last executing test programs:

3m39.635140729s ago: executing program 0 (id=222):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8919, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)
read(r1, &(0x7f00000004c0)=""/11, 0xffffff27)

3m38.576171465s ago: executing program 0 (id=232):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x40, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}}, 0x0)
syz_emit_ethernet(0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0c00000000040088a8420081001800090601040004c8bec8c4aaaaaaaaaabb168cbbbbbbbbbbbbcba533e2b4"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000740)={0x2020}, 0x2020)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r3, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90)
close_range(r2, r4, 0x0)

3m37.655097747s ago: executing program 0 (id=244):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000f, 0x204031, 0xffffffffffffffff, 0x50728000)
r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0)
mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)
close(0xffffffffffffffff)

3m36.940192644s ago: executing program 0 (id=239):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz2\xc3O6\x91\x93\xf00\x83\x1c\xac\x19\xa8\xffj\x8b\xc2\xeb\xd9\x8f\xbf40\x1f\xde\x1e\xcd\x18L\x0eC\xd7\xafe\x81?\r\xf1\x0e\x8e5fC?\xfa+#\xe7\xb6\x1f\xde!\xf1\x97\xd5@N\xb4\xee(\xa3\x1a\xe5\xc2\x83\xf6\x18U\x86\xea\xc7\xccR\x11\xf9\xa7f\xca\x93\x17\x85\x96\xb3c\xdc\xc4\xdcz\xeb\xd0\x14\x92\x13\x8dg\x11\xa0\xbe\xa2Xj\x97\x83\xeby\xa4;S\x04\xc7\xd37\xd24\x98@\x8cD\x92', 0x20, 0x100ffd}, 0xffffffffffffffb0, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

3m35.88661053s ago: executing program 0 (id=246):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x7, 0xae, 0x0, 0x0, @str='\'^\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x8810}, 0x4c054)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x10)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./mysys/bus/pci/devices/0000:00:05.0/resource0/file0\x00', 0x0, 0x102)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x25dfdbff, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}}, 0x0)
syz_clone3(&(0x7f0000000c00)={0xae2a0080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0x0], 0x1}, 0x58)

3m35.648196127s ago: executing program 0 (id=248):
syz_usb_connect(0x4, 0x2d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x2e, 0xfff9}, 0x8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000680)={0x8e, 0xffffffffffffffff, 0x31, {0x7, 0x8000000000000003}, 0x2b}, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xdc3c, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0xfd67, &(0x7f0000000800), 0x3d, 0x0, 0x45}}], 0x4000210, 0x10002, 0x0)

3m20.007766348s ago: executing program 32 (id=248):
syz_usb_connect(0x4, 0x2d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x2e, 0xfff9}, 0x8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000680)={0x8e, 0xffffffffffffffff, 0x31, {0x7, 0x8000000000000003}, 0x2b}, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xdc3c, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0xfd67, &(0x7f0000000800), 0x3d, 0x0, 0x45}}], 0x4000210, 0x10002, 0x0)

2m4.662910464s ago: executing program 1 (id=678):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x100}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES64=r3], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

2m4.580344596s ago: executing program 1 (id=682):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000340)={0xd77, 0xf423f, 0xfffffffffffffffe, 0x0, 0x0, 0x4b, 0x8, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4, 0x0, 0x0, 0x2, 0x3, 0x80000000000000})

2m3.487925172s ago: executing program 1 (id=686):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000040000000002, 0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x4000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m0.622968183s ago: executing program 1 (id=690):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="c3aa00fe1001000071101a00e1f107000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x10}, 0x2c)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x15}})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x4040040)

2m0.253883121s ago: executing program 1 (id=694):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000300)={0x40, 0x6, 0x3, "9443a5"}, 0x0, 0x0})

1m59.302933744s ago: executing program 1 (id=706):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x310)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x800, 0x5, 0x6, 0x401, 0x101, 0x8000}, {0x8, 0x7fffffff, 0x1, 0x0, 0x9, 0x3}], ['\x00']})
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
unshare(0x60040000)

1m43.250047887s ago: executing program 33 (id=706):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x310)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x800, 0x5, 0x6, 0x401, 0x101, 0x8000}, {0x8, 0x7fffffff, 0x1, 0x0, 0x9, 0x3}], ['\x00']})
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000000)='3', 0x4e)
unshare(0x60040000)

11.083765959s ago: executing program 6 (id=1081):
socket$netlink(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000400b70500000000000085000000630000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x23000000, 0xa, 0x0, &(0x7f0000002280)="00112233445500112233", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x1e)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

