last executing test programs:

4m28.653513692s ago: executing program 32 (id=37):
r0 = userfaultfd(0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)
syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000900))

4m26.78838383s ago: executing program 4 (id=54):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)

4m26.58232884s ago: executing program 4 (id=56):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x11c)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r1, 0x1c5ed000)
mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,sq=0x000000000000', @ANYBLOB])

4m25.270103263s ago: executing program 4 (id=65):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000)

4m25.076597942s ago: executing program 4 (id=67):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x0, 0x0)

4m24.909153159s ago: executing program 0 (id=69):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000040))
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
close(0x3)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0xffff)

4m24.854020362s ago: executing program 4 (id=70):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

4m24.738591828s ago: executing program 0 (id=71):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
listen(r0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c)

4m24.622083153s ago: executing program 0 (id=72):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000200)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78)
r2 = fanotify_init(0x200, 0x1000)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r3 = dup(r1)
fanotify_mark(r2, 0x1, 0x40000061, r3, 0x0)
finit_module(r3, 0x0, 0x0)

4m24.518825138s ago: executing program 0 (id=73):
mkdir(0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2b0, &(0x7f0000000600)="$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")
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1, 0x4e, 0x1)

4m24.331984347s ago: executing program 4 (id=75):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010163, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e01", @ANYRESHEX], 0x0)
syz_usb_ep_write(r1, 0xb, 0x3d, &(0x7f0000000040)="d8d4741f7b5f9f6781583e1fbede40a3a29574037ae5fba7bbc9208d3c560b433cf5cf49b31ee92275849fbc67de3d0dd1f0fb7bfad4dd064eaf1a5ed1")

4m24.141355266s ago: executing program 33 (id=75):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010163, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e01", @ANYRESHEX], 0x0)
syz_usb_ep_write(r1, 0xb, 0x3d, &(0x7f0000000040)="d8d4741f7b5f9f6781583e1fbede40a3a29574037ae5fba7bbc9208d3c560b433cf5cf49b31ee92275849fbc67de3d0dd1f0fb7bfad4dd064eaf1a5ed1")

4m24.020359221s ago: executing program 0 (id=78):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), &(0x7f0000018000)})
write(r1, &(0x7f0000018000)="000001", 0x3)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1})
write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10)

4m21.392057686s ago: executing program 0 (id=82):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x87, 0x8, 0x1, 0x7fffffff, {{0x5, 0x4, 0x0, 0x37, 0x14, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @multicast2}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

4m21.301596801s ago: executing program 34 (id=82):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x87, 0x8, 0x1, 0x7fffffff, {{0x5, 0x4, 0x0, 0x37, 0x14, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @multicast2}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

3m16.742372912s ago: executing program 5 (id=565):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x81, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x7, 0x58, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty=0x400300, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x80003, {{0x9, 0x1, 0xde, 0x1, 0x1, 0x1, 0x2, 0x4}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0xc, 0x2, 0x42, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x2, {0x101, 0x200, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}, 0x66)
ftruncate(0xffffffffffffffff, 0x200004)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x20c})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x8, 0x2, 0x1, 0x0, @irqchip={0x85, 0x2ff317ca}}]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m16.14982193s ago: executing program 5 (id=558):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000060000006d05000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

3m16.016390786s ago: executing program 5 (id=561):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
chdir(&(0x7f00000000c0)='./sys\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104)
getdents(r2, &(0x7f0000000280)=""/51, 0x33)
getdents(r2, 0xfffffffffffffffd, 0x58)

3m15.829302585s ago: executing program 5 (id=566):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
unshare(0x22020600)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)

3m15.656309353s ago: executing program 5 (id=567):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
waitid(0x0, r0, 0x0, 0x8, 0xfffffffffffffffd)
waitid(0x0, r0, 0x0, 0x8, 0x0)

3m15.536956069s ago: executing program 5 (id=568):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)

3m15.180873325s ago: executing program 35 (id=568):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)

2m43.616280613s ago: executing program 7 (id=807):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1)
fsetxattr(r0, &(0x7f0000000180)=@known='user.incfs.id\x00', 0x0, 0x0, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x400)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0xfffffeb1)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

2m41.935016432s ago: executing program 7 (id=816):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)

2m41.228076675s ago: executing program 7 (id=823):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000010000008009469200db3fe555d2e2320bd1000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000001e40), 0x0, 0x100, &(0x7f0000002040)={0x0, 0x989680})
sendmmsg$inet(r1, &(0x7f0000001540), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x4000, &(0x7f0000000240)={0x2f, 0xc, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000ffffff8d00f03f0100000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m41.157844039s ago: executing program 7 (id=824):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4010, 0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f00000008c0)=ANY=[], 0x1, 0x2da, &(0x7f0000000bc0)="$eJzs3U9PE1sYx/EfbS9Q/rX3ci/3wo16ohvdTKC+goZAYmyiQWr8k5gMMtWmpSWdBlNjhJ1b174E4tKdifEN4MK4NXHhjo1LFsYx0xZa6DQBAgzi97M5Jz3nmTzDcwbOJMx0887LpULOtXJ2VZEeo5g0qC0pqYiiauhptpF6v1ft1nRlNPPl3K27966nM5mZOWNm0/NXU8aYkQvvnjx7ffF9dfD2m5G3fdpIPtj8lvq6MbYxvvlj/nHeNXnXlMpVY5uFcrlqLxQds5h3C5YxN4uO7TomX3Kdyq7xXLG8vFwzdmlxeGC54riusUs1U3Bqplo21UrN2I/sfMlYlmWGBwRff/ehyEnmgbBUKml7WtJEx0h2PZSEAABAqAL2/2uH2f/HpPwnSd33/z72/6dLdn1uzk6HnQWOUKLzI3//fz/wdo/9PwAAAAAAAAAAAAAAAAAAAAAAv4Itz0t4npfw2+3nA3olec3P45IGJA1K8SFJw5JGmo8ZJCX9KekvSaOS/pb0j6QxSf9K+k/SeNuxQj5VBGivv9/+0ax/tLP+ov5nT7f677n+6y+RiFL/M2ef9ef6P6PaXtzTLy29WMmuZBttYzydU15FOZpUQt/rtWxq9GevZWYmTV1S/y+tNuNXV7LR3fFTSvgLJih+qhFvdsf31dfdTnxKCX+BBcWnAuP7dflSW7ylhD4+VFlFLdbXZCv++ZQx0zcye+In6vP26j3Z8hw7y+wIqJ8XtVoTkv713RpvxO9jfXiTgfWJaSIW9tnDrT0t2MWiU/n9OjUd8QH9v3DHnfzQoaL8O7vwf+AH63z+INlj+5h8Ph52qt07r05HGofphP2bCSehVfSwMwEAAAAAAAAAAAAAAAAAHMTR/M/g9jeFBc6Jh3yKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0+BkAAP//arVOzQ==")
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x400454cc, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xf, r1, 0xdf65, 0x0)

2m40.164166026s ago: executing program 7 (id=830):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

2m39.640383951s ago: executing program 7 (id=838):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRESHEX], 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
socket(0x2, 0x2, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000014, 0x8031, 0xffffffffffffffff, 0x94173000)

2m39.502152677s ago: executing program 36 (id=838):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRESHEX], 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
socket(0x2, 0x2, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000014, 0x8031, 0xffffffffffffffff, 0x94173000)

2m9.26609721s ago: executing program 6 (id=1078):
recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xe52})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m9.019939962s ago: executing program 6 (id=1081):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_emit_ethernet(0x4e, &(0x7f0000000880)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "ef5b437f60a69553e70015869873f94b"}]}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000140)='blk', 0x3)

2m8.708060608s ago: executing program 6 (id=1084):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
syz_read_part_table(0x62d, &(0x7f0000000640)="$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")
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
io_uring_setup(0x1b7b, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x183341, 0x0)
pwritev2(r1, &(0x7f0000000340)=[{&(0x7f0000000400)="9d", 0x1}], 0x1, 0x5e, 0x8, 0x3)

2m8.084032397s ago: executing program 6 (id=1087):
select(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
truncate(&(0x7f0000000080)='./file2\x00', 0x6000)

2m7.184378729s ago: executing program 6 (id=1093):
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
unshare(0x60600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)

2m6.684000203s ago: executing program 6 (id=1097):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0})
ioctl(r0, 0x8b18, &(0x7f0000000040))

2m6.587553318s ago: executing program 37 (id=1097):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0})
ioctl(r0, 0x8b18, &(0x7f0000000040))

6.94248495s ago: executing program 3 (id=2142):
unshare(0x20000000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x1}, 0x58)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
ptrace(0x10, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_open_dev$evdev(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269be, 0x48031, 0xffffffffffffffff, 0xffffe000)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)

6.443512644s ago: executing program 3 (id=2151):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000005e00)=ANY=[@ANYBLOB="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"/452], 0x1, 0x5516, &(0x7f00000006c0)="$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")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
r0 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
lseek(r0, 0x7, 0x1)
getdents64(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
fstat(r1, &(0x7f0000000100))

5.019697302s ago: executing program 8 (id=2154):
chdir(0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000520000/0x1000)=nil, 0x1000)

2.923939141s ago: executing program 3 (id=2165):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = memfd_secret(0x0)
ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000340)={"43aba314e7eb98daa89f980339a1cca01aa865f8ea4bff4604659adba847", 0x7ff, 0x8, 0x5, [0x2b, 0xab, 0x5, 0xfffffffd, 0x3, 0xc98, 0x800, 0xce, 0xb, 0x8, 0x8, 0x0, 0xa0, 0xffffffff, 0x58d6457d, 0x0, 0x4, 0x9]})
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xd000, 0xffff1000, 0xf000, 0x5, 0x7f, 0x9, 0x81, 0xff, 0x0, 0x80, 0x0, 0xb}, {0xd000, 0x40000, 0x5, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x44, 0xfa, 0x5}, {0xdddd1000, 0x4000, 0xd, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x1, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xb, 0xf, 0x8, 0x40, 0x2, 0x0, 0xbd, 0x29, 0x19, 0x9}, {0xeeeea000, 0x41000, 0xc, 0x9, 0x5, 0x2, 0x7, 0xf1, 0xfe, 0x6e, 0x4, 0x2}, {0x25000, 0xdddd1000, 0x8, 0x3, 0xad, 0x2, 0x4, 0x5, 0xf7, 0xe, 0x6, 0xff}, {0x54000, 0x60000, 0xf, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x7f}, {0xd000, 0x5}, {0x80a0000, 0xff81}, 0x80000007, 0x0, 0x6000, 0x2021, 0x6, 0xf900, 0x8000900, 0x0, [0x0, 0x4, 0x3, 0x3]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$vsock(0xffffff9c, &(0x7f0000000000), 0x40, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)

2.836339645s ago: executing program 8 (id=2167):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004005d}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0xa, 0xb, 0x5, 0x5, 0x1, 0xd, 0x1, 0x6, 0xa, 0x4, 0xb, 0xa, 0x10, 0x6, 0x2], 0x9, [0x78ec, 0x400, 0x3c09, 0x8733, 0x4, 0x4054, 0x4, 0x24, 0x1, 0xbe7, 0x9, 0x8, 0x1, 0x6, 0x1, 0xfffa], [0x1, 0x3, 0x8000, 0x6, 0x7, 0x4692, 0x7, 0x7ffb, 0x2, 0x6, 0x9a, 0x3, 0x8, 0x7f, 0x6, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080)

2.603170226s ago: executing program 8 (id=2168):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
r0 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
close(r0)

2.371738077s ago: executing program 2 (id=2170):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

2.334179299s ago: executing program 2 (id=2172):
syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x2859052, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file1\x00', 0x0, 0x1adc11, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffffd]}, 0x8, 0x800)
ppoll(&(0x7f0000000000)=[{r0, 0xd}], 0x1, 0x0, 0x0, 0x0)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=<r2=>0x0)
timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x48d43, 0x0)

1.964079297s ago: executing program 3 (id=2173):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0)

1.961372837s ago: executing program 1 (id=2174):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000040))
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1)

1.867865721s ago: executing program 1 (id=2175):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0)

1.783259665s ago: executing program 9 (id=2176):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600))
r2 = dup(r1)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x222200, 0x0)
r4 = fcntl$dupfd(r0, 0x0, r3)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000})
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x0, r2})

1.707884579s ago: executing program 9 (id=2177):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x14, 0x1e, 0x21, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc4f8400f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000, {}, 0x1}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.707429579s ago: executing program 1 (id=2178):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x4040040)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

1.033523691s ago: executing program 3 (id=2179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)

1.025575941s ago: executing program 8 (id=2180):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000e8780)={0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000f0b80))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

1.025026261s ago: executing program 2 (id=2181):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800)

887.817498ms ago: executing program 9 (id=2182):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="47c30f01cf48b83f1c5e09000000000f23d80f21f835000000700f23f866ba610066ed2e3e0fc72a440f060f01c52e65440f794450000ff1d148b800000000008000000f23d00f21f835200000090f23f8", 0x51}], 0x1, 0xe4, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="e7736a", 0x3c}], 0x1)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaadf0000400000080045000028000000000006"], 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

882.071618ms ago: executing program 1 (id=2184):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0xfff9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x1001, 0x1}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1040}], 0x0, 0x0, 0x0})

858.199909ms ago: executing program 2 (id=2185):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

478.120957ms ago: executing program 1 (id=2186):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000080))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

476.811827ms ago: executing program 8 (id=2187):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xffff485d}, @mss={0x2, 0x1}, @window={0x3, 0x6, 0xff81}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0x2}, @mss={0x2, 0xffff}], 0x8)
sendto$inet(r0, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000380)="20575acaa7e9cda209a50900c0a48e93eaae3f622f6fcaf68502e536d9bd040b6e49a49db1def24e96ab925988d5b02a41ef51b3fe13f7d642afc05c32e6f6df96242f8a53efd2f6f58ef92ae39c0f37b8d2f133e5b4865216aedad5770e31bebe956e47e184e3c8da3d093f3c2adcfcbdb50c75f68f88481e187b648ae02eca5540d2fcc48f833dc5ee36b6916b62", 0x13, 0x1, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0)

444.468118ms ago: executing program 9 (id=2188):
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x401, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x8000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000cc0)="e1", 0x1}], 0x1)
umount2(&(0x7f0000000380)='./file0\x00', 0x1)

139.343223ms ago: executing program 2 (id=2189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000440)=""/235, &(0x7f0000000540)=0xeb)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x50, r2, 0x2b8ee6cf79dab3f, 0x1, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x24001844)
gettid()
timer_create(0x2, 0x0, &(0x7f0000000000)=<r3=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040), 0x0)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000000c0))

47.915357ms ago: executing program 3 (id=2190):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa8d2baefc6c3c796}]}}]}, 0x6c}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x30000000)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

