[  918.060564][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  918.439517][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  918.531810][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  918.981049][T11386] loop1: detected capacity change from 0 to 512
[  918.983229][T11386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  919.006998][T11386] EXT4-fs (loop1): 1 truncate cleaned up
[  919.009996][T11386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  919.507517][ T9773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  919.561373][ T9773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  919.582016][ T9773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  919.635499][ T9773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  919.674895][ T9773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  920.028497][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  920.152512][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  920.516656][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  920.781360][T11411] FAULT_INJECTION: forcing a failure.
[  920.781360][T11411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  920.781399][T11411] CPU: 0 UID: 0 PID: 11411 Comm: syz.1.1119 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  920.781424][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  920.781438][T11411] Call Trace:
[  920.781446][T11411]  <TASK>
[  920.781456][T11411]  dump_stack_lvl+0xe8/0x150
[  920.781496][T11411]  should_fail_ex+0x467/0x600
[  920.781533][T11411]  _copy_to_user+0x31/0xb0
[  920.781560][T11411]  copy_to_sockptr+0x5e/0xa0
[  920.781585][T11411]  do_tcp_getsockopt+0x221b/0x2980
[  920.781615][T11411]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  920.781643][T11411]  ? sock_recv_errqueue+0x540/0x5e0
[  920.781667][T11411]  ? is_bpf_text_address+0x26/0x2b0
[  920.781704][T11411]  ? kernel_text_address+0xa5/0xe0
[  920.781728][T11411]  ? __kernel_text_address+0xd/0x30
[  920.781751][T11411]  ? unwind_get_return_address+0x4d/0x90
[  920.781778][T11411]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  920.781805][T11411]  ? arch_stack_walk+0xfb/0x150
[  920.781838][T11411]  ? __lock_acquire+0x6df/0x2e40
[  920.781878][T11411]  ? _parse_integer_limit+0x18f/0x1e0
[  920.781914][T11411]  ? __lock_acquire+0x6df/0x2e40
[  920.781947][T11411]  ? kstrtouint+0x6e/0xe0
[  920.781988][T11411]  ? __lock_acquire+0x6df/0x2e40
[  920.782038][T11411]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  920.782065][T11411]  tcp_getsockopt+0x83/0x130
[  920.782087][T11411]  ? sock_recv_errqueue+0x540/0x5e0
[  920.782111][T11411]  ? sock_recv_errqueue+0x540/0x5e0
[  920.782134][T11411]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  920.782160][T11411]  do_sock_getsockopt+0x51d/0x7e0
[  920.782197][T11411]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  920.782242][T11411]  ? __fget_files+0x2a/0x420
[  920.782270][T11411]  ? __fget_files+0x3a8/0x420
[  920.782297][T11411]  ? __fget_files+0x2a/0x420
[  920.782332][T11411]  __x64_sys_getsockopt+0x1aa/0x250
[  920.782371][T11411]  do_syscall_64+0x17b/0x530
[  920.782407][T11411]  ? irqentry_exit+0x10f/0x8f0
[  920.782439][T11411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.782463][T11411]  ? clear_bhb_loop+0x40/0x90
[  920.782491][T11411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.782515][T11411] RIP: 0033:0x7fcf646dde99
[  920.782537][T11411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  920.782556][T11411] RSP: 002b:00007fcf62915028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  920.782581][T11411] RAX: ffffffffffffffda RBX: 00007fcf64966090 RCX: 00007fcf646dde99
[  920.782598][T11411] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[  920.782612][T11411] RBP: 00007fcf62915090 R08: 0000200000000780 R09: 0000000000000000
[  920.782629][T11411] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001
[  920.782644][T11411] R13: 00007fcf64966128 R14: 00007fcf64966090 R15: 00007ffe5405fe78
[  920.782680][T11411]  </TASK>
[  921.443797][T11420] loop0: detected capacity change from 0 to 1024
[  921.893734][   T41] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.897620][ T5606] Bluetooth: hci0: command tx timeout
[  922.004013][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14
[  923.624063][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  923.776501][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  923.978605][ T5606] Bluetooth: hci0: command tx timeout
[  925.333913][   T41] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.068946][ T5606] Bluetooth: hci0: command tx timeout
[  926.994400][   T41] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.311017][T11202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  927.766116][ T5708] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  927.947744][ T5708] usb 1-1: Using ep0 maxpacket: 16
[  927.957497][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  927.957530][ T5708] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  927.972404][ T5708] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  927.972489][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.972565][ T5708] usb 1-1: Product: syz
[  927.972622][ T5708] usb 1-1: Manufacturer: syz
[  927.972674][ T5708] usb 1-1: SerialNumber: syz
[  928.072331][ T5708] usb 1-1: 0:2 : does not exist
[  928.136104][ T5606] Bluetooth: hci0: command tx timeout
[  928.341402][T11464] loop0: detected capacity change from 0 to 256
[  928.379315][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'.