9.625952864s ago: executing program 6 (id=1086):
syz_usb_disconnect(0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40500, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000040400000000000000100000000000000020"], 0x24, 0x0)
rmdir(&(0x7f0000000180)='./file0\x00')
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

9.36874569s ago: executing program 3 (id=1090):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x289, &(0x7f0000000b40)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x15800, &(0x7f0000000300), 0x1, 0x513, &(0x7f0000000500)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)

7.081500206s ago: executing program 2 (id=1097):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20"], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe(0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448)
socket(0x26, 0x6, 0xff)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd602e"], 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0)

6.976777359s ago: executing program 2 (id=1098):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x841e, &(0x7f0000000100)={[{@dioread_lock}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0)
write(r2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0)
syz_usb_connect(0x3, 0xb3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

6.771235144s ago: executing program 3 (id=1100):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x0)

5.768466549s ago: executing program 3 (id=1102):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="a8", 0x1)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/142, 0x8e}, 0x6}], 0x1, 0x182, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000a40)="89ba53b519a795020072aed129d4b5247c983466b3d757e832333a64d9abf416fd83f942661c47bcdf71f7d02fa27ba20d03474a4a4bce636eab1757928ca8d2b882b2b49ef18e2af960ac066efe5ef92769c5ee6da9435467583e6b541ce9a21c3ce5cb5fbdad9a45de0000000000000000000034bafe45a9cbdffee4947123", 0x80)

5.195940732s ago: executing program 5 (id=1104):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$rds(0x15, 0x5, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020156ff", @ANYRES32=r3, @ANYBLOB="080002007f0000014e3534f7479bf4556f492f7a9faa0d131596f1e8cf5a23b32c62e0204523a8cf50bb3aaa5a174ba3f249b91b5516d1d918062b6e1025090309dfabd5d247a4b28eedfeea3b23923903b90f72bc15ccad86a4acdb297a9bf7e0b2965f1c95f1f1b1d3377cba27741224a35ac61fe5ae17019ef1b9900a84e70126d5bdef"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b)

5.101772685s ago: executing program 5 (id=1105):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)

4.945855829s ago: executing program 4 (id=1108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0xfffffd2f, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x804)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

4.844160531s ago: executing program 4 (id=1109):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000140)=0x2)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000180)=0x1)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

4.843853201s ago: executing program 4 (id=1110):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901)
open_tree(r0, &(0x7f0000000640)='\x00', 0x81101)
read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, r3, 0xffffffffffffffff)
syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000000c80)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="27a1a7ad17faa87712ed4c30f74e5579a262ced5a928605a365276ab1a9c5728bcc4a349acb685ffff47eb695b226be4141600000000", @ANYRESDEC, @ANYRES64], 0x9f, 0x1a0, &(0x7f0000000040)="$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")
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000026c0)={'trans=virtio,', {[{@cache_readahead}, {@access_uid={'access', 0x3d, r1}}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@fsmagic={'fsmagic', 0x3d, 0x3d13}}]}})
r4 = epoll_create1(0x80000)
r5 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f00000015c0)={{r5}, 0x0, 0x2, @unused=[0x100, 0x1, 0xf7c, 0x10001], @devid})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0x80000002})

4.096521089s ago: executing program 2 (id=1111):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r1, &(0x7f000000a340)={0x2020, 0x0, <r2=>0x0}, 0x2020)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xa7)
readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/5, 0xfdef}], 0x20)

4.08920606s ago: executing program 3 (id=1112):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)

4.08011444s ago: executing program 5 (id=1113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x68}}, 0x0)

4.07242532s ago: executing program 6 (id=1114):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000240)={0x1, [0x8a, 0xfffffffd, 0x101], [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xb94, 0x1, 0x1}, {0x8d7c, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x77a1, 0x1, 0x1, 0x1}, {0x71e, 0x0, 0x1}, {0x5, 0x1ff, 0x1, 0x1, 0x0, 0x1}, {0x5e1c80e2, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x7fffffff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1}], 0x4})
mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240))
mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)

3.387910187s ago: executing program 6 (id=1115):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00)
lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x0, 0x0, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fc", 0x61, r1)
keyctl$search(0xa, r1, &(0x7f00000000c0)='dns_resolver\x00', 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2c, &(0x7f0000000040))
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x1d0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)

2.999764176s ago: executing program 5 (id=1116):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x80)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x9, 0x42, @private0, @local, 0x7, 0x8000, 0x7, 0x80000000}})
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804)