45.925467ms ago: executing program 9 (id=2191):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0)
dup2(r5, r5)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@allocspi={0x3ac, 0x16, 0x1, 0x70bd2a, 0x25dfdbff, {{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e24, 0xe, 0xa, 0xa0, 0x20, 0x26, 0x0, r4}, {@in6=@private0, 0x4d2, 0x33}, @in6=@local, {0x6, 0x6bb, 0x8, 0x2, 0x8, 0x7ff, 0x1, 0x7}, {0xff, 0x5, 0x6, 0x9}, {0x80000000, 0x9, 0x7}, 0x70bd2b, 0x3504, 0xa, 0x1, 0x8, 0x15}, 0x5, 0x4}, [@proto={0x5, 0x19, 0x2b}, @migrate={0x1cc, 0x11, [{@in=@empty, @in6=@empty, @in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c, 0x4, 0x0, 0x3503, 0xa, 0xa}, {@in=@multicast1, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x0, 0x0, 0x3505, 0x0, 0xa}, {@in6=@mcast1, @in6=@private1, @in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@remote, 0x18, 0x1, 0x0, 0x3504, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x32, 0x3, 0x0, 0x3507, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, @in=@rand_addr=0x64010100, 0x2b, 0x1, 0x0, 0x3502, 0xa, 0x2}]}, @lastused={0xc, 0xf, 0x5}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e22, @in=@broadcast}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xcdff}, @srcaddr={0x14, 0xd, @in=@empty}, @sec_ctx={0xa0, 0x8, {0x9c, 0x8, 0x0, 0x0, 0x94, "5c90f3e651fe2c46aa9e6baf7aa04851059be1cecf76cfbf912bd4df67b00250e86f318dd0e82f6a0e565b048c5b9cd1b1c382e756ae6396efc7ddaa37ec5370f564e604cde6c868bbed03acd4e05d54c39f9088bbf4d258d76b8120421f3913eae4826f6a4aa1a6d3f89b129071021f5ad0551beb76c551cd09a98b1a31347b20b2eb291f7a80e9aae6acd712944b42b4456e2d"}}]}, 0x3ac}}, 0x44050)
sendmsg$inet_sctp(r0, &(0x7f0000000b80)={&(0x7f0000000800)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000780)='s', 0x1}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000000000007000000ac1e01011000000084000000070000007f"], 0x20, 0x40084}, 0xc4)
dup(r0)

15.811429ms ago: executing program 2 (id=2192):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0)

14.416739ms ago: executing program 9 (id=2202):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x9, @empty}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000801)
syz_open_procfs(0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfc}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x47b2}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xd04a}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008801}, 0x20040000)
socket$nl_rdma(0x10, 0x3, 0x14)
shutdown(r0, 0x1)

13.349139ms ago: executing program 1 (id=2193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, 0x0, 0x4002)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4014)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x1a, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x80, 0x0, 0x9, 0xd9dd, 0x0, 0x3fffffff, 0x6}, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