[  928.568421][ T6050] Flush: task=udevd[6050] dev=loop0 state=2
[  928.584778][   T41] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.077384][ T6050] Teardown: task=udevd[6050] dev=loop0 state=2
[  929.333857][ T5708] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  929.437250][ T5708] usb 1-1: USB disconnect, device number 47
[  929.920679][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  931.416334][ T5327] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  931.609553][ T5327] usb 1-1: Using ep0 maxpacket: 16
[  931.615152][ T5327] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[  931.615195][ T5327] usb 1-1: config 0 interface 0 has no altsetting 0
[  931.623886][ T5327] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  931.623984][ T5327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.624047][ T5327] usb 1-1: Product: syz
[  931.624091][ T5327] usb 1-1: Manufacturer: syz
[  931.624135][ T5327] usb 1-1: SerialNumber: syz
[  931.694825][ T5327] usb 1-1: config 0 descriptor??
[  931.730212][ T5327] hub 1-1:0.0: bad descriptor, ignoring hub
[  931.730256][ T5327] hub 1-1:0.0: probe with driver hub failed with error -5
[  931.763223][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  931.763342][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  931.973639][ T5327] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  932.132077][   T12] usb 1-1: Failed to submit usb control message: -71
[  932.132138][   T12] usb 1-1: unable to send the bmi data to the device: -71
[  932.132164][   T12] usb 1-1: unable to get target info from device
[  932.132189][   T12] usb 1-1: could not get target info (-71)
[  932.132317][   T12] usb 1-1: could not probe fw (-71)
[  932.299054][ T5327] usb 1-1: USB disconnect, device number 48
[  932.389815][T11503] loop1: detected capacity change from 0 to 2048
[  932.579898][T11506] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  932.829493][T11202] veth0_vlan: entered promiscuous mode
[  933.027538][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  933.172080][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  933.608288][T11522] loop0: detected capacity change from 0 to 4096
[  934.153468][T11202] veth1_vlan: entered promiscuous mode
[  935.290648][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  935.366504][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  935.396810][T11538] loop1: detected capacity change from 0 to 512
[  936.648380][T11547] loop0: detected capacity change from 0 to 256
[  936.864238][   T41] bridge_slave_1: left allmulticast mode
[  936.864276][   T41] bridge_slave_1: left promiscuous mode
[  936.864561][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.605659][   T41] bridge_slave_0: left allmulticast mode
[  937.622886][   T41] bridge_slave_0: left promiscuous mode
[  937.639825][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.572549][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  939.668022][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  939.982851][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  940.096256][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  940.937193][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  941.016799][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  941.063552][   T41] bond0 (unregistering): Released all slaves
[  941.117132][T11393] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.117473][T11393] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.117786][T11393] bridge_slave_0: entered allmulticast mode
[  941.121432][T11393] bridge_slave_0: entered promiscuous mode
[  941.157678][T11290] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  941.207840][T11290] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  941.469106][T11393] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.469454][T11393] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.469773][T11393] bridge_slave_1: entered allmulticast mode
[  941.510845][T11393] bridge_slave_1: entered promiscuous mode
[  941.522018][T11290] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  941.709521][T11290] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  941.842695][T11290] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  941.897418][T11290] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  941.955610][T11290] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  942.091723][T11290] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  942.128770][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  942.316322][   T41] hsr_slave_0: left promiscuous mode
[  942.356813][   T41] hsr_slave_1: left promiscuous mode
[  942.360153][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  942.360198][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  942.397204][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  942.397228][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.462743][   T41] veth1_macvtap: left promiscuous mode
[  942.462860][   T41] veth0_macvtap: left promiscuous mode
[  942.463134][   T41] veth1_vlan: left promiscuous mode
[  942.463317][   T41] veth0_vlan: left promiscuous mode
[  943.337938][   T41] team0 (unregistering): Port device team_slave_1 removed
[  943.398258][   T41] team0 (unregistering): Port device team_slave_0 removed
[  943.628600][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  943.950136][T11393] team0: Port device team_slave_0 added
[  944.068431][T11605] loop0: detected capacity change from 0 to 512
[  944.072401][T11605] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  944.074009][T11393] team0: Port device team_slave_1 added
[  944.316939][T11202] veth0_macvtap: entered promiscuous mode
[  944.503800][T11611] loop1: detected capacity change from 0 to 256
[  944.518658][T11393] batman_adv: batadv0: Adding interface: batadv_slave_0
[  944.518677][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  944.518708][T11393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  944.598276][T11393] batman_adv: batadv0: Adding interface: batadv_slave_1
[  944.598290][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  944.598313][T11393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  944.606422][T11202] veth1_macvtap: entered promiscuous mode
[  944.818089][T11611] FAT-fs (loop1): data area starts beyond volume (32 > 0)
[  944.818118][T11611] FAT-fs (loop1): Can't find a valid FAT filesystem
[  944.888385][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  944.905665][ T5903] Flush: task=udevd[5903] dev=loop1 state=2
[  945.054256][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  945.216418][ T5903] Teardown: task=udevd[5903] dev=loop1 state=2
[  945.454802][T11393] hsr_slave_0: entered promiscuous mode
[  945.467049][T11393] hsr_slave_1: entered promiscuous mode
[  945.468799][T11393] debugfs: 'hsr0' already exists in 'hsr'
[  945.468826][T11393] Cannot create hsr debugfs directory
[  945.770570][T11632] loop0: detected capacity change from 0 to 1764
[  945.849973][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  946.148683][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  946.159532][T11202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  946.266614][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  946.307411][T11202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  946.634345][ T5849] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  946.661743][ T5849] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  946.688706][ T5849] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  946.779999][ T5849] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  948.355393][T11665] loop0: detected capacity change from 0 to 16
[  948.430459][T11665] erofs (device loop0): mounted with root inode @ nid 36.