2.789106851s ago: executing program 2 (id=1117):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ptrace(0x10, 0x0)
syz_clone3(&(0x7f0000001d00)={0x20000000, &(0x7f0000000100), &(0x7f00000002c0), 0x0, {0x25}, &(0x7f0000000340)=""/165, 0xa5, 0x0, &(0x7f0000001cc0)=[r0, 0x0, 0x0], 0x3}, 0x58)

2.765159932s ago: executing program 4 (id=1118):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10)
close(r0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={<r4=>0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x7}}, [0x7, 0x4, 0x8000000000000001, 0x4, 0x400, 0x6, 0x2a, 0xf4ed, 0x4, 0x7, 0x1, 0x1d, 0x3, 0x0, 0x100]}, &(0x7f00000005c0)=0x100)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000600)={0x81, 0x20b, 0xfffffffc, 0x3ff, r4}, &(0x7f0000000640)=0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.790014976s ago: executing program 2 (id=1119):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x810, 0x0}}], 0x34000, 0x0)

1.008483385s ago: executing program 3 (id=1120):
sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x102)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000340)=r7, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

971.039536ms ago: executing program 5 (id=1121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x212, r0}, 0x38)
rt_sigprocmask(0x1, 0x0, &(0x7f0000000040), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x1, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
io_setup(0x2, &(0x7f00000001c0))
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4)

891.505278ms ago: executing program 6 (id=1122):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20)

875.234148ms ago: executing program 4 (id=1123):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800)

864.297969ms ago: executing program 2 (id=1124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
r4 = fcntl$dupfd(r0, 0x406, r3)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r5, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r5, &(0x7f0000000500)="08021100950108021100000008004500", 0x10)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

863.080398ms ago: executing program 3 (id=1125):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)

821.708939ms ago: executing program 5 (id=1126):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x2000c044, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)

357.484101ms ago: executing program 4 (id=1127):
r0 = socket$inet(0x2b, 0x801, 0x0)
listen(r0, 0x7f)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'none\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e22, 0x2, 0x1cb, 0x32d61, 0x12d58}}, 0x44)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
madvise(0xffffffffffffffff, 0x0, 0xf)

0s ago: executing program 6 (id=1128):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = dup3(r2, r3, 0x80000)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