0s ago: executing program 8 (id=2194):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pselect6(0x40, &(0x7f00000000c0)={0x1, 0x8, 0xffff, 0xc, 0x1, 0x8, 0xfffffffffffffff2, 0x7fffffffffffffff}, &(0x7f0000000100)={0xfb5, 0x1, 0xfffffffffffffffe, 0x0, 0x1, 0x5, 0x7, 0xf}, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 T7757] tipc: Started in network mode
[  180.767765][ T7757] tipc: Node identity 4, cluster identity 4711
[  180.793356][ T7757] tipc: Node number set to 4
[  181.158677][ T7779] loop1: detected capacity change from 0 to 512
[  181.345386][ T7787] loop7: detected capacity change from 0 to 128
[  181.399764][ T7787] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  181.523914][ T7792] loop6: detected capacity change from 0 to 256
[  181.537768][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  182.262943][ T4540] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  182.307922][ T4540] FAT-fs (loop7): Filesystem has been set read-only
[  182.326498][ T4540] VFS: Lookup of 'file0' in vfat loop7 would have caused loop
[  182.376606][ T4540] VFS: Lookup of 'file0' in vfat loop7 would have caused loop
[  182.686143][ T5394] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.760283][ T7830] FAULT_INJECTION: forcing a failure.
[  182.760283][ T7830] name failslab, interval 1, probability 0, space 0, times 0
[  182.796370][ T7830] CPU: 1 PID: 7830 Comm: syz.1.836 Not tainted syzkaller #0
[  182.803706][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.813785][ T7830] Call Trace:
[  182.817071][ T7830]  <TASK>
[  182.820004][ T7830]  dump_stack_lvl+0x188/0x250
[  182.824693][ T7830]  ? show_regs_print_info+0x20/0x20
[  182.829902][ T7830]  ? load_image+0x410/0x410
[  182.834544][ T7830]  ? __might_sleep+0xf0/0xf0
[  182.839144][ T7830]  ? __lock_acquire+0x7b50/0x7b50
[  182.844187][ T7830]  should_fail+0x383/0x4b0
[  182.848624][ T7830]  should_failslab+0x5/0x20
[  182.853137][ T7830]  slab_pre_alloc_hook+0x51/0xc0
[  182.858348][ T7830]  kmem_cache_alloc_node+0x47/0x2c0
[  182.863553][ T7830]  ? dup_task_struct+0x57/0xbc0
[  182.868414][ T7830]  dup_task_struct+0x57/0xbc0
[  182.873098][ T7830]  ? _raw_spin_unlock_irq+0x1f/0x40
[  182.878298][ T7830]  ? lockdep_hardirqs_on+0x94/0x140
[  182.883504][ T7830]  copy_process+0x61f/0x3e70
[  182.888120][ T7830]  ? __mutex_trylock_common+0x15c/0x260
[  182.893686][ T7830]  ? __pidfd_prepare+0x140/0x140
[  182.898720][ T7830]  ? __lock_acquire+0x7b50/0x7b50
[  182.903773][ T7830]  ? io_fallback_req_func+0x210/0x210
[  182.909161][ T7830]  ? io_fallback_req_func+0x210/0x210
[  182.914549][ T7830]  create_io_thread+0x111/0x180
[  182.919499][ T7830]  ? __se_sys_io_uring_setup+0x19c9/0x2900
[  182.925322][ T7830]  ? copy_process+0x3e70/0x3e70
[  182.930703][ T7830]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  182.936352][ T7830]  ? io_fallback_req_func+0x210/0x210
[  182.941761][ T7830]  __se_sys_io_uring_setup+0x1d6e/0x2900
[  182.947520][ T7830]  ? __x64_sys_io_uring_setup+0x60/0x60
[  182.953105][ T7830]  ? lockdep_hardirqs_on+0x94/0x140
[  182.958319][ T7830]  do_syscall_64+0x4c/0xa0
[  182.962743][ T7830]  ? clear_bhb_loop+0x30/0x80
[  182.967422][ T7830]  ? clear_bhb_loop+0x30/0x80
[  182.972111][ T7830]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  182.972714][ T7698] ODEBUG: Out of memory. ODEBUG disabled
[  182.978180][ T7830] RIP: 0033:0x7f8d26148159
[  182.978204][ T7830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.978218][ T7830] RSP: 002b:00007f8d2439ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  182.978236][ T7830] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007f8d26148159
[  182.978250][ T7830] RDX: 0000200000000440 RSI: 00002000000005c0 RDI: 0000000000000efe
[  182.978262][ T7830] RBP: 00007f8d261df03b R08: 0000000000000000 R09: 0000000000000000
[  182.978273][ T7830] R10: 0000200000000180 R11: 0000000000000206 R12: 0000200000000440
[  182.978283][ T7830] R13: 0000200000000180 R14: 0000200000000100 R15: 00007ffee972c0b8
[  183.056758][ T7830]  </TASK>
[  183.101491][ T5394] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.194363][ T5394] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.258068][ T7841] netlink: 'syz.3.841': attribute type 1 has an invalid length.
[  183.416927][ T5394] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.470144][ T7845] bond1: (slave geneve2): Error -99 calling set_mac_address
[  183.675343][ T7857] netlink: 'syz.1.844': attribute type 10 has an invalid length.
[  183.765020][ T7857] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  183.815406][ T7871] netlink: 'syz.1.844': attribute type 4 has an invalid length.
[  183.833586][ T7871] netlink: 152 bytes leftover after parsing attributes in process `syz.1.844'.
[  183.923612][ T7860] netlink: 'syz.1.844': attribute type 10 has an invalid length.
[  183.985746][ T7860] wlan1: mtu less than device minimum
[  183.997989][ T7860] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  184.006389][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'.
[  184.022013][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'.
[  184.032401][ T7870] netlink: 'syz.3.848': attribute type 15 has an invalid length.
[  184.051497][ T7870] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  184.060291][ T7870] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  184.068942][ T7870] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  184.077727][ T7870] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  184.162460][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'.
[  184.208429][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'.
[  184.223193][ T7870] netlink: 'syz.3.848': attribute type 15 has an invalid length.
[  184.235073][ T7870] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0
[  184.244156][ T7870] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0
[  184.253325][ T7870] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0
[  184.262566][ T7870] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0
[  184.366653][ T7887] netlink: 'syz.1.852': attribute type 1 has an invalid length.
[  184.429645][ T7887] 8021q: adding VLAN 0 to HW filter on device bond2
[  184.553238][   T26] audit: type=1326 audit(1789187966.985:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.6.853" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ad9b8159 code=0x7fc00000
[  184.635768][   T26] audit: type=1326 audit(1789187967.035:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7891 comm="syz.6.853" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86ad9b8159 code=0x7fc00000
[  184.799193][ T7844] chnl_net:caif_netlink_parms(): no params data found
[  185.083253][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.167566][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.187994][ T7921] loop1: detected capacity change from 0 to 256
[  185.200049][ T7844] device bridge_slave_0 entered promiscuous mode
[  185.235907][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'.
[  185.278829][ T7921] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  185.349638][ T7921] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  185.361416][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.372544][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.380036][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[  185.397885][ T7921] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  185.419390][ T7844] device bridge_slave_1 entered promiscuous mode
[  185.487165][ T7844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.506232][ T7844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.581987][ T7844] team0: Port device team_slave_0 added
[  185.600283][ T7844] team0: Port device team_slave_1 added
[  185.678474][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.689062][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.744798][ T7901] loop8: detected capacity change from 0 to 32768
[  185.751850][ T7844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.821853][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.837111][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.891873][ T7901] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  185.959880][ T7901] JBD2: Ignoring recovery information on journal
[  186.017753][ T4235] Bluetooth: hci2: command 0x0406 tx timeout
[  186.019853][ T7844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.027077][ T4235] Bluetooth: hci0: command 0x0406 tx timeout
[  186.053645][ T7901] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  186.277963][ T5394] device hsr_slave_0 left promiscuous mode
[  186.297976][ T5394] device hsr_slave_1 left promiscuous mode
[  186.353921][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.365515][ T5394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.394873][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.405067][ T5394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.425647][ T5394] device bridge_slave_1 left promiscuous mode
[  186.443629][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.457331][ T5394] device bridge_slave_0 left promiscuous mode
[  186.475585][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.511567][ T5394] device veth1_macvtap left promiscuous mode
[  186.522586][ T5394] device veth0_macvtap left promiscuous mode
[  186.532210][ T5394] device veth1_vlan left promiscuous mode
[  186.542803][ T5394] device veth0_vlan left promiscuous mode
[  186.692606][ T7901] (syz.8.855,7901,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  186.707520][ T7967] jffs2: notice: (7967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  186.815233][ T5394] bond1 (unregistering): Released all slaves
[  186.826777][ T7901] syz.8.855 (7901) used greatest stack depth: 16112 bytes left
[  186.932364][ T6766] ocfs2: Unmounting device (7,8) on (node local)
[  187.036109][ T5394] team0 (unregistering): Port device team_slave_1 removed
[  187.072081][ T5394] team0 (unregistering): Port device team_slave_0 removed
[  187.103359][ T5394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.130335][ T5394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.244656][ T5394] bond0 (unregistering): Released all slaves
[  187.333764][ T7844] device hsr_slave_0 entered promiscuous mode
[  187.348602][ T7844] device hsr_slave_1 entered promiscuous mode
[  187.368475][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.865'.
[  187.457776][   T21] Bluetooth: hci3: command 0x041b tx timeout
[  187.837461][ T7844] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  187.873373][ T7844] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  187.916657][ T7844] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  187.958178][ T7844] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  188.198600][ T7844] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.232473][ T8006] jffs2: notice: (8006) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  188.281574][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.304556][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.336777][ T7844] 8021q: adding VLAN 0 to HW filter on device team0
[  188.354506][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.373719][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.427518][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.434660][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.492348][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.548958][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.577447][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.595615][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.602756][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.618140][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.652756][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.667504][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.685105][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.700719][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.718916][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.752730][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  188.778690][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  188.803743][ T7844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  188.812941][ T4235] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  188.837812][ T7844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  188.859618][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  188.878149][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  188.908664][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.177972][ T4235] usb 7-1: config 1 has an invalid interface number: 27 but max is 1
[  189.200160][ T4235] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  189.230456][ T4235] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  189.259624][ T4235] usb 7-1: config 1 has no interface number 2
[  189.280301][ T4235] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64
[  189.322490][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.345901][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  189.357493][ T4235] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.388367][ T7844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.395249][ T4235] usb 7-1: config 1 interface 1 has no altsetting 0
[  189.537747][ T4234] Bluetooth: hci3: command 0x040f tx timeout
[  189.567980][ T4235] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  189.577327][ T4235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.632354][ T4235] usb 7-1: Product: syz
[  189.636563][ T4235] usb 7-1: Manufacturer: syz
[  189.671957][ T4235] usb 7-1: SerialNumber: syz
[  189.945339][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  189.955306][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.039835][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  190.074947][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  190.094377][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  190.113905][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  190.144053][ T7844] device veth0_vlan entered promiscuous mode
[  190.164386][ T8019] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  190.198451][ T7844] device veth1_vlan entered promiscuous mode
[  190.253626][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  190.265309][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  190.294155][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  190.318923][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  190.343114][ T7844] device veth0_macvtap entered promiscuous mode
[  190.370681][ T7844] device veth1_macvtap entered promiscuous mode
[  190.391320][ T8019] udc-core: couldn't find an available UDC or it's busy
[  190.407750][ T8019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  190.436781][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.477684][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.487542][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.542788][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.568318][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.607671][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.643920][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.651716][ T8019] udc-core: couldn't find an available UDC or it's busy
[  190.659044][ T8019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  190.691702][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.726664][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.747694][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.778443][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.812747][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.852828][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.864336][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.895342][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  190.905017][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  190.953190][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  190.988310][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.012876][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.048151][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.085850][ T7844] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.121563][ T7844] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.132918][ T7844] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.147728][ T7844] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.327929][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.335784][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.374012][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  191.426712][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.466795][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.501803][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  191.542793][ T4235] speedtch 7-1:1.0: speedtch_bind: device reset failed (-19)!
[  191.558477][ T4235] usb 7-1: selecting invalid altsetting 0
[  191.564288][ T4235] speedtch 7-1:1.0: usbatm_usb_probe: bind failed: -19!
[  191.618826][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[  191.630743][ T4235] speedtch 7-1:1.27: speedtch_bind: setting interface to  1 failed (-19)!
[  191.653919][ T4235] usb 7-1: selecting invalid altsetting 0
[  191.676302][ T4235] speedtch 7-1:1.27: usbatm_usb_probe: bind failed: -19!
[  191.713933][ T4235] usb 7-1: selecting invalid altsetting 0
[  191.743650][ T4235] usbtest: probe of 7-1:1.1 failed with error -22
[  191.764857][ T4235] usb 7-1: selecting invalid altsetting 0
[  191.784893][ T4235] speedtch: probe of 7-1:1.1 failed with error -22
[  191.827953][ T4235] usb 7-1: USB disconnect, device number 4
[  192.068562][ T8099] netlink: 'syz.1.890': attribute type 1 has an invalid length.
[  192.102292][ T8099] netlink: 'syz.1.890': attribute type 2 has an invalid length.
[  192.178145][ T8104] FAULT_INJECTION: forcing a failure.
[  192.178145][ T8104] name failslab, interval 1, probability 0, space 0, times 0
[  192.201605][ T8104] CPU: 0 PID: 8104 Comm: syz.9.891 Not tainted syzkaller #0
[  192.208942][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  192.219023][ T8104] Call Trace:
[  192.222329][ T8104]  <TASK>
[  192.225272][ T8104]  dump_stack_lvl+0x188/0x250
[  192.229977][ T8104]  ? show_regs_print_info+0x20/0x20
[  192.235326][ T8104]  ? load_image+0x410/0x410
[  192.239853][ T8104]  ? __might_sleep+0xf0/0xf0
[  192.244488][ T8104]  ? __lock_acquire+0x7b50/0x7b50
[  192.249543][ T8104]  should_fail+0x383/0x4b0
[  192.253984][ T8104]  should_failslab+0x5/0x20
[  192.258503][ T8104]  slab_pre_alloc_hook+0x51/0xc0
[  192.263467][ T8104]  kmem_cache_alloc_node+0x47/0x2c0
[  192.268869][ T8104]  ? dup_task_struct+0x57/0xbc0
[  192.273748][ T8104]  dup_task_struct+0x57/0xbc0
[  192.278449][ T8104]  ? _raw_spin_unlock_irq+0x1f/0x40
[  192.284032][ T8104]  ? lockdep_hardirqs_on+0x94/0x140
[  192.289257][ T8104]  copy_process+0x61f/0x3e70
[  192.293884][ T8104]  ? __mutex_trylock_common+0x15c/0x260
[  192.299472][ T8104]  ? __pidfd_prepare+0x140/0x140
[  192.304435][ T8104]  ? __lock_acquire+0x7b50/0x7b50
[  192.309572][ T8104]  ? io_fallback_req_func+0x210/0x210
[  192.315052][ T8104]  ? io_fallback_req_func+0x210/0x210
[  192.320963][ T8104]  create_io_thread+0x111/0x180
[  192.325835][ T8104]  ? __se_sys_io_uring_setup+0x19c9/0x2900
[  192.331666][ T8104]  ? copy_process+0x3e70/0x3e70
[  192.336533][ T8104]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  192.342197][ T8104]  ? io_fallback_req_func+0x210/0x210
[  192.347610][ T8104]  __se_sys_io_uring_setup+0x1d6e/0x2900
[  192.353286][ T8104]  ? __x64_sys_io_uring_setup+0x60/0x60
[  192.358870][ T8104]  ? lockdep_hardirqs_on+0x94/0x140
[  192.364106][ T8104]  do_syscall_64+0x4c/0xa0
[  192.368785][ T8104]  ? clear_bhb_loop+0x30/0x80
[  192.373503][ T8104]  ? clear_bhb_loop+0x30/0x80
[  192.378342][ T8104]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.384253][ T8104] RIP: 0033:0x7fdc5daf0159
[  192.388688][ T8104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.408310][ T8104] RSP: 002b:00007fdc5bd47fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  192.416741][ T8104] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007fdc5daf0159
[  192.424853][ T8104] RDX: 0000200000000440 RSI: 00002000000005c0 RDI: 0000000000000efe
[  192.432844][ T8104] RBP: 00007fdc5db8703b R08: 0000000000000000 R09: 0000000000000000
[  192.440830][ T8104] R10: 0000200000000180 R11: 0000000000000206 R12: 0000200000000440
[  192.448813][ T8104] R13: 0000200000000180 R14: 0000200000000100 R15: 00007fff2bcae8a8
[  192.456810][ T8104]  </TASK>
[  192.650864][ T8112] device bridge0 entered promiscuous mode
[  193.082757][ T8129] netlink: 'syz.8.899': attribute type 10 has an invalid length.
[  193.115652][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.141788][ T8141] loop9: detected capacity change from 0 to 256
[  193.187905][ T8143] netlink: 'syz.8.899': attribute type 10 has an invalid length.
[  193.292162][ T8141] FAT-fs (loop9): bogus sectors per cluster 0
[  193.313174][ T8141] FAT-fs (loop9): Can't find a valid FAT filesystem
[  193.366607][ T8148] ip_tables: iptables: counters copy to user failed while replacing table
[  193.403952][ T8129] netlink: 'syz.8.899': attribute type 4 has an invalid length.
[  193.513466][ T8129] netlink: 152 bytes leftover after parsing attributes in process `syz.8.899'.
[  193.608855][ T8129] wlan1: mtu less than device minimum
[  193.679176][ T8129] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  194.036397][ T8173] loop1: detected capacity change from 0 to 512
[  194.134317][ T8180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  194.160685][ T8173] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  194.173541][ T8173] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.188318][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.194629][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.275266][ T8185] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  194.686419][ T8194] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  194.724995][ T8194] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  194.833402][ T8207] loop9: detected capacity change from 0 to 256
[  194.976297][ T8207] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.027771][ T8207] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  195.100374][ T8207] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  195.378162][ T8227] netlink: 'syz.6.924': attribute type 10 has an invalid length.