[  948.497001][T11665] syz.0.1175: attempt to access beyond end of device
[  948.497001][T11665] loop0: rw=524288, sector=12296, nr_sectors = 8 limit=16
[  948.497487][T11665] syz.0.1175: attempt to access beyond end of device
[  948.497487][T11665] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  948.498280][T11665] syz.0.1175: attempt to access beyond end of device
[  948.498280][T11665] loop0: rw=0, sector=12296, nr_sectors = 8 limit=16
[  948.498984][T11665] erofs (device loop0): read error -5 @ 0 of nid 89
[  948.501305][   T38] kauditd_printk_skb: 13 callbacks suppressed
[  948.501328][   T38] audit: type=1800 audit(1784360538.711:530): pid=11665 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.1175" name="file3" dev="loop0" ino=89 res=0 errno=0
[  948.775968][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  948.866292][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  949.119431][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14
[  949.767294][T11290] 8021q: adding VLAN 0 to HW filter on device bond0
[  950.233239][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.233264][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  950.504319][T11678] syz.0.1178 (11678) used greatest stack depth: 18152 bytes left
[  950.604443][T11690] netlink: 'syz.0.1183': attribute type 4 has an invalid length.
[  950.822303][T11290] 8021q: adding VLAN 0 to HW filter on device team0
[  951.240910][T11692] loop0: detected capacity change from 0 to 16
[  951.274904][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  951.274927][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  951.328858][T11692] erofs (device loop0): mounted with root inode @ nid 36.
[  951.334973][   T38] audit: type=1800 audit(1784360541.541:531): pid=11692 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.0.1184" name="file1" dev="loop0" ino=86 res=0 errno=0
[  951.364948][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  951.370613][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  951.534826][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  951.617211][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  951.703215][T11698] loop0: detected capacity change from 0 to 1764
[  951.895560][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  951.976930][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  952.141315][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  952.147107][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  952.960575][T11711] loop7: detected capacity change from 0 to 512
[  953.286672][T11713] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.286953][T11713] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.541610][T11713] bridge0: port 2(bridge_slave_1) entered blocking state
[  953.542214][T11713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  953.689241][T11713] bridge0: port 1(bridge_slave_0) entered blocking state
[  953.689453][T11713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  953.750353][T11711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  953.750470][T11711] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  953.984941][T11713] team0: Port device bridge0 added
[  954.026187][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.378878][T11202] Flush: task=syz-executor[11202] dev=loop7 state=2
[  954.553307][T11202] Teardown: task=syz-executor[11202] dev=loop7 state=2
[  954.679236][T11729] loop7: detected capacity change from 0 to 256
[  955.769271][T11202] Flush: task=syz-executor[11202] dev=loop7 state=2
[  956.152853][T11202] Teardown: task=syz-executor[11202] dev=loop7 state=2
[  956.411788][T11751] loop7: detected capacity change from 0 to 256
[  956.514104][T11751] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  956.789176][   T38] audit: type=1800 audit(1784360546.961:532): pid=11756 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.7.1195" name="file1" dev="loop7" ino=1048620 res=0 errno=0
[  956.981755][T11393] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  957.153601][T11393] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  957.164873][T11393] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  957.531557][T11393] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  957.549896][T11393] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  957.558790][T11202] Flush: task=syz-executor[11202] dev=loop7 state=2
[  957.657920][T11202] Teardown: task=syz-executor[11202] dev=loop7 state=2
[  957.853535][T11393] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  957.884443][T11393] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  957.936703][T11393] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  958.200576][T11290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  958.819079][T11799] loop1: detected capacity change from 0 to 256
[  959.176439][   T38] audit: type=1800 audit(1784360549.331:533): pid=11799 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.1202" name="file1" dev="loop1" ino=1048621 res=0 errno=0
[  959.882985][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  959.969412][T11290] veth0_vlan: entered promiscuous mode
[  959.992741][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  960.063224][T11813] loop7: detected capacity change from 0 to 8192
[  960.609146][T11393] 8021q: adding VLAN 0 to HW filter on device bond0
[  960.629022][T11290] veth1_vlan: entered promiscuous mode
[  961.913461][T11393] 8021q: adding VLAN 0 to HW filter on device team0
[  962.090289][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.090509][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  962.212269][T11202] Flush: task=syz-executor[11202] dev=loop7 state=2
[  962.219838][T11290] veth0_macvtap: entered promiscuous mode
[  962.258705][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.262141][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[  962.300385][T11202] Teardown: task=syz-executor[11202] dev=loop7 state=2
[  962.329061][T11290] veth1_macvtap: entered promiscuous mode
[  963.567738][T11290] batman_adv: batadv0: Interface activated: batadv_slave_0
[  963.648906][T11834] syz.7.1212 (11834) used greatest stack depth: 16816 bytes left
[  963.808241][T11290] batman_adv: batadv0: Interface activated: batadv_slave_1