d=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.296486][   T25] audit: type=1326 audit(1792042682.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.370941][   T25] audit: type=1326 audit(1792042682.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.412044][ T4699] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   91.444974][   T25] audit: type=1326 audit(1792042682.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.503042][   T25] audit: type=1326 audit(1792042682.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.528288][   T25] audit: type=1326 audit(1792042682.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.600239][   T25] audit: type=1326 audit(1792042682.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.625699][   T25] audit: type=1326 audit(1792042682.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.663573][   T25] audit: type=1326 audit(1792042682.310:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   91.687942][   T25] audit: type=1326 audit(1792042682.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4693 comm="syz.3.105" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcc073c4559 code=0x7ffc0000
[   92.868089][ T4720] syz.3.113 uses obsolete (PF_INET,SOCK_PACKET)
[   93.392703][ T4713] loop0: detected capacity change from 0 to 32768
[   93.434865][ T4713] (syz.0.110,4713,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "da	‹=writeback" or missing value
[   93.506021][ T4713] (syz.0.110,4713,1):ocfs2_fill_super:1177 ERROR: status = -22
[   93.580377][ T4734] loop3: detected capacity change from 0 to 128
[   93.655037][ T4734] =======================================================
[   93.655037][ T4734] WARNING: The mand mount option has been deprecated and
[   93.655037][ T4734]          and is ignored by this kernel. Remove the mand
[   93.655037][ T4734]          option from the mount to silence this warning.
[   93.655037][ T4734] =======================================================
[   93.901619][ T4745] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   94.068135][ T4734] EXT4-fs (loop3): Test dummy encryption mode enabled
[   94.110337][ T4734] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_lock,,errors=continue. Quota mode: none.
[   94.156909][ T4754] netlink: 277 bytes leftover after parsing attributes in process `syz.2.123'.
[   94.220988][ T4758] loop0: detected capacity change from 0 to 128
[   94.251476][ T4734] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   94.412127][ T4768] loop2: detected capacity change from 0 to 512
[   94.489092][ T4768] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.127: iget: bad i_size value: 38620345925642
[   94.577637][ T4772] loop1: detected capacity change from 0 to 4096
[   94.592645][ T4768] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.127: couldn't read orphan inode 15 (err -117)
[   94.650227][ T4768] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.755995][    C1] net_ratelimit: 59 callbacks suppressed
[   94.907470][ T4786] loop4: detected capacity change from 0 to 2048
[   94.924762][ T4772] EXT4-fs (loop1): Test dummy encryption mode enabled
[   94.932397][ T4734] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   94.954515][ T4772] EXT4-fs (loop1): Ignoring removed orlov option
[   94.985128][ T4765] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.127: bg 0: block 5: invalid block bitmap
[   95.017375][ T4786] EXT4-fs (loop4): bad block size 8192
[   95.033221][ T4765] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 88 with error 28
[   95.086133][ T4765] EXT4-fs (loop2): This should not happen!! Data will be lost
[   95.086133][ T4765] 
[   95.096680][ T4765] EXT4-fs (loop2): Total free blocks count 0
[   95.103218][ T4765] EXT4-fs (loop2): Free/Dirty block details
[   95.109721][ T4765] EXT4-fs (loop2): free_blocks=0
[   95.114772][ T4765] EXT4-fs (loop2): dirty_blocks=88
[   95.120084][ T4765] EXT4-fs (loop2): Block reservation details
[   95.120740][ T4772] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,grpjquota=,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[   95.126212][ T4765] EXT4-fs (loop2): i_reserved_data_blocks=88
[   95.435789][ T4734] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[   95.487628][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   95.501324][ T4803] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[   95.662667][ T4828] capability: warning: `syz.2.131' uses 32-bit capabilities (legacy support in use)
[   96.412092][   T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.956635][   T13] usb 4-1: config 0 has no interfaces?
[   96.963040][   T13] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   97.211455][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.379068][   T13] usb 4-1: config 0 descriptor??
[   98.230373][ T4866] orangefs_mount: mount request failed with -4
[   98.477368][ T4885] batman_adv: batadv0: Adding interface: dummy0
[   98.537466][ T4885] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.861907][ T4885] batman_adv: batadv0: Interface activated: dummy0