[  195.432335][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.439756][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.560600][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.567787][ T8227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.577452][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.584646][ T8227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.856350][ T8227] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  195.906695][ T8230] netlink: 'syz.6.924': attribute type 10 has an invalid length.
[  196.217275][ T8230] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  196.284047][ T8235] netlink: 'syz.6.924': attribute type 4 has an invalid length.
[  196.347953][ T8235] netlink: 152 bytes leftover after parsing attributes in process `syz.6.924'.
[  196.644635][ T8263] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  196.729940][ T8263] netlink: 'syz.6.933': attribute type 10 has an invalid length.
[  196.808977][ T8263] device syz_tun entered promiscuous mode
[  196.886394][ T8263] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  197.257827][ T4234] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  197.464263][ T8302] netlink: 'syz.3.945': attribute type 10 has an invalid length.
[  197.515970][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.523245][ T8302] bridge0: port 2(bridge_slave_1) entered listening state
[  197.530558][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.537667][ T8302] bridge0: port 1(bridge_slave_0) entered listening state
[  197.546229][ T4234] usb 7-1: Using ep0 maxpacket: 8
[  197.672203][ T4234] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  197.692316][ T4234] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  197.706866][ T4234] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  197.723590][ T4234] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  197.743569][ T8302] device bridge0 entered promiscuous mode
[  197.749797][ T4234] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.773429][ T8302] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  197.783975][ T4234] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  197.788016][ T8304] netlink: 'syz.3.945': attribute type 10 has an invalid length.
[  197.838510][ T4234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.891387][ T8305] netlink: 'syz.3.945': attribute type 4 has an invalid length.
[  197.926907][ T8305] netlink: 152 bytes leftover after parsing attributes in process `syz.3.945'.
[  198.048165][ T8305] wlan1: mtu less than device minimum
[  198.067246][ T8305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  198.127876][ T4234] usb 7-1: GET_CAPABILITIES returned 0
[  198.133487][ T4234] usbtmc 7-1:16.0: can't read capabilities
[  198.771063][ T8338] 8021q: adding VLAN 0 to HW filter on device bond3
[  198.797552][ T8345] bond3: (slave ip6erspan0): making interface the new active one
[  198.856328][ T8345] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  198.886108][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  198.894134][ T8337] udc-core: couldn't find an available UDC or it's busy
[  198.914462][ T8337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  198.925615][ T8350] netlink: 15143 bytes leftover after parsing attributes in process `syz.3.955'.
[  198.959197][ T8337] udc-core: couldn't find an available UDC or it's busy
[  199.019010][ T8337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  199.068199][ T8337] usbtmc 7-1:16.0: usbtmc488_ioctl_trigger returned -71
[  199.077409][ T8355] loop9: detected capacity change from 0 to 512
[  199.165393][ T8355] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.956: bg 0: block 5: invalid block bitmap
[  199.193890][ T8355] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  199.247274][ T8355] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.956: invalid indirect mapped block 3 (level 2)
[  199.342734][ T8355] EXT4-fs (loop9): 1 orphan inode deleted
[  199.372291][ T8355] EXT4-fs (loop9): 1 truncate cleaned up
[  199.380381][ T8367] loop1: detected capacity change from 0 to 512
[  199.387742][ T8355] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  199.491928][ T8367] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nodelalloc,,errors=continue. Quota mode: none.
[  199.573244][ T8355] EXT4-fs error (device loop9): xattr_find_entry:297: inode #15: comm syz.9.956: corrupted xattr entries
[  199.698197][ T8355] EXT4-fs error (device loop9): get_max_inline_xattr_value_size:68: inode #15: comm syz.9.956: corrupt xattr in inline inode
[  199.725826][ T8355] EXT4-fs error (device loop9): xattr_find_entry:297: inode #15: comm syz.9.956: corrupted xattr entries
[  200.153644][   T21] usb 7-1: USB disconnect, device number 5
[  200.627821][   T21] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  200.783226][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'.
[  201.007747][   T21] usb 7-1: unable to get BOS descriptor or descriptor too short
[  201.113770][   T21] usb 7-1: unable to read config index 0 descriptor/start: -71
[  201.123437][   T21] usb 7-1: can't read configurations, error -71
[  201.194875][ T8432] device syzkaller0 entered promiscuous mode
[  201.382784][ T4234] Bluetooth: hci1: command 0x0406 tx timeout
[  202.001565][ T8446] loop8: detected capacity change from 0 to 512
[  202.037814][   T21] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  202.119159][ T8446] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  202.181721][ T8446] EXT4-fs (loop8): 1 truncate cleaned up
[  202.187408][ T8446] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  202.413484][   T21] usb 7-1: config 0 has an invalid interface number: 214 but max is 0
[  202.451892][   T21] usb 7-1: config 0 has no interface number 0
[  202.477696][   T21] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  202.498955][   T21] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  202.638438][   T21] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  202.656986][   T21] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  202.675460][   T21] usb 7-1: Manufacturer: syz
[  202.689963][   T21] usb 7-1: SerialNumber: syz
[  202.716157][   T21] usb 7-1: config 0 descriptor??
[  202.727572][ T8455] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  202.757360][ T8455] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  203.192559][ T8475] netlink: 'syz.9.990': attribute type 10 has an invalid length.
[  203.212963][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.220512][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.251347][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.258505][ T8475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.263413][ T8472] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  203.266083][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.281190][ T8475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.298154][ T8475] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  203.307360][ T8480] netlink: 'syz.9.990': attribute type 10 has an invalid length.
[  203.360420][ T8480] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  203.408050][ T8481] netlink: 'syz.9.990': attribute type 4 has an invalid length.
[  203.415978][ T8481] netlink: 152 bytes leftover after parsing attributes in process `syz.9.990'.
[  203.418960][   T21] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.214/input/input7
[  203.576226][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.9.998'.
[  203.642653][   T21] usb 7-1: USB disconnect, device number 7
[  204.971155][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1009'.
[  205.027034][ T8524] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.035940][ T8524] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.044821][ T8524] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.053600][ T8524] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.068881][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1009'.
[  205.074139][ T8529] loop1: detected capacity change from 0 to 512
[  205.183989][ T8529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  205.236477][ T8529] EXT4-fs (loop1): 1 truncate cleaned up
[  205.253738][ T8529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  205.320179][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  205.344577][ T8535] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  205.380893][ T8541] netlink: 'syz.9.1012': attribute type 10 has an invalid length.
[  205.417912][ T8541] device syz_tun entered promiscuous mode
[  205.444342][ T8541] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  205.974607][ T8562] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  206.377961][ T4235] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  206.778273][ T4235] usb 9-1: config 1 has an invalid interface number: 27 but max is 1
[  206.802825][ T4235] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.908849][ T4235] usb 9-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  207.032473][ T4235] usb 9-1: config 1 has no interface number 2
[  207.121956][ T4235] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64
[  207.244158][ T4235] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.348871][ T4235] usb 9-1: config 1 interface 1 has no altsetting 0
[  207.588308][ T4235] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  207.625586][ T4235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.639121][ T8586] loop6: detected capacity change from 0 to 32768
[  207.677305][ T8586] (syz.6.1024,8586,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  207.692361][ T8586] (syz.6.1024,8586,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  207.758078][ T4235] usb 9-1: Product: syz
[  207.768662][ T8586] JBD2: Ignoring recovery information on journal
[  207.839563][ T4235] usb 9-1: Manufacturer: syz
[  207.907983][ T4235] usb 9-1: SerialNumber: syz
[  207.932726][ T8586] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  208.562324][ T8574] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  208.772118][ T4498] ocfs2: Unmounting device (7,6) on (node local)
[  208.821449][ T8574] udc-core: couldn't find an available UDC or it's busy
[  208.836714][ T8574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  209.045429][ T8622] x_tables: duplicate underflow at hook 2
[  209.062816][ T8574] udc-core: couldn't find an available UDC or it's busy
[  209.082590][ T8574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  209.320520][ T8636] loop6: detected capacity change from 0 to 512
[  209.367833][ T8636] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  209.378234][ T4235] ATM dev 0: failed to start ADSL synchronisation: -71
[  209.398349][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617a00 failed (-71)!
[  209.406673][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617f00 failed (-71)!
[  209.414616][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617b00 failed (-71)!
[  209.422551][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617900 failed (-71)!
[  209.433428][ T8636] EXT4-fs (loop6): 1 truncate cleaned up
[  209.449272][ T8636] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  209.508070][ T4235] speedtch 9-1:1.27: speedtch_bind: failed to claim interface  0 (-16)!
[  209.518867][ T4235] speedtch 9-1:1.27: usbatm_usb_probe: bind failed: -16!
[  209.525999][ T4235] speedtch: probe of 9-1:1.27 failed with error -16
[  209.532705][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617a00 failed (-71)!
[  209.532790][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617f00 failed (-71)!
[  209.532833][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617b00 failed (-71)!
[  209.532866][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617900 failed (-71)!
[  209.657701][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617a00 failed (-71)!
[  209.665709][    C1] ATM dev 0: usbatm_complete: urb 0xffff88807d617f00 failed (-71)!
[  209.788211][ T4235] usb 9-1: USB disconnect, device number 3
[  210.892331][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'.
[  211.168076][ T4235] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  211.298565][ T8691] loop1: detected capacity change from 0 to 128
[  211.447755][ T4235] usb 9-1: Using ep0 maxpacket: 8
[  211.728215][ T4235] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  211.737299][ T4235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.778231][ T4235] usb 9-1: Product: syz
[  211.784198][ T4235] usb 9-1: Manufacturer: syz
[  211.794317][ T4235] usb 9-1: SerialNumber: syz
[  211.813304][ T4235] usb 9-1: config 0 descriptor??
[  211.899748][ T4235] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  212.577804][ T4235] gspca_sonixj: reg_w1 err -110
[  212.582765][ T4235] sonixj: probe of 9-1:0.0 failed with error -110
[  212.629345][ T8727] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1068'.
[  212.871578][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[  213.757329][   T21] usb 9-1: USB disconnect, device number 4
[  213.797000][ T8783] loop6: detected capacity change from 0 to 2048
[  213.866625][ T4513]  loop6: p1 p2 < > p3 p4 < p5 >
[  213.872218][ T4513] loop6: partition table partially beyond EOD, truncated
[  213.932177][ T4513] loop6: p2 start 4294902784 is beyond EOD, truncated
[  213.982247][ T4513] loop6: p3 start 3724543488 is beyond EOD, truncated
[  214.097270][ T8783]  loop6: p1 p2 < > p3 p4 < p5 >
[  214.113570][ T8783] loop6: partition table partially beyond EOD, truncated
[  214.147829][ T8783] loop6: p2 start 4294902784 is beyond EOD, truncated
[  214.171749][ T8783] loop6: p3 start 3724543488 is beyond EOD, truncated
[  214.513877][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  214.513950][ T4513] udevd[4513]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  214.532732][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  214.545821][ T8804] loop6: detected capacity change from 0 to 4096
[  214.594193][ T8804] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  214.708440][ T8804] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback.
[  214.779626][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  214.785888][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  214.813751][ T4513] udevd[4513]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  215.497728][   T21] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  215.551378][ T4498] bond0: (slave syz_tun): Releasing backup interface
[  215.687254][ T8825] overlayfs: failed to resolve './file0': -2
[  215.900473][   T21] usb 9-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[  215.913269][   T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.974687][   T21] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280
[  216.019513][ T8861] batman_adv: batadv0: Adding interface: gretap1
[  216.041608][ T8861] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.134095][ T8861] batman_adv: batadv0: Interface activated: gretap1
[  216.396320][ T8817] udc-core: couldn't find an available UDC or it's busy
[  216.412379][ T8817] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  216.451476][ T8817] udc-core: couldn't find an available UDC or it's busy
[  216.488947][ T8817] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  216.543131][ T8817] udc-core: couldn't find an available UDC or it's busy
[  216.578343][ T8817] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  216.619414][ T8817] udc-core: couldn't find an available UDC or it's busy
[  216.626393][ T8817] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  216.670814][ T8868] chnl_net:caif_netlink_parms(): no params data found
[  216.708028][   T21] gspca_sn9c20x: Write register 1001 failed -110
[  216.714771][   T21] gspca_sn9c20x: Device initialization failed
[  216.757774][   T21] gspca_sn9c20x: probe of 9-1:252.0 failed with error -110
[  216.797798][   T21] usb 9-1: USB disconnect, device number 5
[  216.936811][ T8868] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.966103][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.002448][ T8868] device bridge_slave_0 entered promiscuous mode
[  217.011572][ T8868] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.023342][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.032379][ T8868] device bridge_slave_1 entered promiscuous mode
[  217.066710][ T8868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.095546][ T8868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.185859][ T8868] team0: Port device team_slave_0 added
[  217.214467][ T8868] team0: Port device team_slave_1 added
[  217.261153][ T8868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.297978][ T8868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.407701][ T8868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.440429][ T8868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.447404][ T8868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.574275][ T8868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.646002][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1110'.
[  217.716256][ T8868] device hsr_slave_0 entered promiscuous mode
[  217.737136][ T8868] device hsr_slave_1 entered promiscuous mode
[  217.766798][ T8868] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.802524][ T8868] Cannot create hsr debugfs directory
[  218.225883][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1116'.
[  218.257852][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[  219.571671][ T8969] overlayfs: failed to clone upperpath
[  219.765977][ T8975] device syzkaller0 entered promiscuous mode
[  220.195831][ T8868] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  220.227247][ T8868] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  220.288122][ T8868] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  220.320639][ T8868] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  220.480279][ T8868] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.497907][ T4234] Bluetooth: hci1: command 0x041b tx timeout
[  220.555981][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  220.620890][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  220.643182][ T8868] 8021q: adding VLAN 0 to HW filter on device team0
[  220.665544][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  220.675295][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  220.684337][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.691470][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.760145][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  220.789530][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  220.823463][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  220.848720][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.855855][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.888157][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  220.919128][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  220.936824][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  220.967178][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  220.993441][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  221.030211][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  221.063217][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  221.089028][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  221.117437][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  221.149374][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  221.174973][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  221.497431][ T9043] loop1: detected capacity change from 0 to 128
[  221.574086][ T9043] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  221.624668][ T8868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.668929][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  221.676547][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  221.771043][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  221.856610][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  221.899883][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1138'.
[  221.974662][ T9051] bond0: (slave syz_tun): Releasing backup interface
[  222.037458][ T8868] device veth0_vlan entered promiscuous mode
[  222.060879][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  222.078379][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  222.117563][ T8868] device veth1_vlan entered promiscuous mode
[  222.150471][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  222.168557][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  222.197056][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  222.297934][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  222.342434][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  222.383869][ T8868] device veth0_macvtap entered promiscuous mode
[  222.415069][ T8868] device veth1_macvtap entered promiscuous mode
[  222.500203][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.532078][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1148'.
[  222.577943][ T4235] Bluetooth: hci1: command 0x040f tx timeout
[  222.596480][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.002747][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.261530][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.291605][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.332611][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.343044][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.394791][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.444786][ T9093] loop8: detected capacity change from 0 to 512
[  223.461419][ T8868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.497975][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  223.506146][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  223.552919][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  223.608852][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  223.638580][ T9093] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  223.669847][ T9101] netlink: 'syz.3.1153': attribute type 5 has an invalid length.