[  963.918761][ T1294] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.955742][ T3295] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.981866][ T3295] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  964.016555][ T3295] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.250826][T11852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  964.250886][T11847] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.259583][T11847] 8021q: adding VLAN 0 to HW filter on device team0
[  964.328977][T11847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  964.653810][T11847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  964.776844][T11847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  964.796576][T11847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  964.796604][T11847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  964.812501][T11861] loop0: detected capacity change from 0 to 164
[  964.852315][T11847] veth1_vlan: left promiscuous mode
[  964.855217][T11847] veth0_vlan: left promiscuous mode
[  964.887593][T11847] veth0_vlan: entered promiscuous mode
[  964.892347][T11847] veth1_vlan: entered promiscuous mode
[  964.928188][T11847] veth1_macvtap: left promiscuous mode
[  964.931015][T11847] veth0_macvtap: left promiscuous mode
[  964.933635][T11847] veth0_macvtap: entered promiscuous mode
[  964.953613][T11847] veth1_macvtap: entered promiscuous mode
[  964.974717][T11847] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  964.999964][T11847] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  965.002365][T11847] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  965.004620][T11847] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  965.052003][T11847] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  965.104746][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state
[  965.104987][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state
[  965.126044][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state
[  965.126209][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.234581][T11857] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  965.463032][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  965.538347][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  965.570925][   T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  965.640187][T11870] loop0: detected capacity change from 0 to 256
[  965.832754][   T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  965.851587][   T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  965.870032][ T1425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  966.269048][T11874] fuse: Bad value for 'fd'
[  966.998064][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  967.476671][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  968.081403][T11393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  968.822857][T11895] overlayfs: overlapping lowerdir path
[  968.965163][ T9773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  969.048305][ T9773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  969.077658][ T9773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  969.111010][ T9773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  969.130084][ T9773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  969.765315][   T38] audit: type=1326 audit(1784360559.971:534): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11913 comm="syz.7.1233" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efaede99 code=0x7ffc0000
[  969.765384][   T38] audit: type=1326 audit(1784360559.971:535): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11913 comm="syz.7.1233" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efaede99 code=0x7ffc0000
[  969.793738][   T38] audit: type=1326 audit(1784360560.001:536): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11913 comm="syz.7.1233" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f22efaede99 code=0x7ffc0000
[  969.794745][   T38] audit: type=1326 audit(1784360560.001:537): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11913 comm="syz.7.1233" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efaede99 code=0x7ffc0000
[  969.794901][   T38] audit: type=1326 audit(1784360560.001:538): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11913 comm="syz.7.1233" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22efaede99 code=0x7ffc0000
[  970.886110][T11926] netlink: 'syz.1.1235': attribute type 4 has an invalid length.
[  971.203218][ T5606] Bluetooth: hci4: command tx timeout
[  971.845035][T11941] loop7: detected capacity change from 0 to 164
[  972.122140][T11393] veth0_vlan: entered promiscuous mode
[  972.618520][T11202] Flush: task=syz-executor[11202] dev=loop7 state=2
[  972.778806][T11202] Teardown: task=syz-executor[11202] dev=loop7 state=2
[  973.264208][ T5606] Bluetooth: hci4: command tx timeout
[  973.338376][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.827184][T11393] veth1_vlan: entered promiscuous mode
[  974.592169][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.395649][ T5606] Bluetooth: hci4: command tx timeout
[  975.489214][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.831017][T11997] warning: `syz.0.1261' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  976.142880][T12004] loop1: detected capacity change from 0 to 1024
[  976.154122][T12004] hfsplus: unable to find HFS+ superblock
[  976.154915][T12004] Flush: task=syz.1.1263[12004] dev=loop1 state=2
[  976.421507][T12010] loop7: detected capacity change from 0 to 256
[  976.435165][T12010] exfat: Unknown parameter 'exfat'
[  976.439025][T12010] Flush: task=syz.7.1262[12010] dev=loop7 state=2
[  977.362833][T12010] Teardown: task=syz.7.1262[12010] dev=loop7 state=2
[  977.377729][T12004] Teardown: task=syz.1.1263[12004] dev=loop1 state=2
[  977.428537][ T5606] Bluetooth: hci4: command tx timeout
[  977.608067][T12006] loop0: detected capacity change from 0 to 512
[  977.644021][T12006] EXT4-fs (loop0): Test dummy encryption mode enabled
[  977.684678][T12006] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  977.778879][T12006] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  977.781708][T12006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  978.000967][T12021] loop7: detected capacity change from 0 to 16
[  978.022225][T12021] erofs (device loop7): mounted with root inode @ nid 36.