[   99.441736][ T4898] FAULT_INJECTION: forcing a failure.
[   99.441736][ T4898] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   99.582225][ T4898] CPU: 1 PID: 4898 Comm: syz.1.151 Not tainted syzkaller #0
[   99.589545][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   99.599620][ T4898] Call Trace:
[   99.602905][ T4898]  <TASK>
[   99.605839][ T4898]  dump_stack_lvl+0x188/0x250
[   99.610529][ T4898]  ? show_regs_print_info+0x20/0x20
[   99.615737][ T4898]  ? load_image+0x410/0x410
[   99.620253][ T4898]  ? __lock_acquire+0x7d40/0x7d40
[   99.625296][ T4898]  should_fail+0x383/0x4b0
[   99.629728][ T4898]  prepare_alloc_pages+0x1e3/0x5b0
[   99.634860][ T4898]  __alloc_pages+0x11b/0x480
[   99.639458][ T4898]  ? zone_statistics+0x170/0x170
[   99.644399][ T4898]  ? __sanitizer_cov_trace_pc+0x41/0x60
[   99.644502][ T4898]  __vmalloc_node_range+0x4b1/0x8b0
[   99.655494][ T4898]  ? pcpu_create_chunk+0x338/0xbe0
[   99.660608][ T4898]  __vmalloc+0x76/0x80
[   99.664684][ T4898]  ? pcpu_create_chunk+0x338/0xbe0
[   99.669812][ T4898]  pcpu_create_chunk+0x338/0xbe0
[   99.674766][ T4898]  pcpu_alloc+0x792/0x16d0
[   99.679212][ T4898]  bpf_map_alloc_percpu+0xc5/0x150
[   99.684333][ T4898]  array_map_alloc+0x362/0x6f0
[   99.689113][ T4898]  map_create+0x481/0x2330
[   99.693572][ T4898]  ? security_bpf+0x61/0xa0
[   99.698088][ T4898]  ? bpf_lsm_bpf+0x5/0x10
[   99.702435][ T4898]  __sys_bpf+0x30a/0x6f0
[   99.706692][ T4898]  ? bpf_link_show_fdinfo+0x380/0x380
[   99.712096][ T4898]  __x64_sys_bpf+0x78/0x90
[   99.716522][ T4898]  do_syscall_64+0x4c/0xa0
[   99.720947][ T4898]  ? clear_bhb_loop+0x30/0x80
[   99.725633][ T4898]  ? clear_bhb_loop+0x30/0x80
[   99.730322][ T4898]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   99.736236][ T4898] RIP: 0033:0x7fa46da24559
[   99.740653][ T4898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.760380][ T4898] RSP: 002b:00007fa46bc7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   99.760406][ T4898] RAX: ffffffffffffffda RBX: 00007fa46dcabfa0 RCX: 00007fa46da24559
[   99.760420][ T4898] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 2000000000000000
[   99.784742][ T4898] RBP: 00007fa46dabb8b0 R08: 0000000000000000 R09: 0000000000000000
[   99.792720][ T4898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.800690][ T4898] R13: 00007fa46dcac038 R14: 00007fa46dcabfa0 R15: 00007ffcbb3e5ed8
[   99.800723][ T4898]  </TASK>
[   99.892630][ T4681] usb 4-1: USB disconnect, device number 2
[  100.436229][    C0] net_ratelimit: 77 callbacks suppressed
[  103.012067][ T4957] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  105.555915][    C0] net_ratelimit: 57 callbacks suppressed
[  106.385916][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  107.285411][ T5006] orangefs_mount: mount request failed with -4
[  107.675127][ T5011] device bridge1 entered promiscuous mode
[  107.766481][ T5015] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.182'.
[  107.907224][ T5025] fuse: Unknown parameter 'fd“¡Ö†ˆº;ù’˜ø©E”#c›ôFOè4¤ˆtûÁûÕhŠ{¢è¶§f¹Ñ‹ÓÌz
.Ë$%'
[  107.938471][ T5028] loop0: detected capacity change from 0 to 256
[  108.008321][ T5028] exfat: Unknown parameter 'keep_last_dots'
[  108.068730][ T5028] cgroup: subsys name conflicts with all
[  108.079086][ T5032] netlink: 'syz.4.188': attribute type 1 has an invalid length.
[  108.207761][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'.
[  108.241641][ T5032] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.673429][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  108.688728][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.696858][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  110.054507][ T5053] orangefs_mount: mount request failed with -4
[  110.224584][ T5038] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  110.428901][ T5066] tipc: Failed to remove unknown binding: 66,0,0/0:2541484702/2541484704
[  110.640045][ T5066] tipc: Failed to remove unknown binding: 66,0,0/0:2541484702/2541484703
[  110.795432][ T5066] tipc: Failed to remove unknown binding: 66,0,0/0:2541484702/2541484704
[  111.001020][ T5066] tipc: Failed to remove unknown binding: 66,0,0/0:2541484702/2541484703
[  111.085909][    C1] net_ratelimit: 56 callbacks suppressed
[  112.805862][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  113.476164][ T1344] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  113.499298][ T5115] loop0: detected capacity change from 0 to 1024
[  113.654407][ T5119] device syzkaller0 entered promiscuous mode
[  114.010744][ T4293] hfsplus: b-tree write err: -5, ino 25
[  114.022136][ T1344] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  114.045482][ T4293] hfsplus: b-tree write err: -5, ino 4
[  114.051264][ T1344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.066258][ T4293] hfsplus: b-tree write err: -5, ino 2
[  114.071862][ T1344] usb 4-1: Product: syz
[  114.082258][ T4293] hfsplus: b-tree write err: -5, ino 26
[  114.088158][ T1344] usb 4-1: Manufacturer: syz