[  223.695906][ T9093] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.831605][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.866739][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.892480][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.934574][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.952701][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.970214][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.983261][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.994202][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.008710][ T8868] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.035084][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  224.053079][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  224.065713][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'.
[  224.086072][ T9126] bond0: (slave syz_tun): Releasing backup interface
[  224.126733][ T8868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.180006][ T8868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.215880][ T8868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.250173][ T8868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.291923][ T9136] bond0: (slave wlan1): Error: Slave device does not support XDP
[  224.456844][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.470273][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.493877][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  224.548554][ T5389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.566003][ T5389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.591995][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  224.669670][ T4235] Bluetooth: hci1: command 0x0419 tx timeout
[  225.015475][ T9157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  225.022796][ T9157] IPv6: NLM_F_CREATE should be set when creating new route
[  226.119682][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.126893][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.569567][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.617424][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.988384][ T9157] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.998395][ T9157] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.007420][ T9157] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.024277][ T9157] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.181798][ T9157] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  227.191113][ T9157] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  227.199971][ T9157] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  227.208777][ T9157] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  227.232242][ T9157] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 60387 - 0
[  227.241393][ T9157] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 60387 - 0
[  227.250529][ T9157] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 60387 - 0
[  227.259535][ T9157] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 60387 - 0
[  227.281396][ T9157] batman_adv: batadv0: Interface deactivated: gretap1
[  227.393186][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'.
[  227.758982][ T9209] loop8: detected capacity change from 0 to 256
[  227.789500][ T9209] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  228.110039][ T9209] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  229.267708][ T4235] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  229.529892][ T4235] usb 3-1: Using ep0 maxpacket: 32
[  229.647897][ T4235] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  229.656673][ T4235] usb 3-1: config 0 has no interface number 0
[  229.663384][ T4235] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  229.776625][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1194'.
[  229.837992][ T4235] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  229.871110][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.894488][ T4235] usb 3-1: Product: syz
[  229.912310][ T4235] usb 3-1: Manufacturer: syz
[  229.916951][ T4235] usb 3-1: SerialNumber: syz
[  229.939657][ T4235] usb 3-1: config 0 descriptor??
[  229.990191][ T4235] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  230.010381][ T4235] em28xx 3-1:0.132: Video interface 132 found:
[  230.111069][ T9323] EXT4-fs (sda1): shut down requested (1)
[  230.146217][ T9323] Aborting journal on device sda1-8.
[  230.179876][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  230.179890][   T26] audit: type=1326 audit(1789188012.625:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.3.1202" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2c668159 code=0x0
[  230.399236][ T9331] loop8: detected capacity change from 0 to 8192
[  230.417862][ T4235] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  230.557292][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  230.608009][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  230.615693][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  230.651898][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  230.676535][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  230.696991][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  230.705827][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  230.732629][ T9355] bond0: (slave bridge0): Releasing backup interface
[  230.771099][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  230.781172][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.793975][ T9355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.835869][ T9355] bond3: (slave ip6erspan0): Releasing active interface
[  230.904774][ T4235] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  230.922655][ T9358] team0: Port device xfrm0 added
[  230.939541][ T4235] em28xx 3-1:0.132: board has no eeprom
[  230.946000][ T9360] tipc: Started in network mode
[  230.970487][ T9360] tipc: Node identity 0ae6fdfe0562, cluster identity 4711
[  231.003363][ T9360] tipc: Enabled bearer <eth:team0>, priority 0
[  231.027847][ T4235] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  231.039824][ T4235] em28xx 3-1:0.132: analog set to bulk mode.
[  231.062116][ T4470] em28xx 3-1:0.132: Registering V4L2 extension
[  231.098534][ T4235] usb 3-1: USB disconnect, device number 2
[  231.119628][ T4470] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  231.138308][ T4235] em28xx 3-1:0.132: Disconnecting em28xx
[  231.182192][ T4470] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  231.199001][ T4470] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  231.212208][ T4470] em28xx 3-1:0.132: No AC97 audio processor
[  231.212796][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'.
[  231.233821][ T4470] usb 3-1: Decoder not found
[  231.239114][ T4470] em28xx 3-1:0.132: failed to create media graph
[  231.245721][ T4470] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  231.262796][ T4470] em28xx 3-1:0.132: Remote control support is not available for this card.
[  231.272643][ T4235] em28xx 3-1:0.132: Closing input extension
[  231.315060][ T4235] em28xx 3-1:0.132: Freeing device
[  231.340005][ T9384] udevd[9384]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': Input/output error
[  231.599987][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1221'.
[  231.697939][ T9407] gfs2: gfs2 mount does not exist
[  232.012631][ T4950] tipc: Node number set to 260374014
[  232.403315][ T9440] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  232.615510][ T9463] loop8: detected capacity change from 0 to 16
[  232.755535][ T9463] erofs: (device loop8): mounted with root inode @ nid 36.
[  232.774963][ T9471] overlayfs: failed to clone upperpath
[  232.974256][ T9477] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1248'.
[  233.026697][ T9477] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1248'.
[  233.086361][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'.
[  233.770604][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'.
[  233.817236][ T9511] device ip6gre2 entered promiscuous mode
[  233.859121][ T9511] netlink: 'syz.3.1260': attribute type 6 has an invalid length.
[  233.901867][ T9511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1260'.
[  235.680875][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  235.784112][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'.
[  237.412936][ T9549] overlayfs: failed to clone upperpath
[  237.592006][ T9576] bond0: (slave bridge0): Releasing backup interface
[  237.719164][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.727404][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.984697][ T9584] overlayfs: failed to clone upperpath
[  238.184359][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  238.319375][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.327578][ T9576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.341246][ T9576] device bridge_slave_0 left promiscuous mode
[  238.347453][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.380406][ T9576] device bridge_slave_1 left promiscuous mode
[  238.387315][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.399400][ T9576] bond0: (slave bond_slave_0): Releasing backup interface
[  238.415663][ T9576] bond0: (slave bond_slave_1): Releasing backup interface
[  238.463534][ T9576] team0: Port device team_slave_0 removed
[  238.505634][ T9576] team0: Port device team_slave_1 removed
[  238.515241][ T9576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.528030][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.539644][ T9576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.549731][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.575551][ T9576] bond0: (slave wlan1): Releasing backup interface
[  238.606025][ T9580] team0: Mode changed to "activebackup"
[  238.670996][ T9588] device geneve1 entered promiscuous mode
[  238.785511][ T3852] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  238.818158][ T3852] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  238.846757][ T3852] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  238.894382][ T3852] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  238.978370][ T3852] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  238.986596][ T3852] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  239.015570][ T3852] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  239.027527][ T3852] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  239.043956][ T3852] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  239.056574][ T3852] netdevsim netdevsim5 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  239.074497][ T3852] netdevsim netdevsim5 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  239.083710][ T3852] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  239.103821][ T3852] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  239.115722][ T3852] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  239.140605][ T3852] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  239.158218][ T3852] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  239.236904][ T5394] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.324026][ T5394] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.356570][ T9631] ip_tables: iptables: counters copy to user failed while replacing table
[  239.401868][ T5394] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.471884][ T9635] batman_adv: batadv0: Adding interface: dummy0
[  239.488615][ T9635] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.514861][ T9635] batman_adv: batadv0: Interface activated: dummy0
[  239.550107][ T5394] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.722068][ T5394] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.758689][ T5394] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.833131][ T5394] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.921446][ T5394] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  240.053202][ T5394] tipc: Left network mode
[  240.277979][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'.
[  240.287200][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'.
[  240.299960][ T9677] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1315'.
[  240.308657][ T4234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  240.310666][ T9681] tipc: Started in network mode
[  240.326746][ T9681] tipc: Node identity 4, cluster identity 4711
[  240.333305][ T9681] tipc: Node number set to 4
[  240.339507][ T9677] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  240.383853][ T9681] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  240.437963][ T4234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  240.675610][ T9713] ip_tables: iptables: counters copy to user failed while replacing table
[  240.795274][ T5394] bond0: (slave wlan1): Releasing backup interface
[  240.950514][ T5394] device hsr_slave_0 left promiscuous mode
[  240.962895][ T5394] device hsr_slave_1 left promiscuous mode
[  240.979360][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.993716][ T5394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.002116][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.009765][ T5394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.018234][ T5394] device bridge_slave_1 left promiscuous mode
[  241.024604][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.034340][ T5394] device bridge_slave_0 left promiscuous mode
[  241.043087][ T9725] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  241.067022][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.088990][ T5394] device veth1_macvtap left promiscuous mode
[  241.110080][ T5394] device veth0_macvtap left promiscuous mode
[  241.126306][ T5394] device veth1_vlan left promiscuous mode
[  241.134784][ T5394] device veth0_vlan left promiscuous mode
[  241.437269][ T5394] bond1 (unregistering): Released all slaves
[  241.818614][ T5394] team0 (unregistering): Port device team_slave_1 removed
[  241.862899][ T5394] team0 (unregistering): Port device team_slave_0 removed
[  241.885710][ T5394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.912692][ T5394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.060676][ T5394] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  242.076852][ T5394] bond0 (unregistering): Released all slaves
[  242.160919][ T4272] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  242.341241][ T9763] 8021q: VLANs not supported on hsr0
[  242.382090][ T9763] 8021q: VLANs not supported on hsr0
[  242.452785][ T4234] kernel read not supported for file [userfaultfd] (pid: 4234 comm: kworker/1:4)
[  242.680954][ T9776] loop2: detected capacity change from 0 to 512
[  242.734247][ T9776] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  242.757543][ T9776] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.097551][ T9785] loop2: detected capacity change from 0 to 512
[  243.177195][ T9785] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  243.201735][ T9793] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1345'.
[  243.218180][ T4235] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  243.226043][ T4235] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  243.237923][ T9785] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.415138][ T9799] fuse: Bad value for 'fd'
[  243.559561][ T9809] loop8: detected capacity change from 0 to 512
[  243.574123][ T9806] overlayfs: failed to clone upperpath
[  243.627829][ T9809] EXT4-fs (loop8): Ignoring removed oldalloc option
[  243.657862][ T9809] EXT4-fs (loop8): error: journal path ./file1 is not a block device
[  244.040355][ T9832] "syz.9.1360" (9832) uses obsolete ecb(arc4) skcipher
[  244.204698][ T9839] syz.1.1363 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  244.258084][ T4272] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  244.519316][ T9859] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1372'.
[  244.572565][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'.
[  245.456226][ T9876] overlayfs: failed to clone upperpath
[  245.606673][ T9886] netlink: 'syz.3.1381': attribute type 1 has an invalid length.
[  246.642486][ T9886] 8021q: adding VLAN 0 to HW filter on device bond2
[  246.750667][ T9880] ceph: No mds server is up or the cluster is laggy
[  246.763552][ T9895] bond2: (slave veth3): Enslaving as an active interface with a down link
[  246.772407][ T9899] device dummy0 entered promiscuous mode
[  246.782648][ T9899] bond2: (slave dummy0): making interface the new active one
[  246.858043][ T9899] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  246.908024][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  246.977743][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  246.998108][ T9918] bond0: (slave bridge0): Releasing backup interface
[  247.086966][ T9918] device bridge0 left promiscuous mode
[  247.103736][ T9918] bond2: (slave dummy0): Releasing active interface
[  247.137452][ T9918] device bridge_slave_0 left promiscuous mode
[  247.158662][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.182129][ T9918] device bridge_slave_1 left promiscuous mode
[  247.197926][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.219523][ T9918] bond0: (slave bond_slave_0): Releasing backup interface
[  247.233882][ T9918] device bond_slave_0 left promiscuous mode
[  247.250627][ T9918] bond0: (slave bond_slave_1): Releasing backup interface
[  247.267356][ T9918] device bond_slave_1 left promiscuous mode
[  247.294009][ T9918] team0: Failed to send options change via netlink (err -105)
[  247.310937][ T9918] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  247.322285][ T9918] team0: Port device team_slave_0 removed
[  247.329216][ T9918] team0: Failed to send options change via netlink (err -105)
[  247.337137][ T9918] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  247.347302][ T9918] team0: Port device team_slave_1 removed
[  247.353568][ T9918] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.372089][ T9918] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.386277][ T9918] bond0: (slave wlan1): Releasing backup interface
[  247.427865][ T9918] device wlan1 left promiscuous mode
[  247.434278][ T9918] batman_adv: batadv0: Removing interface: gretap1
[  247.453810][ T9918] bond2: (slave veth3): Releasing active interface
[  247.477069][ T9923] team0: Failed to send options change via netlink (err -105)
[  247.504791][ T9923] team0: Mode changed to "activebackup"
[  247.505240][ T9922] loop2: detected capacity change from 0 to 40427
[  247.620766][ T9922] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  247.655878][ T9922] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  247.675372][ T9922] F2FS-fs (loop2): invalid crc value
[  247.717027][ T9922] F2FS-fs (loop2): Found nat_bits in checkpoint
[  247.829282][ T9922] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  247.836484][ T9922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  247.967232][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'.
[  248.344419][ T9975] fuse: Bad value for 'fd'
[  248.447177][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.454664][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.094551][   T26] audit: type=1326 audit(1789188031.535:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.157905][   T26] audit: type=1326 audit(1789188031.565:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.259751][   T26] audit: type=1326 audit(1789188031.565:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.317570][   T26] audit: type=1326 audit(1789188031.565:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.325312][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.380581][   T26] audit: type=1326 audit(1789188031.565:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.407457][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.432111][   T26] audit: type=1326 audit(1789188031.565:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.481417][   T26] audit: type=1326 audit(1789188031.565:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.515813][   T26] audit: type=1326 audit(1789188031.575:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.597309][   T26] audit: type=1326 audit(1789188031.575:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  249.645213][   T26] audit: type=1326 audit(1789188031.575:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.8.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  250.132454][ T9922] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.148274][ T9922] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.157328][ T9922] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.177095][ T9922] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.321507][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  250.358149][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  250.370183][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  250.398152][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  250.420214][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  250.439411][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  250.457998][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  250.494260][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  250.520117][T10023] batman_adv: batadv0: Interface deactivated: dummy0
[  250.542084][T10023] batman_adv: batadv0: Removing interface: dummy0
[  250.564970][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.578461][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.608696][T10023] team0: Port device xfrm0 removed
[  250.632897][T10026] team0: Failed to send options change via netlink (err -105)
[  250.657987][   T21] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  250.681057][T10026] team0: Failed to send options change via netlink (err -105)
[  250.747824][T10026] team0: Mode changed to "activebackup"
[  250.765643][ T5394] tipc: Resetting bearer <eth:team0>
[  250.817010][T10028] loop2: detected capacity change from 0 to 4096
[  251.159631][T10056] overlayfs: failed to clone upperpath
[  251.196108][T10056] overlayfs: failed to clone upperpath
[  251.259225][ T4234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  251.296656][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  251.349691][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  251.357276][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  251.425239][T10064] device bridge_slave_1 left promiscuous mode
[  251.490042][T10072] overlayfs: failed to clone upperpath
[  251.491092][T10064] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.614392][T10064] bond0: (slave bond_slave_0): Releasing backup interface