[  978.055644][T12021] syz.7.1267: attempt to access beyond end of device
[  978.055644][T12021] loop7: rw=524288, sector=12296, nr_sectors = 8 limit=16
[  978.082149][T12021] syz.7.1267: attempt to access beyond end of device
[  978.082149][T12021] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  978.082701][T12021] syz.7.1267: attempt to access beyond end of device
[  978.082701][T12021] loop7: rw=0, sector=12296, nr_sectors = 8 limit=16
[  978.082823][T12021] erofs (device loop7): read error -5 @ 0 of nid 89
[  978.134160][   T38] audit: type=1800 audit(1784360568.291:539): pid=12021 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.7.1267" name="file2" dev="loop7" ino=89 res=0 errno=0
[  978.184585][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  978.290357][ T5598] Flush: task=syz-executor[5598] dev=loop0 state=2
[  978.418729][T11202] Flush: task=syz-executor[11202] dev=loop7 state=2
[  978.446328][ T5598] Teardown: task=syz-executor[5598] dev=loop0 state=2
[  978.523594][T11202] Teardown: task=syz-executor[11202] dev=loop7 state=2
[  978.613292][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.820133][T11393] veth0_macvtap: entered promiscuous mode
[  978.945486][T12026] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  979.410587][T11393] veth1_macvtap: entered promiscuous mode
[  979.916677][T11902] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.917051][T11902] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.917369][T11902] bridge_slave_0: entered allmulticast mode
[  979.921125][T11902] bridge_slave_0: entered promiscuous mode
[  979.989583][T11902] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.989825][T11902] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.990061][T11902] bridge_slave_1: entered allmulticast mode
[  979.999524][T11902] bridge_slave_1: entered promiscuous mode
[  980.121815][T11902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  980.149565][T11902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  980.264465][T11902] team0: Port device team_slave_0 added
[  980.285325][T11902] team0: Port device team_slave_1 added
[  980.631656][T12048] loop1: detected capacity change from 0 to 512
[  980.643246][T12048] EXT4-fs: Ignoring removed bh option
[  980.643271][T12048] EXT4-fs: Ignoring removed oldalloc option
[  980.739364][T12048] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  980.739391][T12048] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[  981.066736][ T5903] Flush: task=udevd[5903] dev=loop1 state=2
[  981.483417][ T9773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  981.557012][ T9773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  981.759328][ T9773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  981.797078][ T9773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  981.853508][ T9773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  982.260534][ T5903] Teardown: task=udevd[5903] dev=loop1 state=2
[  982.629341][T12063] loop1: detected capacity change from 0 to 512
[  982.679253][T12063] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1278: iget: bad i_size value: 38620345925642
[  982.679296][T12063] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  982.681202][T12063] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1278: couldn't read orphan inode 15 (err -117)
[  982.681295][T12063] loop1: lost filesystem error report for type 5 error -117
[  982.717561][T12063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  983.204912][ T1294] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap
[  983.253588][T11902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  983.253606][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  983.253633][T11902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  983.255794][ T1294] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 556 with error 28
[  983.255829][ T1294] EXT4-fs (loop1): This should not happen!! Data will be lost
[  983.255829][ T1294] 
[  983.290735][ T1294] EXT4-fs (loop1): Total free blocks count 0
[  983.290781][ T1294] EXT4-fs (loop1): Free/Dirty block details
[  983.291050][ T1294] EXT4-fs (loop1): free_blocks=0
[  983.291206][ T1294] EXT4-fs (loop1): dirty_blocks=556
[  983.291247][ T1294] EXT4-fs (loop1): Block reservation details
[  983.291281][ T1294] EXT4-fs (loop1): i_reserved_data_blocks=556
[  983.372504][T11902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  983.372523][T11902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  983.372555][T11902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  983.700482][ T5597] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  983.748197][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  983.839804][ T5597] Flush: task=syz-executor[5597] dev=loop1 state=2
[  983.937217][ T5597] Teardown: task=syz-executor[5597] dev=loop1 state=2
[  984.141449][ T9773] Bluetooth: hci0: command tx timeout
[  984.380616][T11902] hsr_slave_0: entered promiscuous mode
[  984.398482][T11902] hsr_slave_1: entered promiscuous mode
[  984.414522][T11902] debugfs: 'hsr0' already exists in 'hsr'
[  984.414553][T11902] Cannot create hsr debugfs directory
[  984.880726][   T12] bridge_slave_1: left allmulticast mode
[  984.880765][   T12] bridge_slave_1: left promiscuous mode
[  984.881105][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  984.955645][T12097] loop1: detected capacity change from 0 to 512