[  114.093069][ T4293] hfsplus: b-tree write err: -5, ino 27
[  114.102991][ T1344] usb 4-1: SerialNumber: syz
[  114.154209][ T1344] ums-karma 4-1:1.0: USB Mass Storage device detected
[  114.198094][ T5119] tipc: Started in network mode
[  114.203240][ T5119] tipc: Node identity 3638a1feb081, cluster identity 4711
[  114.233665][ T1344] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  114.233665][ T1344]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  114.243403][ T5119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.333337][ T5117] tipc: Resetting bearer <eth:syzkaller0>
[  114.369879][ T5117] tipc: Disabling bearer <eth:syzkaller0>
[  114.615484][ T1344] ums-karma: probe of 4-1:1.0 failed with error -5
[  114.641248][ T1344] usb 4-1: USB disconnect, device number 3
[  114.975345][ T5133] autofs4:pid:5133:autofs_fill_super: called with bogus options
[  115.208971][ T5149] loop2: detected capacity change from 0 to 164
[  115.397681][ T5149] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41)
[  116.136974][    C1] net_ratelimit: 49 callbacks suppressed
[  116.347516][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'.
[  116.368001][ T5162] device bond_slave_0 entered promiscuous mode
[  116.374661][ T5162] device bond_slave_1 entered promiscuous mode
[  116.382137][ T5162] device bond_slave_0 left promiscuous mode
[  116.388117][ T5162] device bond_slave_1 left promiscuous mode
[  116.402974][ T5162] bond1: (slave vlan2): making interface the new active one
[  116.420149][ T5162] device bond_slave_0 entered promiscuous mode
[  116.426403][ T5162] device bond_slave_1 entered promiscuous mode
[  116.439447][ T5162] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  116.448377][ T5167] loop2: detected capacity change from 0 to 1024
[  116.890307][  T144] hfsplus: b-tree write err: -5, ino 25
[  116.901530][  T144] hfsplus: b-tree write err: -5, ino 4
[  116.915744][  T144] hfsplus: b-tree write err: -5, ino 2
[  116.930678][  T144] hfsplus: b-tree write err: -5, ino 26
[  116.945097][  T144] hfsplus: b-tree write err: -5, ino 27
[  117.014116][ T5184] UBIFS error (pid: 5184): cannot open "./file0", error -22
[  117.023865][ T5184] loop1: detected capacity change from 0 to 256
[  117.135908][ T1356] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  117.514148][   T25] kauditd_printk_skb: 21 callbacks suppressed
[  117.514216][   T25] audit: type=1326 audit(1792042708.562:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5195 comm="syz.1.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x0
[  117.566196][ T1356] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  118.598373][ T5202] FAULT_INJECTION: forcing a failure.
[  118.598373][ T5202] name failslab, interval 1, probability 0, space 0, times 10000
[  118.677595][ T5202] CPU: 1 PID: 5202 Comm: syz.2.233 Not tainted syzkaller #0
[  118.684910][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  118.684954][ T5202] Call Trace:
[  118.684962][ T5202]  <TASK>
[  118.684971][ T5202]  dump_stack_lvl+0x188/0x250
[  118.698514][ T5202]  ? show_regs_print_info+0x20/0x20
[  118.698543][ T5202]  ? load_image+0x410/0x410
[  118.706294][ T5202]  ? __might_sleep+0xf0/0xf0
[  118.706314][ T5202]  ? __lock_acquire+0x7d40/0x7d40
[  118.706337][ T5202]  should_fail+0x383/0x4b0
[  118.706363][ T5202]  should_failslab+0x5/0x20
[  118.706379][ T5202]  slab_pre_alloc_hook+0x51/0xc0
[  118.716174][ T5202]  ? __proc_create+0x36f/0x8b0
[  118.716198][ T5202]  kmem_cache_alloc+0x3d/0x280
[  118.725781][ T5202]  __proc_create+0x36f/0x8b0
[  118.725805][ T5202]  ? proc_symlink+0x210/0x210
[  118.725832][ T5202]  proc_mkdir+0x3b/0x110
[  118.725854][ T5202]  cache_register_net+0x22f/0x480
[  118.734724][ T5202]  nfsd_export_init+0x157/0x1e0
[  118.744382][ T5202]  nfsd_init_net+0x29/0x1e0
[  118.753693][ T5202]  ops_init+0x360/0x5f0
[  118.762566][ T5202]  setup_net+0x39e/0xa10
[  118.772397][ T5202]  ? copy_net_ns+0x5b0/0x5b0
[  118.781007][ T5202]  ? copy_net_ns+0x324/0x5b0
[  118.789910][ T5202]  ? down_read_killable+0x1ce/0x340
[  118.789940][ T5202]  copy_net_ns+0x33e/0x5b0
[  118.789964][ T5202]  create_new_namespaces+0x3ce/0x700
[  118.799725][ T5202]  unshare_nsproxy_namespaces+0x116/0x160
[  118.799751][ T5202]  ksys_unshare+0x4f6/0x8e0
[  118.799767][ T5202]  ? __lock_acquire+0x7d40/0x7d40
[  118.799793][ T5202]  ? sighand_ctor+0x40/0x40
[  118.799809][ T5202]  ? lock_chain_count+0x20/0x20
[  118.799828][ T5202]  ? syscall_enter_from_user_mode+0x21/0x70
[  118.799853][ T5202]  __x64_sys_unshare+0x34/0x40
[  118.799871][ T5202]  do_syscall_64+0x4c/0xa0
[  118.799887][ T5202]  ? clear_bhb_loop+0x30/0x80
[  118.809537][ T5202]  ? clear_bhb_loop+0x30/0x80
[  118.809561][ T5202]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  118.809581][ T5202] RIP: 0033:0x7fac2d06e559
[  118.809598][ T5202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.809612][ T5202] RSP: 002b:00007fac2b2c6028 EFLAGS: 00000246
[  118.820044][ T5202]  ORIG_RAX: 0000000000000110
[  118.820055][ T5202] RAX: ffffffffffffffda RBX: 00007fac2d2f5fa0 RCX: 00007fac2d06e559