[  251.660025][T10064] bond0: (slave bond_slave_1): Releasing backup interface
[  251.784321][T10064] team0: Failed to send options change via netlink (err -105)
[  251.795893][T10064] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  251.813158][T10064] team0: Port device team_slave_0 removed
[  251.852865][T10064] team0: Failed to send options change via netlink (err -105)
[  251.867365][T10064] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  251.878385][T10064] team0: Port device team_slave_1 removed
[  251.892114][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.929705][T10064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.963635][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.986873][T10064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.094984][T10064] bond0: (slave wlan1): Releasing backup interface
[  252.153768][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'.
[  252.439511][T10102] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1452'.
[  252.807022][T10118] loop8: detected capacity change from 0 to 256
[  252.918869][T10118] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e7e, chksum : 0x06bedb5d, utbl_chksum : 0xe619d30d)
[  253.572204][T10142] team0: Port device xfrm0 added
[  253.614994][T10142] tipc: Enabled bearer <eth:team0>, priority 0
[  254.442589][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1486'.
[  254.977752][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  254.986980][T10222] netlink: 'syz.2.1498': attribute type 4 has an invalid length.
[  255.003990][T10222] netlink: 'syz.2.1498': attribute type 4 has an invalid length.
[  255.043193][T10226] batman_adv: batadv0: Adding interface: dummy0
[  255.055838][T10226] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.104220][T10226] batman_adv: batadv0: Interface activated: dummy0
[  255.213715][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'.
[  255.337226][T10244] loop2: detected capacity change from 0 to 128
[  255.382277][T10244] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  255.622594][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.632783][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.472026][ T4240] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  256.612710][T10269] batman_adv: batadv0: Adding interface: dummy0
[  256.653640][T10269] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.707579][T10269] batman_adv: batadv0: Interface activated: dummy0
[  256.728178][T10271] tipc: Started in network mode
[  256.734573][T10271] tipc: Node identity 4, cluster identity 4711
[  256.752985][T10271] tipc: Node number set to 4
[  256.774095][T10278] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  257.450709][T10289] loop8: detected capacity change from 0 to 512
[  257.617533][T10289] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size
[  258.182194][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'.
[  258.323651][T10329] tipc: Started in network mode
[  258.343416][T10329] tipc: Node identity 4, cluster identity 4711
[  258.363156][T10329] tipc: Node number set to 4
[  258.437705][T10329] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  259.186312][T10341] loop2: detected capacity change from 0 to 128
[  259.263237][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1541'.
[  259.485471][T10357] batman_adv: batadv0: Adding interface: veth0
[  259.493360][T10357] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.563415][T10357] batman_adv: batadv0: Interface activated: veth0
[  259.573062][T10366] FAULT_INJECTION: forcing a failure.
[  259.573062][T10366] name failslab, interval 1, probability 0, space 0, times 0
[  259.579443][T10367] batman_adv: batadv0: Interface deactivated: veth0
[  259.606575][T10366] CPU: 1 PID: 10366 Comm: syz.2.1550 Not tainted syzkaller #0
[  259.614097][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  259.624166][T10366] Call Trace:
[  259.627458][T10366]  <TASK>
[  259.630396][T10366]  dump_stack_lvl+0x188/0x250
[  259.635101][T10366]  ? show_regs_print_info+0x20/0x20
[  259.640399][T10366]  ? load_image+0x410/0x410
[  259.644924][T10366]  ? __might_sleep+0xf0/0xf0
[  259.649525][T10366]  ? __lock_acquire+0x7b50/0x7b50
[  259.654566][T10366]  should_fail+0x383/0x4b0
[  259.659007][T10366]  should_failslab+0x5/0x20
[  259.663518][T10366]  slab_pre_alloc_hook+0x51/0xc0
[  259.668475][T10366]  kmem_cache_alloc_trace+0x47/0x290
[  259.673798][T10366]  ? sctp_association_new+0x86/0x2400
[  259.679201][T10366]  sctp_association_new+0x86/0x2400
[  259.684433][T10366]  sctp_connect_new_asoc+0x2da/0x6a0
[  259.689878][T10366]  ? __sctp_connect+0xd80/0xd80
[  259.694757][T10366]  ? sctp_get_af_specific+0x25/0x70
[  259.699976][T10366]  ? sctp_endpoint_lookup_assoc+0xab/0x230
[  259.705804][T10366]  __sctp_connect+0x5b3/0xd80
[  259.710510][T10366]  ? sctp_send_asconf+0x170/0x170
[  259.715543][T10366]  ? __local_bh_enable_ip+0x136/0x1c0
[  259.720922][T10366]  ? lockdep_hardirqs_on+0x94/0x140
[  259.726145][T10366]  ? __local_bh_enable_ip+0x136/0x1c0
[  259.731531][T10366]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  259.737105][T10366]  ? security_sctp_bind_connect+0x85/0xb0
[  259.742850][T10366]  sctp_setsockopt_connectx+0x101/0x1a0
[  259.748427][T10366]  sctp_setsockopt+0x8eb/0xf80
[  259.753210][T10366]  ? sock_common_recvmsg+0x1c0/0x1c0
[  259.758518][T10366]  __sys_setsockopt+0x2bf/0x3d0
[  259.763389][T10366]  __x64_sys_setsockopt+0xb1/0xc0
[  259.768441][T10366]  do_syscall_64+0x4c/0xa0
[  259.772871][T10366]  ? clear_bhb_loop+0x30/0x80
[  259.777561][T10366]  ? clear_bhb_loop+0x30/0x80
[  259.782256][T10366]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  259.788160][T10366] RIP: 0033:0x7f63bd188159
[  259.792624][T10366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.812253][T10366] RSP: 002b:00007f63bb3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  259.820829][T10366] RAX: ffffffffffffffda RBX: 00007f63bd40ffa0 RCX: 00007f63bd188159
[  259.828958][T10366] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003
[  259.836943][T10366] RBP: 00007f63bd21f03b R08: 000000000000001c R09: 0000000000000000
[  259.844928][T10366] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000
[  259.852916][T10366] R13: 00007f63bd410038 R14: 00007f63bd40ffa0 R15: 00007ffc45509298
[  259.860922][T10366]  </TASK>
[  259.897533][T10367] batman_adv: batadv0: Removing interface: veth0
[  260.223871][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  260.412566][T10406] tipc: Started in network mode
[  260.425371][T10406] tipc: Node identity 4, cluster identity 4711
[  260.443351][T10406] tipc: Node number set to 4
[  260.500426][T10406] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  261.229348][T10411] loop2: detected capacity change from 0 to 32768
[  261.603400][T10411] XFS (loop2): Mounting V5 Filesystem
[  261.717884][T10411] XFS (loop2): Ending clean mount
[  261.976309][ T8868] XFS (loop2): Unmounting Filesystem
[  263.735377][T10468] 8021q: adding VLAN 0 to HW filter on device bond1
[  263.748537][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'.
[  263.766301][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'.
[  265.236769][T10472] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.322169][T10472] bond1: (slave bond0): making interface the new active one
[  265.407211][T10472] bond1: (slave bond0): Enslaving as an active interface with an up link
[  265.448552][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  265.527862][ T4233] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  265.927784][ T4233] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61
[  265.938080][ T4233] usb 9-1: config 0 interface 0 has no altsetting 0
[  266.107811][ T4233] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  266.117644][ T4233] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  266.125975][ T4233] usb 9-1: Product: syz
[  266.130825][ T4233] usb 9-1: Manufacturer: syz
[  266.135492][ T4233] usb 9-1: SerialNumber: syz
[  266.149469][ T4233] usb 9-1: config 0 descriptor??
[  266.167938][T10480] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  266.193469][ T4233] usb 9-1: selecting invalid altsetting 0
[  266.456951][T10480] usb 9-1: selecting invalid altsetting 0
[  266.494712][T10480] usb 9-1: 0:0: usb_set_interface failed (-22)
[  266.508012][T10480] usb 9-1: selecting invalid altsetting 0
[  266.514204][T10480] usb 9-1: 0:0: usb_set_interface failed (-22)
[  266.527254][T10507] usb 9-1: selecting invalid altsetting 0
[  266.539943][T10507] usb 9-1: 0:0: usb_set_interface failed (-22)
[  266.552879][T10507] usb 9-1: selecting invalid altsetting 0
[  266.572693][T10507] usb 9-1: 0:0: usb_set_interface failed (-22)
[  266.596238][T10479] usb 9-1: selecting invalid altsetting 0
[  266.607739][T10479] usb 9-1: 0:0: usb_set_interface failed (-22)
[  266.624437][T10479] usb 9-1: selecting invalid altsetting 0
[  266.659325][T10479] usb 9-1: 0:0: usb_set_interface failed (-22)
[  266.686183][T10479] usb 9-1: selecting invalid altsetting 0
[  266.717164][T10479] usb 9-1: 0:0: usb_set_interface failed (-22)
[  266.731650][T10510] FAULT_INJECTION: forcing a failure.
[  266.731650][T10510] name failslab, interval 1, probability 0, space 0, times 0
[  266.757898][ T4233] usb 9-1: USB disconnect, device number 6
[  266.786824][T10510] CPU: 1 PID: 10510 Comm: syz.2.1596 Not tainted syzkaller #0
[  266.794332][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  266.804398][T10510] Call Trace:
[  266.807686][T10510]  <TASK>
[  266.810632][T10510]  dump_stack_lvl+0x188/0x250
[  266.815330][T10510]  ? show_regs_print_info+0x20/0x20
[  266.820630][T10510]  ? load_image+0x410/0x410
[  266.825190][T10510]  ? __might_sleep+0xf0/0xf0
[  266.829794][T10510]  ? __lock_acquire+0x7b50/0x7b50
[  266.834871][T10510]  ? snd_pcm_open_substream+0x21ab/0x2570
[  266.840603][T10510]  should_fail+0x383/0x4b0
[  266.845031][T10510]  should_failslab+0x5/0x20
[  266.849547][T10510]  slab_pre_alloc_hook+0x51/0xc0
[  266.854497][T10510]  kmem_cache_alloc_trace+0x47/0x290
[  266.859876][T10510]  ? snd_pcm_open+0x3d3/0x5e0
[  266.864575][T10510]  snd_pcm_open+0x3d3/0x5e0
[  266.869220][T10510]  ? snd_pcm_mmap_control_fault+0x1b0/0x1b0
[  266.875122][T10510]  ? sched_dynamic_update+0x210/0x210
[  266.880606][T10510]  snd_pcm_playback_open+0x6b/0xd0
[  266.885840][T10510]  chrdev_open+0x585/0x5f0
[  266.890273][T10510]  ? cd_forget+0x160/0x160
[  266.894706][T10510]  ? fsnotify_perm+0x3a7/0x560
[  266.899486][T10510]  ? cd_forget+0x160/0x160
[  266.903914][T10510]  do_dentry_open+0x7f7/0xf90
[  266.908608][T10510]  ? vfs_open+0x2b/0x80
[  266.912780][T10510]  path_openat+0x2718/0x2fb0
[  266.917490][T10510]  ? __kasan_slab_alloc+0xa9/0xc0
[  266.922533][T10510]  ? do_filp_open+0x400/0x400
[  266.927239][T10510]  do_filp_open+0x1df/0x400
[  266.931755][T10510]  ? vfs_tmpfile+0x300/0x300
[  266.936457][T10510]  ? _raw_spin_unlock+0x24/0x40
[  266.941378][T10510]  ? alloc_fd+0x59e/0x650
[  266.945722][T10510]  do_sys_openat2+0x14b/0x500
[  266.950406][T10510]  ? __lock_acquire+0x7b50/0x7b50
[  266.955443][T10510]  ? do_sys_open+0xe0/0xe0
[  266.959869][T10510]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  266.965865][T10510]  ? lock_chain_count+0x20/0x20
[  266.970740][T10510]  __x64_sys_openat+0x135/0x160
[  266.975608][T10510]  do_syscall_64+0x4c/0xa0
[  266.980034][T10510]  ? clear_bhb_loop+0x30/0x80
[  266.984726][T10510]  ? clear_bhb_loop+0x30/0x80
[  266.989420][T10510]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  266.995336][T10510] RIP: 0033:0x7f63bd14898e
[  266.999847][T10510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  267.019470][T10510] RSP: 002b:00007f63bb3dfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  267.027900][T10510] RAX: ffffffffffffffda RBX: 00007f63bb3e06c0 RCX: 00007f63bd14898e
[  267.035883][T10510] RDX: 0000000000000002 RSI: 00007f63bb3dfc00 RDI: ffffffffffffff9c
[  267.043870][T10510] RBP: 00007f63bb3dfc00 R08: 0000000000000000 R09: 0000000000000000
[  267.051850][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  267.059831][T10510] R13: 00007f63bd410038 R14: 00007f63bd40ffa0 R15: 00007ffc45509298
[  267.067832][T10510]  </TASK>
[  268.230295][T10532] loop2: detected capacity change from 0 to 512
[  268.257241][T10539] bond0: (slave ip6tnl1): refused to change device type
[  270.977759][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  271.635536][T10629] futex_wake_op: syz.1.1627 tries to shift op by 144; fix this program
[  271.654865][T10632] netlink: 'syz.2.1628': attribute type 1 has an invalid length.
[  271.663408][T10629] futex_wake_op: syz.1.1627 tries to shift op by 144; fix this program
[  271.698102][T10632] device bond2 entered promiscuous mode
[  271.722938][T10632] 8021q: adding VLAN 0 to HW filter on device bond2
[  271.842868][T10636] VFS: Mount too revealing
[  271.919276][T10632] bond2: (slave bridge1): making interface the new active one
[  271.961784][T10632] device bridge1 entered promiscuous mode
[  271.983808][T10632] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  272.025222][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  272.244303][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'.
[  273.067810][ T4234] Bluetooth: hci4: command 0x0406 tx timeout
[  273.085251][T10655] netlink: 'syz.9.1635': attribute type 1 has an invalid length.
[  273.276330][T10660] bond1: (slave gretap1): making interface the new active one
[  273.301081][T10660] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  273.362163][T10667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1637'.
[  273.921285][T10694] loop2: detected capacity change from 0 to 136
[  273.949164][T10692] vxcan1: tx drop: invalid sa for name 0x0000000000000003
[  273.992624][T10694] Attempt to read inode for relocated directory
[  274.224814][T10700] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  274.258966][T10700] sch_tbf: burst 6281 is lower than device lo mtu (11337746) !
[  274.320116][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1654'.
[  274.441978][T10714] overlayfs: failed to clone upperpath
[  274.676932][T10728] loop8: detected capacity change from 0 to 2048
[  274.748066][T10728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.789870][T10730] netlink: 'syz.1.1661': attribute type 1 has an invalid length.
[  274.931623][T10730] device bond4 entered promiscuous mode
[  275.041483][T10730] 8021q: adding VLAN 0 to HW filter on device bond4
[  275.235497][T10735] bond4: (slave bridge1): making interface the new active one
[  275.267202][T10735] device bridge1 entered promiscuous mode
[  275.280314][T10735] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  275.292379][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  275.442752][T10740] loop2: detected capacity change from 0 to 256
[  275.555848][T10740] FAT-fs (loop2): Directory bread(block 64) failed
[  275.563844][T10740] FAT-fs (loop2): Directory bread(block 65) failed
[  275.571215][T10740] FAT-fs (loop2): Directory bread(block 66) failed
[  275.578265][T10740] FAT-fs (loop2): Directory bread(block 67) failed
[  275.584852][T10740] FAT-fs (loop2): Directory bread(block 68) failed
[  275.647874][T10740] FAT-fs (loop2): Directory bread(block 69) failed
[  275.654515][T10740] FAT-fs (loop2): Directory bread(block 70) failed
[  275.698906][T10740] FAT-fs (loop2): Directory bread(block 71) failed
[  275.705589][T10740] FAT-fs (loop2): Directory bread(block 72) failed
[  275.727390][T10740] FAT-fs (loop2): Directory bread(block 73) failed
[  275.865720][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880244fc800: rx timeout, send abort
[  276.376537][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880244fc800: abort rx timeout. Force session deactivation
[  276.809431][T10775] block device autoloading is deprecated and will be removed.
[  276.853191][T10776] md/raid0:md0: remove inactive devices before converting to RAID0
[  277.085618][T10776] md: pers->run() failed ...
[  277.174436][T10788] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1682'.
[  277.174903][T10783] cgroup: Setting release_agent not allowed
[  277.183772][T10788] 0ªX¹¦À: renamed from caif0
[  277.209579][T10788] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  277.347703][ T4470] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  277.597775][ T4470] usb 9-1: Using ep0 maxpacket: 16
[  277.717951][ T4470] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.738523][ T4470] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  277.897895][ T4470] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  277.927410][ T4470] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.948933][ T4470] usb 9-1: Product: syz
[  277.953133][ T4470] usb 9-1: Manufacturer: syz
[  277.988740][ T4470] usb 9-1: SerialNumber: syz
[  278.327952][ T4470] usb 9-1: 0:2 : does not exist
[  278.372180][ T4470] usb 9-1: USB disconnect, device number 7
[  279.794493][T10822] netlink: 'syz.8.1695': attribute type 13 has an invalid length.
[  279.837852][T10822] netlink: 'syz.8.1695': attribute type 17 has an invalid length.
[  279.944535][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  279.966914][T10822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.337819][T10843] fuse: Bad value for 'fd'
[  281.077162][T10860] Core dump to core aborted: cannot preserve file permissions
[  283.971701][T10931] netlink: 'syz.9.1730': attribute type 4 has an invalid length.
[  284.058277][T10933] netlink: 'syz.9.1730': attribute type 4 has an invalid length.
[  285.050753][T10957] loop2: detected capacity change from 0 to 32768
[  285.251888][T10957] XFS (loop2): Mounting V5 Filesystem
[  285.373464][T10957] XFS (loop2): Ending clean mount
[  285.386148][T10957] XFS (loop2): Quotacheck needed: Please wait.
[  285.428285][ T4513] udevd[4513]: symlink '../../loop2' '/dev/disk/by-diskseq/263.tmp-b7:2' failed: Read-only file system
[  285.511632][ T4513] udevd[4513]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system
[  285.565718][T10957] XFS (loop2): Quotacheck: Done.
[  285.762361][ T4513] udevd[4513]: symlink '../../loop2' '/dev/disk/by-diskseq/263.tmp-b7:2' failed: Read-only file system
[  285.860280][ T4513] udevd[4513]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system
[  286.196245][ T8868] XFS (loop2): Unmounting Filesystem
[  287.216459][ T4513] udevd[4513]: symlink '../../loop2' '/dev/disk/by-diskseq/263.tmp-b7:2' failed: Read-only file system
[  287.276543][ T4513] udevd[4513]: symlink '../../loop2' '/dev/disk/by-diskseq/263.tmp-b7:2' failed: Read-only file system
[  287.379693][ T4513] udevd[4513]: symlink '../../loop2' '/dev/disk/by-diskseq/264.tmp-b7:2' failed: Read-only file system
[  287.816419][T11055] pit: kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[  288.328403][T11073] netlink: 'syz.9.1777': attribute type 11 has an invalid length.
[  288.580549][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'.
[  290.036906][T11115] netlink: 798 bytes leftover after parsing attributes in process `syz.9.1786'.
[  290.833359][T11128] device bridge2 entered promiscuous mode
[  293.768876][T11160] binder_alloc: 11159: binder_alloc_buf size 14072 failed, no address space
[  293.818186][T11160] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  293.861378][T11167] loop2: detected capacity change from 0 to 256
[  293.908514][T11167] exfat: Deprecated parameter 'utf8'
[  293.966206][T11167] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdbc48169, utbl_chksum : 0xe619d30d)
[  294.330138][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'.
[  294.349988][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'.
[  295.323061][T11203] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  296.041092][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  296.041106][   T26] audit: type=1326 audit(1700000042.740:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  296.805278][T11236] loop8: detected capacity change from 0 to 1024
[  296.830646][   T26] audit: type=1326 audit(1700000042.790:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  297.015325][T11236] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  297.136091][   T26] audit: type=1326 audit(1700000042.790:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  297.166767][T11236] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  297.196034][T11236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103]
[  297.214802][T11236] System zones: 0-1, 3-36
[  297.227803][   T26] audit: type=1326 audit(1700000042.790:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  297.252680][   T26] audit: type=1326 audit(1700000042.790:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6073d159 code=0x7ffc0000
[  297.252921][T11236] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,abort,,errors=continue. Quota mode: writeback.
[  297.489847][   T26] audit: type=1326 audit(1700000042.790:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f6073cec2 code=0x7ffc0000
[  298.106081][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.178512][   T26] audit: type=1326 audit(1700000043.100:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f606fd98e code=0x7ffc0000
[  298.253590][   T26] audit: type=1326 audit(1700000043.320:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6f6073cf87 code=0x7ffc0000
[  298.297656][   T26] audit: type=1326 audit(1700000043.350:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f606fd98e code=0x7ffc0000
[  298.325979][   T26] audit: type=1326 audit(1700000043.500:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.8.1831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f6073cdeb code=0x7ffc0000
[  299.984191][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'.
[  300.034418][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'.
[  300.060050][T11311] overlayfs: failed to clone upperpath
[  300.180815][T11320] loop2: detected capacity change from 0 to 512
[  300.586452][T11320] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  300.880214][T11320] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.057791][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  302.701763][T11374] ip_tables: iptables: counters copy to user failed while replacing table
[  304.583922][T11407] binder: 11404:11407 ioctl c0306201 0 returned -14
[  304.635977][ T4947] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  304.654630][ T4947] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  304.703015][T11411] loop8: detected capacity change from 0 to 4096