[  984.975375][T12097] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  985.006425][T12097] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1285: invalid indirect mapped block 2683928664 (level 1)
[  985.006467][T12097] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  985.018675][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  985.018700][    C0] EXT4-fs (loop1): initial error at time 1784360575: ext4_free_branches:1023: inode 13
[  985.018727][    C0] EXT4-fs (loop1): last error at time 1784360575: ext4_free_branches:1023: inode 13
[  985.104188][T12097] EXT4-fs (loop1): 1 truncate cleaned up
[  985.118546][   T12] bridge_slave_0: left allmulticast mode
[  985.118586][   T12] bridge_slave_0: left promiscuous mode
[  985.118876][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.121607][T12097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  985.179796][T12097] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  985.275460][T12097] Flush: task=syz.1.1285[12097] dev=loop1 state=2
[  985.366844][T12097] Teardown: task=syz.1.1285[12097] dev=loop1 state=2
[  986.216043][ T9773] Bluetooth: hci0: command tx timeout
[  986.356808][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  986.416911][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  986.442161][   T12] bond0 (unregistering): Released all slaves
[  987.120212][T12108] loop0: detected capacity change from 0 to 1024
[  987.565692][T12108] hfsplus: failed to load extents file
[  987.865029][ T5903] Flush: task=udevd[5903] dev=loop0 state=2
[  988.059950][ T5903] Teardown: task=udevd[5903] dev=loop0 state=2
[  988.289849][ T5715] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  988.300772][ T9773] Bluetooth: hci0: command tx timeout
[  988.634354][ T5715] usb 1-1: Using ep0 maxpacket: 32
[  988.657684][ T5715] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  988.657719][ T5715] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  988.663048][ T5715] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  988.663153][ T5715] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  988.663220][ T5715] usb 1-1: Product: syz
[  988.663273][ T5715] usb 1-1: Manufacturer: syz
[  988.682013][ T5715] hub 1-1:4.0: USB hub found
[  988.773044][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  988.895481][ T5715] hub 1-1:4.0: 2 ports detected
[  988.941820][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  988.974938][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  989.015500][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  989.031891][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  989.388796][ T5715] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  989.388904][ T5715] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  989.459406][ T5715] usb 1-1: USB disconnect, device number 49
[  990.377369][ T9773] Bluetooth: hci0: command tx timeout
[  990.793323][T12133] ISOFS: Unable to identify CD-ROM format.
[  991.207077][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[  991.513792][ T9773] Bluetooth: hci3: command tx timeout
[  991.910610][   T12] hsr_slave_0: left promiscuous mode
[  991.979130][   T12] hsr_slave_1: left promiscuous mode
[  991.980847][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  991.980876][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  992.020623][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  992.020645][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  992.077894][   T12] veth1_macvtap: left promiscuous mode
[  992.078009][   T12] veth0_macvtap: left promiscuous mode
[  992.078285][   T12] veth1_vlan: left promiscuous mode
[  992.078440][   T12] veth0_vlan: left promiscuous mode
[  992.909004][   T12] team0 (unregistering): Port device team_slave_1 removed
[  992.957421][   T12] team0 (unregistering): Port device team_slave_0 removed
[  993.192383][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  993.193035][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  993.498402][T12163] loop1: detected capacity change from 0 to 512
[  993.499654][T12163] EXT4-fs: inline encryption not supported
[  993.499741][T12163] ext4: Unknown parameter 'nouser_xattr'
[  993.560021][T12165] loop0: detected capacity change from 0 to 128
[  993.575977][ T9773] Bluetooth: hci3: command tx timeout
[  993.657054][ T5903] Flush: task=udevd[5903] dev=loop1 state=2
[  993.729395][T12165] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  993.738223][T12165] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  993.920824][ T5903] Teardown: task=udevd[5903] dev=loop1 state=2
[  994.513429][T12173] binder: 12172:12173 ioctl c0306201 200000000080 returned -14
[  994.539228][T12173] binder: 12172:12173 ioctl c0306201 2000000003c0 returned -14
[  995.250384][T12169] 
[  995.250399][T12169] ======================================================
[  995.250435][T12169] WARNING: possible circular locking dependency detected
[  995.250514][T12169] syzkaller #0 Not tainted
[  995.250528][T12169] ------------------------------------------------------
[  995.250570][T12169] syz.0.1299/12169 is trying to acquire lock:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  995.250607][T12169] ffff8880370f8800 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0
[  995.250789][T12169] 
[  995.250789][T12169] but task is already holding lock:
[  995.250799][T12169] ffff88806ae98cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0
[  995.250877][T12169] 
[  995.250877][T12169] which lock already depends on the new lock.