[  118.820067][ T5202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  118.820078][ T5202] RBP: 00007fac2d1058b0 R08: 0000000000000000 R09: 0000000000000000
[  118.820089][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.829563][ T5202] R13: 00007fac2d2f6038 R14: 00007fac2d2f5fa0 R15: 00007ffd84a98798
[  118.829593][ T5202]  </TASK>
[  118.956117][ T1356] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40
[  118.956140][ T1356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.956159][ T1356] usb 5-1: Product: syz
[  118.956173][ T1356] usb 5-1: Manufacturer: syz
[  118.956187][ T1356] usb 5-1: SerialNumber: syz
[  119.125019][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[  119.356138][ T1356] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  119.376165][ T1356] usb 5-1: unit 2 not found!
[  119.396375][ T1356] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x600, type = 0
[  119.557253][ T5231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.241'.
[  119.576835][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'.
[  119.610178][ T1356] usb 5-1: USB disconnect, device number 2
[  119.616921][ T5231] netlink: 96 bytes leftover after parsing attributes in process `syz.1.241'.
[  120.200297][ T5127] udevd[5127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.455968][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  120.659794][ T5253] x86/PAT: syz.0.246:5253 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  120.720630][ T5255] bond0: (slave bond_slave_1): Releasing backup interface
[  120.820249][    T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  120.946160][    T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  120.975529][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  120.998823][    T7] usb 3-1: SerialNumber: syz
[  121.088570][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'.
[  121.315853][    C1] net_ratelimit: 54 callbacks suppressed
[  121.769511][    T7] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[  122.108082][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  122.194599][   T13] usb 3-1: USB disconnect, device number 2
[  122.213980][   T13] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[  122.636169][    T7] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  122.655451][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.673992][    T7] usb 5-1: Product: syz
[  122.678655][    T7] usb 5-1: Manufacturer: syz
[  122.683265][    T7] usb 5-1: SerialNumber: syz
[  122.737230][    T7] ums-karma 5-1:1.0: USB Mass Storage device detected
[  122.792166][    T7] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  122.792166][    T7]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  122.835024][ T5304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.255'.
[  122.849002][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'.
[  123.020314][ T5309] batman_adv: batadv0: Adding interface: dummy0
[  123.026703][ T5309] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.052362][ T5309] batman_adv: batadv0: Interface activated: dummy0
[  123.361003][    T7] ums-karma: probe of 5-1:1.0 failed with error -5
[  123.511859][    T7] usb 5-1: USB disconnect, device number 3
[  123.703338][ T5310] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.712552][ T5310] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.721291][ T5310] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.730121][ T5310] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.040277][ T5328] resource sanity check: requesting [mem 0xfe800000-0xfe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f]
[  125.060690][ T5328] caller generic_access_phys+0x1f0/0x380 mapping multiple BARs
[  125.210532][ T5326] loop3: detected capacity change from 0 to 512
[  125.697037][ T5326] EXT4-fs (loop3): 1 truncate cleaned up
[  125.702727][ T5326] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  125.997305][ T5326] EXT4-fs error (device loop3): xattr_find_entry:297: inode #12: comm syz.3.262: corrupted xattr entries
[  126.069071][ T5326] EXT4-fs (loop3): Remounting filesystem read-only
[  126.092122][ T5326] EXT4-fs error (device loop3): xattr_find_entry:297: inode #12: comm syz.3.262: corrupted xattr entries
[  126.126273][ T5326] EXT4-fs (loop3): Remounting filesystem read-only
[  126.355829][    C0] net_ratelimit: 64 callbacks suppressed
[  126.416542][ T5327] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  126.453865][ T5345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.268'.
[  126.825917][ T1356] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  127.239712][ T1356] usb 3-1: Using ep0 maxpacket: 32
[  128.086021][ T1356] usb 3-1: unable to get BOS descriptor or descriptor too short
[  128.397076][ T1356] usb 3-1: New USB device found, idVendor=0e41, idProduct=5050, bcdDevice= 0.40
[  128.513669][ T1356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.712889][ T1356] usb 3-1: Product: 䬱�멮�﨟戳㠤鹙む辞昘
[  128.934588][ T1356] usb 3-1: Manufacturer: �ᙠ赣甂�憉鰔蜪▂웟ḑ峬��⼨穈ᧈⷶ勸┃榋⯙䛨䊬ホ�⢢綾Îﭻ솣Ἄ肩캨��퀳錼둣롡뎆阳芆䅒洹�╣罶�粕