[  304.713373][T11414] udevd[11414]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  304.745515][T11411] EXT4-fs (loop8): Test dummy encryption mode enabled
[  304.772810][T11411] EXT4-fs (loop8): Ignoring removed orlov option
[  304.831543][T11411] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,bsddf,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  304.925270][T11419] loop2: detected capacity change from 0 to 256
[  304.993266][T11419] FAT-fs (loop2): bogus logical sector size 0
[  305.023376][T11419] FAT-fs (loop2): Can't find a valid FAT filesystem
[  305.191104][T11435] loop8: detected capacity change from 0 to 256
[  305.257091][T11435] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  306.807594][    C1] sched: RT throttling activated
[  307.030965][T11457] loop8: detected capacity change from 0 to 128
[  307.195287][T11457] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  307.321368][  T151] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  307.492133][T11462] FAULT_INJECTION: forcing a failure.
[  307.492133][T11462] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  307.527696][T11462] CPU: 1 PID: 11462 Comm: syz.8.1903 Not tainted syzkaller #0
[  307.535288][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  307.545371][T11462] Call Trace:
[  307.548642][T11462]  <TASK>
[  307.551563][T11462]  dump_stack_lvl+0x188/0x250
[  307.556244][T11462]  ? show_regs_print_info+0x20/0x20
[  307.561435][T11462]  ? load_image+0x410/0x410
[  307.565937][T11462]  ? __lock_acquire+0x7b50/0x7b50
[  307.570955][T11462]  should_fail+0x383/0x4b0
[  307.575378][T11462]  prepare_alloc_pages+0x1e3/0x5b0
[  307.580499][T11462]  __alloc_pages+0x11b/0x480
[  307.585087][T11462]  ? zone_statistics+0x170/0x170
[  307.590023][T11462]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  307.596265][T11462]  ? lock_chain_count+0x20/0x20
[  307.601111][T11462]  ? alloc_pages+0x452/0x560
[  307.605704][T11462]  kmalloc_order+0x40/0x150
[  307.610196][T11462]  kmalloc_order_trace+0x14/0xf0
[  307.615119][T11462]  vhost_dev_set_owner+0x3b0/0xa60
[  307.620228][T11462]  ? vhost_dev_has_owner+0x40/0x40
[  307.625332][T11462]  ? vhost_set_backend_features+0x1b0/0x1b0
[  307.631223][T11462]  vhost_net_ioctl+0x6e0/0x1350
[  307.636068][T11462]  ? vhost_net_chr_poll+0x50/0x50
[  307.641088][T11462]  ? bpf_lsm_file_ioctl+0x5/0x10
[  307.646033][T11462]  ? security_file_ioctl+0x7c/0xa0
[  307.651132][T11462]  ? vhost_net_chr_poll+0x50/0x50
[  307.656140][T11462]  __se_sys_ioctl+0xfa/0x170
[  307.660717][T11462]  do_syscall_64+0x4c/0xa0
[  307.665121][T11462]  ? clear_bhb_loop+0x30/0x80
[  307.669786][T11462]  ? clear_bhb_loop+0x30/0x80
[  307.674451][T11462]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  307.680331][T11462] RIP: 0033:0x7f6f6073d159
[  307.684737][T11462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.704326][T11462] RSP: 002b:00007f6f5e995028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  307.712728][T11462] RAX: ffffffffffffffda RBX: 00007f6f609c4fa0 RCX: 00007f6f6073d159
[  307.720684][T11462] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000005
[  307.728637][T11462] RBP: 00007f6f607d403b R08: 0000000000000000 R09: 0000000000000000
[  307.736591][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.744542][T11462] R13: 00007f6f609c5038 R14: 00007f6f609c4fa0 R15: 00007ffde7f6bf18
[  307.752509][T11462]  </TASK>
[  307.790602][T11469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1906'.
[  307.834512][T11469] device ip6gre1 entered promiscuous mode
[  307.835830][T11473] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1917'.
[  307.861797][T11469] netlink: 'syz.1.1906': attribute type 6 has an invalid length.
[  307.882855][T11469] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1906'.
[  308.185670][T11489] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1912'.
[  308.375758][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1916'.
[  308.788860][T11511] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  308.798548][T11511] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  308.897808][ T4272] Bluetooth: hci3: command 0x0406 tx timeout
[  309.357267][T11522] loop8: detected capacity change from 0 to 32768
[  309.618646][T11522] ERROR: (device loop8): dbAdjCtl: the maximum free buddy is not the old root
[  309.618646][T11522] 
[  309.653137][T11522] ERROR: (device loop8): remounting filesystem as read-only
[  309.808630][T11530] loop2: detected capacity change from 0 to 32768
[  309.836921][T11538] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1927'.
[  309.924394][T11530] 
[  309.924394][T11530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  309.924394][T11530] 
[  310.153745][T11530] 
[  310.153745][T11530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.153745][T11530] 
[  310.186092][T11530] 
[  310.186092][T11530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.186092][T11530] 
[  310.227486][T11530] 
[  310.227486][T11530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.227486][T11530] 
[  310.247958][T11530] 
[  310.247958][T11530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.247958][T11530] 
[  310.258935][T11530] 
[  310.258935][T11530]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.258935][T11530] 
[  310.277463][T11555] loop8: detected capacity change from 0 to 512
[  310.286355][  T275] 
[  310.286355][  T275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.286355][  T275] 
[  310.299396][   T26] kauditd_printk_skb: 474 callbacks suppressed
[  310.299410][   T26] audit: type=1800 audit(1700000056.990:566): pid=11530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1925" name="file1" dev="loop2" ino=4 res=0 errno=0
[  310.382129][T11557] 
[  310.382129][T11557]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.382129][T11557] 
[  310.396228][T11555] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none.
[  310.442420][T11557] 
[  310.442420][T11557]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.442420][T11557] 
[  310.474051][T11557] 
[  310.474051][T11557]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.474051][T11557] 
[  310.484932][T11557] 
[  310.484932][T11557]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.484932][T11557] 
[  310.495561][T11557] 
[  310.495561][T11557]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.495561][T11557] 
[  310.514833][  T275] 
[  310.514833][  T275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.514833][  T275] 
[  310.514945][T11555] EXT4-fs (loop8): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  310.542788][T11560] 
[  310.542788][T11560]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.542788][T11560] 
[  310.601490][T11560] 
[  310.601490][T11560]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.601490][T11560] 
[  310.646071][T11560] 
[  310.646071][T11560]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.646071][T11560] 
[  310.659393][T11560] 
[  310.659393][T11560]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.659393][T11560] 
[  310.735045][T11560] 
[  310.735045][T11560]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.735045][T11560] 
[  310.866059][  T276] 
[  310.866059][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.866059][  T276] 
[  310.972858][  T151] 
[  310.972858][  T151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  310.972858][  T151] 
[  311.023821][  T151] 
[  311.023821][  T151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.023821][  T151] 
[  311.049244][  T151] 
[  311.049244][  T151]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.049244][  T151] 
[  311.079813][ T8868] 
[  311.079813][ T8868]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.079813][ T8868] 
[  311.272294][  T275] 
[  311.272294][  T275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.272294][  T275] 
[  311.374815][ T8868] 
[  311.374815][ T8868]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.374815][ T8868] 
[  311.825005][T11579] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1943'.
[  311.878684][T11579] batman_adv: batadv0: Interface deactivated: dummy0
[  311.962523][T11579] batman_adv: batadv0: Removing interface: dummy0
[  311.974558][T11586] loop2: detected capacity change from 0 to 16
[  312.035528][T11586] erofs: (device loop2): mounted with root inode @ nid 36.
[  312.079725][T11586] attempt to access beyond end of device
[  312.079725][T11586] loop2: rw=0, want=40, limit=16
[  313.419144][T11623] netlink: 'syz.1.1959': attribute type 28 has an invalid length.
[  313.426970][T11623] netlink: 'syz.1.1959': attribute type 3 has an invalid length.
[  313.434771][T11623] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1959'.
[  314.387478][T11634] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  314.849131][T11628] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1958'.
[  314.885443][T11628] batman_adv: batadv0: Interface deactivated: dummy0
[  314.959615][T11628] batman_adv: batadv0: Removing interface: dummy0
[  315.403472][T11659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.423349][T11659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.441659][T11659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.458772][T11659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.488770][T11659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.546252][T11682] overlayfs: failed to clone upperpath
[  316.798380][T11661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.925845][T11688] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1981'.
[  317.061170][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.067813][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.109336][T11705] tipc: Failed to remove unknown binding: 66,0,0/4:1808925794/1808925796
[  317.120147][T11705] tipc: Failed to remove unknown binding: 66,0,0/4:1808925794/1808925795
[  317.139710][T11705] tipc: Failed to remove unknown binding: 66,0,0/4:1808925794/1808925796
[  317.149014][T11705] tipc: Failed to remove unknown binding: 66,0,0/4:1808925794/1808925795
[  317.401886][ T4234] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  317.575485][T11719] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1992'.
[  317.603297][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  317.637409][T11719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.931101][ T4234] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  317.960533][ T4234] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.013806][ T4234] usb 9-1: Product: syz
[  318.034039][ T4234] usb 9-1: Manufacturer: syz
[  318.054261][ T4234] usb 9-1: SerialNumber: syz
[  318.128826][ T4234] usb 9-1: config 0 descriptor??
[  318.380299][ T4942] usb 9-1: USB disconnect, device number 8
[  320.058918][T11751] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2001'.
[  320.394134][T11761] netlink: 'syz.3.2007': attribute type 27 has an invalid length.
[  321.297454][T11810] overlayfs: failed to clone upperpath
[  321.366994][T11810] overlayfs: failed to clone upperpath
[  322.423070][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'.
[  322.483383][T11839] FAULT_INJECTION: forcing a failure.
[  322.483383][T11839] name failslab, interval 1, probability 0, space 0, times 0
[  322.512174][T11839] CPU: 0 PID: 11839 Comm: syz.8.2037 Not tainted syzkaller #0
[  322.519769][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  322.529923][T11839] Call Trace:
[  322.533218][T11839]  <TASK>
[  322.536159][T11839]  dump_stack_lvl+0x188/0x250
[  322.540853][T11839]  ? show_regs_print_info+0x20/0x20
[  322.546071][T11839]  ? load_image+0x410/0x410
[  322.550594][T11839]  ? __might_sleep+0xf0/0xf0
[  322.555198][T11839]  ? __lock_acquire+0x7b50/0x7b50
[  322.560243][T11839]  should_fail+0x383/0x4b0
[  322.564677][T11839]  should_failslab+0x5/0x20
[  322.569194][T11839]  slab_pre_alloc_hook+0x51/0xc0
[  322.574234][T11839]  __kmalloc+0x6b/0x340
[  322.578407][T11839]  ? security_cred_alloc_blank+0x42/0x120
[  322.584140][T11839]  ? rcu_is_watching+0x11/0xa0
[  322.588918][T11839]  security_cred_alloc_blank+0x42/0x120
[  322.594480][T11839]  cred_alloc_blank+0x83/0xd0
[  322.599175][T11839]  keyctl_session_to_parent+0x3e/0x9c0
[  322.604653][T11839]  __se_sys_keyctl+0x578/0xa20
[  322.609433][T11839]  ? __x64_sys_keyctl+0xc0/0xc0
[  322.614309][T11839]  ? __context_tracking_exit+0x4c/0x80
[  322.619787][T11839]  ? __lock_acquire+0x7b50/0x7b50
[  322.624924][T11839]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  322.630923][T11839]  ? lock_chain_count+0x20/0x20
[  322.635798][T11839]  ? lockdep_hardirqs_on+0x94/0x140
[  322.641009][T11839]  ? __x64_sys_keyctl+0x1c/0xc0
[  322.645880][T11839]  do_syscall_64+0x4c/0xa0
[  322.650359][T11839]  ? clear_bhb_loop+0x30/0x80
[  322.655064][T11839]  ? clear_bhb_loop+0x30/0x80
[  322.659761][T11839]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  322.665673][T11839] RIP: 0033:0x7f6f6073d159
[  322.670101][T11839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.689718][T11839] RSP: 002b:00007f6f5e995028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  322.698147][T11839] RAX: ffffffffffffffda RBX: 00007f6f609c4fa0 RCX: 00007f6f6073d159
[  322.706108][T11839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[  322.714076][T11839] RBP: 00007f6f607d403b R08: 0000000000000000 R09: 0000000000000000
[  322.722063][T11839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.730092][T11839] R13: 00007f6f609c5038 R14: 00007f6f609c4fa0 R15: 00007ffde7f6bf18
[  322.738182][T11839]  </TASK>
[  323.605356][T11853] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  325.245609][T11912] Cannot find set identified by id 4 to match
[  325.296875][T11913] loop8: detected capacity change from 0 to 16
[  325.391679][T11923] jffs2: notice: (11923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  325.431616][T11913] erofs: (device loop8): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  326.536029][T11940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.579824][ T4947] kernel write not supported for file [eventfd] (pid: 4947 comm: kworker/0:18)
[  327.534034][T11938] overlayfs: failed to clone upperpath
[  328.511648][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2080'.
[  329.791341][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2090'.
[  331.137243][T12019] loop8: detected capacity change from 0 to 1024
[  331.467893][T12019] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  331.526595][T12019] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102]
[  331.537998][T12019] System zones: 0-1, 3-12
[  331.570238][T12019] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,nodelalloc,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none.
[  331.900568][T12046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2105'.
[  331.925806][   T26] audit: type=1326 audit(1700000078.620:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.8.2104" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f6f60736ed7 code=0x0
[  332.243742][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2114'.
[  332.294618][T12065] netlink: 'syz.9.2114': attribute type 10 has an invalid length.
[  332.335761][T12065] bond0: (slave wlan1): Opening slave failed
[  332.774589][T12089] tipc: Failed to remove unknown binding: 66,0,0/4:2257387930/2257387931
[  332.775079][T12089] tipc: Failed to remove unknown binding: 66,0,0/4:2257387930/2257387931
[  332.842242][T12093] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  332.870817][T12093] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2122'.
[  332.912812][T12093] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  334.390140][T12119] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  334.745254][T12146] netlink: 1320 bytes leftover after parsing attributes in process `syz.9.2139'.
[  335.761017][T12158] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[  338.588983][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  338.605674][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  338.616601][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  338.625378][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  338.633831][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  338.642212][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  338.650867][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  338.663365][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  338.675098][T12210] tipc: Resetting bearer <eth:team0>
[  338.684731][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  338.693172][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  339.143446][T12212] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2160'.
[  339.183153][ T4234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  339.325938][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'.
[  339.409192][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'.
[  339.522378][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'.
[  339.596485][T12233] netlink: 'syz.8.2167': attribute type 1 has an invalid length.
[  339.607538][T12232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2166'.
[  339.657609][T12232] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  339.686503][T12232] bond3: (slave vti0): Error -95 calling set_mac_address
[  339.687786][ T4234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  339.726122][T12233] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2167'.
[  339.749740][T12228] bond3: (slave vlan3): Error -99 calling set_mac_address
[  339.777810][ T4234] Bluetooth: hci1: command 0x0406 tx timeout
[  339.849404][T12226] infiniband syz2: set down
[  339.863231][T12226] infiniband syz2: added ipvlan0
[  339.891541][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2169'.
[  339.945546][T12226] RDS/IB: syz2: added
[  339.963515][T12226] smc: adding ib device syz2 with port count 1
[  339.981767][T12226] smc:    ib device syz2 port 1 has pnetid 
[  340.545241][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'.
[  340.617212][T12258] 8021q: adding VLAN 0 to HW filter on device bond5
[  342.334408][T12306] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2191'.
[  342.397129][T12304] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2190'.
[  342.412933][T12312] BUG: MAX_LOCK_DEPTH too low!
[  342.417724][T12312] turning off the locking correctness validator.
[  342.424042][T12312] depth: 48  max: 48!
[  342.428035][T12312] 48 locks held by syz.9.2202/12312:
[  342.433315][T12312]  #0: ffff88802c6dc0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x1d/0x40
[  342.442545][T12312]  #1: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.451855][T12312]  #2: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.461176][T12312]  #3: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.470497][T12312]  #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.479911][T12312]  #5: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.489316][T12312]  #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.498643][T12312]  #7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.507960][T12312]  #8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.517282][T12312]  #9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.526599][T12312]  #10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.536099][T12312]  #11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.545509][T12312]  #12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.554920][T12312]  #13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.564419][T12312]  #14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.573829][T12312]  #15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.583244][T12312]  #16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.592677][T12312]  #17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.602090][T12312]  #18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.611539][T12312]  #19: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.620951][T12312]  #20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.630357][T12312]  #21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.639773][T12312]  #22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.649189][T12312]  #23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.658614][T12312]  #24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.668022][T12312]  #25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.677426][T12312]  #26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.686829][T12312]  #27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.696231][T12312]  #28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.705641][T12312]  #29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.715048][T12312]  #30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.724461][T12312]  #31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.733960][T12312]  #32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.743469][T12312]  #33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.752881][T12312]  #34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.762289][T12312]  #35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.771697][T12312]  #36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.781210][T12312]  #37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.790630][T12312]  #38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.800066][T12312]  #39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.809487][T12312]  #40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.818900][T12312]  #41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.828312][T12312]  #42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.837725][T12312]  #43: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.847392][T12312]  #44: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.856793][T12312]  #45: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.866195][T12312]  #46: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  342.875603][T12312]  #47: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  342.885010][T12312] INFO: lockdep is turned off.
[  342.889765][T12312] CPU: 1 PID: 12312 Comm: syz.9.2202 Not tainted syzkaller #0
[  342.897214][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  342.907266][T12312] Call Trace:
[  342.910540][T12312]  <TASK>
[  342.913464][T12312]  dump_stack_lvl+0x188/0x250