[  995.250877][T12169] 
[  995.250886][T12169] 
[  995.250886][T12169] the existing dependency chain (in reverse order) is:
[  995.250895][T12169] 
[  995.250895][T12169] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  995.250993][T12169]        percpu_down_read_internal+0x48/0x1d0
[  995.251020][T12169]        ext4_writepages+0x205/0x3b0
[  995.251045][T12169]        do_writepages+0x338/0x560
[  995.251111][T12169]        __writeback_single_inode+0x12e/0xf90
[  995.251139][T12169]        writeback_single_inode+0x4dd/0xe10
[  995.251161][T12169]        write_inode_now+0x1c2/0x290
[  995.251182][T12169]        iput+0x98b/0xf00
[  995.251206][T12169]        ext4_xattr_block_set+0x22e4/0x2a80
[  995.251257][T12169]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[  995.251282][T12169]        __ext4_expand_extra_isize+0x30d/0x400
[  995.251305][T12169]        __ext4_mark_inode_dirty+0x455/0x700
[  995.251334][T12169]        ext4_evict_inode+0x976/0x10c0
[  995.251363][T12169]        evict+0x624/0xb50
[  995.251396][T12169]        ext4_orphan_cleanup+0xc7a/0x14c0
[  995.251428][T12169]        ext4_fill_super+0x5cc5/0x65d0
[  995.251478][T12169]        get_tree_bdev_flags+0x430/0x4f0
[  995.251509][T12169]        vfs_get_tree+0x92/0x2a0
[  995.251538][T12169]        do_new_mount+0x319/0xdc0
[  995.251562][T12169]        __se_sys_mount+0x31d/0x420
[  995.251587][T12169]        do_syscall_64+0x17b/0x530
[  995.251619][T12169]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.251642][T12169] 
[  995.251642][T12169] -> #0 (sb_internal){.+.+}-{0:0}:
[  995.251674][T12169]        __lock_acquire+0x15ff/0x2e40
[  995.251699][T12169]        lock_acquire+0x115/0x350
[  995.251722][T12169]        percpu_down_read_internal+0x48/0x1d0
[  995.251746][T12169]        ext4_evict_inode+0x426/0x10c0
[  995.251774][T12169]        evict+0x624/0xb50
[  995.251805][T12169]        ext4_ext_migrate+0xddf/0x10e0
[  995.251829][T12169]        ext4_ioctl+0x234f/0x4b80
[  995.251856][T12169]        __se_sys_ioctl+0xff/0x170
[  995.251887][T12169]        do_syscall_64+0x17b/0x530
[  995.251919][T12169]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.251940][T12169] 
[  995.251940][T12169] other info that might help us debug this:
[  995.251940][T12169] 
[  995.251949][T12169]  Possible unsafe locking scenario:
[  995.251949][T12169] 
[  995.251965][T12169]        CPU0                    CPU1
[  995.251973][T12169]        ----                    ----
[  995.251987][T12169]   lock(&sbi->s_writepages_rwsem);
[  995.252005][T12169]                                lock(sb_internal);
[  995.252022][T12169]                                lock(&sbi->s_writepages_rwsem);
[  995.252040][T12169]   rlock(sb_internal);
[  995.252064][T12169] 
[  995.252064][T12169]  *** DEADLOCK ***
[  995.252064][T12169] 
[  995.252071][T12169] locks held by syz.0.1299/12169: 3, last CPU#1:
[  995.252125][T12169]  #0: ffff8880370f8510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210
[  995.252197][T12169]  #1: ffff88804df827b0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x2347/0x4b80
[  995.252264][T12169]  #2: ffff88806ae98cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0
[  995.252328][T12169] 
[  995.252328][T12169] stack backtrace:
[  995.252342][T12169] CPU: 1 UID: 0 PID: 12169 Comm: syz.0.1299 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  995.252369][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  995.252384][T12169] Call Trace:
[  995.252394][T12169]  <TASK>
[  995.252404][T12169]  dump_stack_lvl+0xe8/0x150
[  995.252439][T12169]  print_circular_bug+0x2e2/0x300
[  995.252473][T12169]  check_noncircular+0x12f/0x150
[  995.252509][T12169]  __lock_acquire+0x15ff/0x2e40
[  995.252539][T12169]  ? __lock_acquire+0x6df/0x2e40
[  995.252566][T12169]  ? __asan_memset+0x22/0x50
[  995.252600][T12169]  lock_acquire+0x115/0x350
[  995.252622][T12169]  ? ext4_evict_inode+0x426/0x10c0
[  995.252660][T12169]  percpu_down_read_internal+0x48/0x1d0
[  995.252684][T12169]  ? ext4_evict_inode+0x426/0x10c0
[  995.252714][T12169]  ext4_evict_inode+0x426/0x10c0
[  995.252745][T12169]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  995.252776][T12169]  ? __pfx_ext4_evict_inode+0x10/0x10
[  995.252806][T12169]  ? rt_spin_unlock+0x157/0x200
[  995.252833][T12169]  ? rt_spin_unlock+0x163/0x200
[  995.252859][T12169]  ? __pfx_ext4_evict_inode+0x10/0x10
[  995.252888][T12169]  evict+0x624/0xb50
[  995.252926][T12169]  ? __pfx_evict+0x10/0x10
[  995.252960][T12169]  ? rt_spin_unlock+0x163/0x200
[  995.252988][T12169]  ? iput+0xb84/0xf00
[  995.253016][T12169]  ext4_ext_migrate+0xddf/0x10e0
[  995.253048][T12169]  ? __pfx_ext4_ext_migrate+0x10/0x10
[  995.253085][T12169]  ? rwbase_write_lock+0x550/0x720
[  995.253112][T12169]  ext4_ioctl+0x234f/0x4b80
[  995.253145][T12169]  ? __pfx_ext4_ioctl+0x10/0x10
[  995.253175][T12169]  ? is_bpf_text_address+0x292/0x2b0
[  995.253206][T12169]  ? is_bpf_text_address+0x26/0x2b0
[  995.253238][T12169]  ? kernel_text_address+0xa5/0xe0
[  995.253264][T12169]  ? __kernel_text_address+0xd/0x30
[  995.253287][T12169]  ? unwind_get_return_address+0x4d/0x90
[  995.253313][T12169]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  995.253338][T12169]  ? arch_stack_walk+0xfb/0x150
[  995.253369][T12169]  ? stack_trace_save+0xa9/0x100
[  995.253392][T12169]  ? __pfx_stack_trace_save+0x10/0x10