[  342.918147][T12312]  ? show_regs_print_info+0x20/0x20
[  342.923346][T12312]  ? load_image+0x410/0x410
[  342.927849][T12312]  __lock_acquire+0x1247/0x7b50
[  342.932699][T12312]  ? rpl_output+0x321/0x730
[  342.937202][T12312]  ? lwtunnel_output+0x27e/0x440
[  342.942141][T12312]  ? kfree+0xef/0x2a0
[  342.946118][T12312]  ? verify_lock_unused+0x140/0x140
[  342.951313][T12312]  ? stack_trace_save+0xa6/0xf0
[  342.956334][T12312]  ? stack_trace_snprint+0xe0/0xe0
[  342.961438][T12312]  ? stack_trace_save+0xf0/0xf0
[  342.966286][T12312]  ? mark_lock+0x94/0x320
[  342.970608][T12312]  ? __lock_acquire+0x1305/0x7b50
[  342.975634][T12312]  ? rpl_output+0x178/0x730
[  342.980198][T12312]  lock_acquire+0x19e/0x400
[  342.984709][T12312]  ? rcu_lock_acquire+0x9/0x30
[  342.989472][T12312]  ? rpl_output+0x321/0x730
[  342.993974][T12312]  ? lwtunnel_output+0x27e/0x440
[  342.998913][T12312]  ? rpl_output+0x321/0x730
[  343.003510][T12312]  ? lwtunnel_output+0x27e/0x440
[  343.008462][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.013849][T12312]  ? verify_lock_unused+0x140/0x140
[  343.019050][T12312]  ? mark_lock+0x94/0x320
[  343.023381][T12312]  rcu_lock_acquire+0x2a/0x30
[  343.028070][T12312]  ? rcu_lock_acquire+0x9/0x30
[  343.032917][T12312]  ip6_dst_check+0xe2/0x7a0
[  343.037419][T12312]  ? skb_header_pointer+0x120/0x120
[  343.042620][T12312]  dst_cache_per_cpu_get+0x1a3/0x310
[  343.047933][T12312]  rpl_output+0x165/0x730
[  343.052272][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.056771][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.061709][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.067091][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.071596][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.076538][T12312]  lwtunnel_output+0x27e/0x440
[  343.081357][T12312]  rpl_output+0x321/0x730
[  343.085689][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.090187][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.095123][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.100496][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.105016][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.109950][T12312]  lwtunnel_output+0x27e/0x440
[  343.114711][T12312]  rpl_output+0x321/0x730
[  343.119042][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.123565][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.128507][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.133883][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.138384][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.143324][T12312]  lwtunnel_output+0x27e/0x440
[  343.148094][T12312]  rpl_output+0x321/0x730
[  343.152421][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.156916][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.161845][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.167219][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.171717][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.176755][T12312]  lwtunnel_output+0x27e/0x440
[  343.181604][T12312]  rpl_output+0x321/0x730
[  343.185933][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.190437][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.195366][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.200739][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.205245][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.210276][T12312]  lwtunnel_output+0x27e/0x440
[  343.215051][T12312]  rpl_output+0x321/0x730
[  343.219474][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.224012][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.228957][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.234337][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.239101][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.244380][T12312]  lwtunnel_output+0x27e/0x440
[  343.249144][T12312]  rpl_output+0x321/0x730
[  343.253473][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.257965][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.262890][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.268252][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.272742][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.277683][T12312]  lwtunnel_output+0x27e/0x440
[  343.282448][T12312]  rpl_output+0x321/0x730
[  343.286771][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.291363][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.296387][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.301753][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.306250][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.311356][T12312]  lwtunnel_output+0x27e/0x440
[  343.316121][T12312]  rpl_output+0x321/0x730
[  343.320434][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.324918][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.329835][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.335308][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.339806][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.344723][T12312]  lwtunnel_output+0x27e/0x440
[  343.349474][T12312]  rpl_output+0x321/0x730
[  343.353793][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.358278][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.363201][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.368557][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.373044][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.377963][T12312]  lwtunnel_output+0x27e/0x440
[  343.382721][T12312]  rpl_output+0x321/0x730
[  343.387051][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.391532][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.396451][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.401814][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.406311][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.411230][T12312]  lwtunnel_output+0x27e/0x440
[  343.415981][T12312]  rpl_output+0x321/0x730
[  343.420292][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.424800][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.429720][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.435076][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.439563][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.444479][T12312]  lwtunnel_output+0x27e/0x440
[  343.449229][T12312]  rpl_output+0x321/0x730
[  343.453540][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.458020][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.462935][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.468289][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.472772][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.477691][T12312]  lwtunnel_output+0x27e/0x440
[  343.482447][T12312]  rpl_output+0x321/0x730
[  343.486758][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.491238][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.496159][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.501521][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.506003][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.510923][T12312]  lwtunnel_output+0x27e/0x440
[  343.515668][T12312]  rpl_output+0x321/0x730
[  343.519985][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.524472][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.529389][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.534745][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.539230][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.544146][T12312]  lwtunnel_output+0x27e/0x440
[  343.548909][T12312]  rpl_output+0x321/0x730
[  343.553221][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.557708][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.562623][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.567977][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.572463][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.577379][T12312]  lwtunnel_output+0x27e/0x440
[  343.582126][T12312]  rpl_output+0x321/0x730
[  343.586447][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.590926][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.595843][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.601201][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.605690][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.610621][T12312]  lwtunnel_output+0x27e/0x440
[  343.615371][T12312]  rpl_output+0x321/0x730
[  343.619681][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.624167][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.629082][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.634434][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.638916][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.643831][T12312]  lwtunnel_output+0x27e/0x440
[  343.648669][T12312]  rpl_output+0x321/0x730
[  343.652983][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.657471][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.662387][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.667747][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.672254][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.677187][T12312]  lwtunnel_output+0x27e/0x440
[  343.681940][T12312]  rpl_output+0x321/0x730
[  343.686259][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.690752][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.695679][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.701033][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.705519][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.710434][T12312]  lwtunnel_output+0x27e/0x440
[  343.715183][T12312]  rpl_output+0x321/0x730
[  343.719491][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.723972][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.728885][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.734243][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.738727][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.743639][T12312]  lwtunnel_output+0x27e/0x440
[  343.748388][T12312]  rpl_output+0x321/0x730
[  343.752698][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.757179][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.762101][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.767458][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.771944][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.776860][T12312]  lwtunnel_output+0x27e/0x440
[  343.781605][T12312]  rpl_output+0x321/0x730
[  343.785913][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.790396][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.795319][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.800673][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.805159][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.810074][T12312]  lwtunnel_output+0x27e/0x440
[  343.814824][T12312]  rpl_output+0x321/0x730
[  343.819134][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.823632][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.828549][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.833905][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.838391][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.843305][T12312]  lwtunnel_output+0x27e/0x440
[  343.848052][T12312]  rpl_output+0x321/0x730
[  343.852360][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.856842][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.861760][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.867112][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.871598][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.876516][T12312]  lwtunnel_output+0x27e/0x440
[  343.881424][T12312]  rpl_output+0x321/0x730
[  343.885734][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.890212][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.895129][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.900481][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.904967][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.909883][T12312]  lwtunnel_output+0x27e/0x440
[  343.914627][T12312]  rpl_output+0x321/0x730
[  343.918939][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.923420][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.928340][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.933693][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.938180][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.943097][T12312]  lwtunnel_output+0x27e/0x440
[  343.947842][T12312]  rpl_output+0x321/0x730
[  343.952154][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.956635][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.961548][T12312]  ? read_lock_is_recursive+0x10/0x10
[  343.966905][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.971387][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.976300][T12312]  lwtunnel_output+0x27e/0x440
[  343.981048][T12312]  rpl_output+0x321/0x730
[  343.985361][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  343.989847][T12312]  ? rpl_destroy_state+0x20/0x20
[  343.994781][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.000137][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.004626][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.009541][T12312]  lwtunnel_output+0x27e/0x440
[  344.014295][T12312]  rpl_output+0x321/0x730
[  344.018604][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.023089][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.028006][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.033360][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.037862][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.042779][T12312]  lwtunnel_output+0x27e/0x440
[  344.047525][T12312]  rpl_output+0x321/0x730
[  344.051839][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.056320][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.061240][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.066590][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.071076][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.075991][T12312]  lwtunnel_output+0x27e/0x440
[  344.080735][T12312]  rpl_output+0x321/0x730
[  344.085042][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.089526][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.094445][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.099802][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.104288][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.109203][T12312]  lwtunnel_output+0x27e/0x440
[  344.114061][T12312]  rpl_output+0x321/0x730
[  344.118385][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.122886][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.127816][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.133196][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.137685][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.142604][T12312]  lwtunnel_output+0x27e/0x440
[  344.147354][T12312]  rpl_output+0x321/0x730
[  344.151669][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.156152][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.161068][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.166423][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.170910][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.175823][T12312]  lwtunnel_output+0x27e/0x440
[  344.180569][T12312]  rpl_output+0x321/0x730
[  344.184878][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.189360][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.194276][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.199626][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.204110][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.209026][T12312]  lwtunnel_output+0x27e/0x440
[  344.213772][T12312]  rpl_output+0x321/0x730
[  344.218084][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.222565][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.227481][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.232835][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.237319][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.242235][T12312]  lwtunnel_output+0x27e/0x440
[  344.246980][T12312]  rpl_output+0x321/0x730
[  344.251287][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.255768][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.260683][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.266032][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.270516][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.275447][T12312]  lwtunnel_output+0x27e/0x440
[  344.280192][T12312]  rpl_output+0x321/0x730
[  344.284500][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.288985][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.293899][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.299253][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.303739][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.308660][T12312]  lwtunnel_output+0x27e/0x440
[  344.313419][T12312]  rpl_output+0x321/0x730
[  344.317733][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.322230][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.327173][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.332536][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.337029][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.341948][T12312]  lwtunnel_output+0x27e/0x440
[  344.346694][T12312]  rpl_output+0x321/0x730
[  344.351007][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.355516][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.360440][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.365793][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.370278][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.375195][T12312]  lwtunnel_output+0x27e/0x440
[  344.379953][T12312]  rpl_output+0x321/0x730
[  344.384279][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.388764][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.393690][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.399056][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.403550][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.408491][T12312]  lwtunnel_output+0x27e/0x440
[  344.413239][T12312]  rpl_output+0x321/0x730
[  344.417549][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.422039][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.426953][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.432310][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.436791][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.441707][T12312]  lwtunnel_output+0x27e/0x440
[  344.446454][T12312]  rpl_output+0x321/0x730
[  344.450765][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.455248][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.460161][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.465514][T12312]  ? rpl_do_srh+0x9c1/0xe50
[  344.469999][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.474922][T12312]  lwtunnel_output+0x27e/0x440
[  344.479667][T12312]  rpl_output+0x321/0x730
[  344.483978][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.488892][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.494245][T12312]  ? __local_bh_enable_ip+0x136/0x1c0
[  344.499594][T12312]  ? lockdep_hardirqs_on+0x94/0x140
[  344.504778][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.509694][T12312]  lwtunnel_output+0x27e/0x440
[  344.514460][T12312]  rpl_output+0x321/0x730
[  344.518772][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.523688][T12312]  ? nf_hook+0x2ea/0x360
[  344.527914][T12312]  ? rpl_destroy_state+0x20/0x20
[  344.532851][T12312]  lwtunnel_output+0x27e/0x440
[  344.537597][T12312]  ip6_xmit+0x1089/0x16e0
[  344.541913][T12312]  ? ip6_autoflowlabel+0xd0/0xd0
[  344.546829][T12312]  ? __sk_dst_check+0x14e/0x290
[  344.551662][T12312]  ? read_lock_is_recursive+0x10/0x10
[  344.557018][T12312]  ? inet6_csk_route_socket+0x613/0xed0
[  344.562639][T12312]  inet6_csk_xmit+0x405/0x680
[  344.567302][T12312]  ? inet6_csk_addr2sockaddr+0x1d0/0x1d0
[  344.572915][T12312]  ? csum_ipv6_magic+0x1e/0x80
[  344.577664][T12312]  __tcp_transmit_skb+0x1ca3/0x31e0
[  344.582854][T12312]  ? __tcp_send_ack+0x5d0/0x5d0
[  344.587691][T12312]  ? tcp_fastopen_cookie_check+0x269/0x3c0
[  344.593600][T12312]  tcp_connect+0x2d1a/0x4970
[  344.598199][T12312]  tcp_v6_connect+0x11cf/0x1a10
[  344.603043][T12312]  ? tcp_v6_pre_connect+0xf0/0xf0
[  344.608057][T12312]  ? tcp_sendmsg_fastopen+0x1d5/0x600
[  344.613420][T12312]  ? tcp_sendmsg_locked+0x2efb/0x3330
[  344.618778][T12312]  ? tcp_sendmsg+0x2b/0x40
[  344.623178][T12312]  ? __sys_sendto+0x46d/0x620
[  344.627835][T12312]  ? __x64_sys_sendto+0xda/0xf0
[  344.632668][T12312]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.638716][T12312]  __inet_stream_connect+0x244/0xd80
[  344.643988][T12312]  ? inet_dgram_connect+0x340/0x340
[  344.649174][T12312]  tcp_sendmsg_fastopen+0x38f/0x600
[  344.654358][T12312]  tcp_sendmsg_locked+0x2efb/0x3330
[  344.659538][T12312]  ? aa_sk_perm+0x910/0x910
[  344.664028][T12312]  ? mark_lock+0x94/0x320
[  344.668337][T12312]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  344.674302][T12312]  ? lock_chain_count+0x20/0x20
[  344.679135][T12312]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[  344.685103][T12312]  ? tcp_free_fastopen_req+0x70/0x70
[  344.690376][T12312]  tcp_sendmsg+0x2b/0x40
[  344.694601][T12312]  __sys_sendto+0x46d/0x620
[  344.699093][T12312]  ? __ia32_sys_getpeername+0x80/0x80
[  344.704454][T12312]  ? lock_chain_count+0x20/0x20
[  344.709287][T12312]  __x64_sys_sendto+0xda/0xf0
[  344.713947][T12312]  do_syscall_64+0x4c/0xa0
[  344.718344][T12312]  ? clear_bhb_loop+0x30/0x80
[  344.723002][T12312]  ? clear_bhb_loop+0x30/0x80
[  344.727659][T12312]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.733530][T12312] RIP: 0033:0x7fdc5daf0159
[  344.737928][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.757518][T12312] RSP: 002b:00007fdc5bd48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  344.765919][T12312] RAX: ffffffffffffffda RBX: 00007fdc5dd77fa0 RCX: 00007fdc5daf0159
[  344.773882][T12312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  344.781836][T12312] RBP: 00007fdc5db8703b R08: 00002000000001c0 R09: 000000000000001c
[  344.789788][T12312] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000000
[  344.797738][T12312] R13: 00007fdc5dd78038 R14: 00007fdc5dd77fa0 R15: 00007fff2bcae8a8
[  344.805695][T12312]  </TASK>
[  345.694137][T12312] syz.9.2202 (12312) used greatest stack depth: 4304 bytes left