[  995.253413][T12169]  ? kasan_save_track+0x4f/0x80
[  995.253437][T12169]  ? stack_depot_save_flags+0x33/0x800
[  995.253470][T12169]  ? __lock_acquire+0x6df/0x2e40
[  995.253497][T12169]  ? kasan_save_track+0x4f/0x80
[  995.253517][T12169]  ? kasan_save_track+0x3e/0x80
[  995.253538][T12169]  ? kasan_save_free_info+0x40/0x50
[  995.253569][T12169]  ? __kasan_slab_free+0x5c/0x80
[  995.253592][T12169]  ? kfree+0x1c5/0x6c0
[  995.253624][T12169]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  995.253658][T12169]  ? security_file_ioctl+0xb9/0x260
[  995.253688][T12169]  ? __se_sys_ioctl+0x47/0x170
[  995.253720][T12169]  ? do_syscall_64+0x17b/0x530
[  995.253752][T12169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.253782][T12169]  ? file_ioctl+0x259/0x7e0
[  995.253811][T12169]  ? __pfx_file_ioctl+0x10/0x10
[  995.253844][T12169]  ? kasan_quarantine_put+0xbb/0x1f0
[  995.253877][T12169]  ? tomoyo_path_number_perm+0x219/0x5f0
[  995.253907][T12169]  ? do_vfs_ioctl+0x1184/0x1550
[  995.253936][T12169]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  995.253971][T12169]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  995.254009][T12169]  ? __fget_files+0x2a/0x420
[  995.254032][T12169]  ? __fget_files+0x3a8/0x420
[  995.254061][T12169]  ? __fget_files+0x2a/0x420
[  995.254088][T12169]  ? bpf_lsm_file_ioctl+0x9/0x20
[  995.254187][T12169]  ? __pfx_ext4_ioctl+0x10/0x10
[  995.254211][T12169]  __se_sys_ioctl+0xff/0x170
[  995.254240][T12169]  do_syscall_64+0x17b/0x530
[  995.254268][T12169]  ? irqentry_exit+0x10f/0x8f0
[  995.254294][T12169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.254312][T12169]  ? clear_bhb_loop+0x40/0x90
[  995.254332][T12169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.254351][T12169] RIP: 0033:0x7f57fa91de99
[  995.254368][T12169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  995.254385][T12169] RSP: 002b:00007f57f8b55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  995.254404][T12169] RAX: ffffffffffffffda RBX: 00007f57faba6090 RCX: 00007f57fa91de99
[  995.254419][T12169] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000005
[  995.254431][T12169] RBP: 00007f57fa9b3eaf R08: 0000000000000000 R09: 0000000000000000
[  995.254443][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  995.254454][T12169] R13: 00007f57faba6128 R14: 00007f57faba6090 R15: 00007fff28c67958
[  995.254476][T12169]  </TASK>
[  995.655941][ T9773] Bluetooth: hci3: command tx timeout
[  996.323714][ T9196] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  997.736150][ T9773] Bluetooth: hci3: command tx timeout
[  999.396061][   T12] bridge_slave_1: left allmulticast mode
[  999.396091][   T12] bridge_slave_1: left promiscuous mode
[  999.396294][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.556707][   T12] bridge_slave_0: left allmulticast mode
[  999.556738][   T12] bridge_slave_0: left promiscuous mode
[  999.556926][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1000.196587][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1000.276525][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1000.298847][   T12] bond0 (unregistering): Released all slaves
[ 1000.338233][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1000.796021][   T12] hsr_slave_0: left promiscuous mode
[ 1000.816065][   T12] hsr_slave_1: left promiscuous mode
[ 1000.817684][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1000.857797][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1000.916354][   T12] veth1_macvtap: left promiscuous mode
[ 1000.916403][   T12] veth0_macvtap: left promiscuous mode
[ 1000.916522][   T12] veth1_vlan: left promiscuous mode
[ 1000.916600][   T12] veth0_vlan: left promiscuous mode
[ 1001.356412][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1001.396878][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1001.521148][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1001.819318][ T5254] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1002.118734][ T5254] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1002.688352][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.957276][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.208051][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.447168][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.836088][   T12] bridge_slave_1: left allmulticast mode
[ 1003.836118][   T12] bridge_slave_1: left promiscuous mode
[ 1003.836333][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1003.997033][   T12] bridge_slave_0: left allmulticast mode
[ 1003.997064][   T12] bridge_slave_0: left promiscuous mode
[ 1003.997276][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1004.236212][   T12] bridge_slave_1: left allmulticast mode
[ 1004.236235][   T12] bridge_slave_1: left promiscuous mode
[ 1004.236387][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1004.336631][   T12] bridge_slave_0: left allmulticast mode
[ 1004.336654][   T12] bridge_slave_0: left promiscuous mode
[ 1004.336799][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1004.786581][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1004.866545][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1004.947132][   T12] bond0 (unregistering): Released all slaves
[ 1005.119210][   T12] bond0 (unregistering): Released all slaves