[  129.045201][ T1356] usb 3-1: SerialNumber: ь
[  129.332511][ T5383] loop4: detected capacity change from 0 to 512
[  129.418504][ T1356] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  129.466743][ T1356] usb 3-1: unit 6 not found!
[  129.495116][ T5383] EXT4-fs error (device loop4): ext4_quota_enable:6444: comm syz.4.280: inode #524288: comm syz.4.280: iget: illegal inode #
[  129.563465][ T1356] snd_usb_pod 3-1:1.2: Line 6 PODxt Pro found
[  129.630630][ T5383] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.280: Bad quota inode: 524288, type: 2
[  129.663273][ T1356] usb 3-1: selecting invalid altsetting 5
[  129.676079][ T5383] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=524288). Please run e2fsck to fix.
[  129.703975][ T1356] snd_usb_pod 3-1:1.2: set_interface failed
[  129.715981][ T5383] EXT4-fs (loop4): mount failed
[  129.746956][ T1356] snd_usb_pod 3-1:1.2: Line 6 PODxt Pro now disconnected
[  129.779797][ T1356] snd_usb_pod: probe of 3-1:1.2 failed with error -22
[  129.803868][ T1356] usb 3-1: USB disconnect, device number 3
[  130.349372][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'.
[  130.392497][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'.
[  130.749689][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'.
[  130.985958][ T1110] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  131.235932][ T1110] usb 5-1: Using ep0 maxpacket: 8
[  131.356133][ T1110] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  131.386567][ T1110] usb 5-1: config 179 has no interface number 0
[  131.422419][ T1110] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  131.477822][ T1110] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  131.524744][ T1110] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  131.581571][ T1110] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  131.644855][ T1110] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  131.719712][ T1110] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  131.751526][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.803007][    C1] net_ratelimit: 52 callbacks suppressed
[  131.816064][ T5401] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  132.244884][ T1110] usb 5-1: USB disconnect, device number 4
[  132.255970][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  132.264658][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  132.512849][ T5410] loop2: detected capacity change from 0 to 512
[  132.934085][ T5410] EXT4-fs (loop2): Ignoring removed oldalloc option
[  133.038497][ T5410] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  133.087580][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  133.093915][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  133.311768][ T5410] EXT4-fs (loop2): 1 truncate cleaned up
[  133.317675][ T5410] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  133.580485][ T5443] loop4: detected capacity change from 0 to 2048
[  133.664825][ T5443] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,block_validity,nobarrier,,errors=continue. Quota mode: writeback.
[  133.856026][ T5443] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.503411][ T5464] loop2: detected capacity change from 0 to 512
[  134.601920][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'.
[  134.636823][ T5464] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  134.744013][ T5464] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.435414][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'.
[  136.751954][ T5072] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  136.915796][    C1] net_ratelimit: 58 callbacks suppressed
[  137.680163][ T5496] rxe_eth0 speed is unknown, defaulting to 1000
[  137.943494][ T5513] tipc: Failed to remove unknown binding: 66,0,0/0:551476872/551476873
[  138.002396][ T5515] tipc: Failed to remove unknown binding: 66,0,0/0:1083261350/1083261352
[  138.045833][ T5513] tipc: Failed to remove unknown binding: 66,0,0/0:551476872/551476873
[  138.136067][ T5521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.595890][ T4681] Bluetooth: hci5: command 0x0409 tx timeout
[  138.691949][ T1344] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  138.964520][ T5496] chnl_net:caif_netlink_parms(): no params data found
[  139.126192][ T1344] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1800, setting to 64
[  139.160289][ T1344] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.206609][ T1344] usb 5-1: config 0 interface 0 has no altsetting 0
[  139.234333][ T1344] usb 5-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00
[  139.253770][ T1344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.269985][ T1344] usb 5-1: config 0 descriptor??
[  139.296850][ T5524] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  139.602914][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.655887][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.664442][ T5496] device bridge_slave_0 entered promiscuous mode
[  139.728317][ T5551] netlink: 'syz.2.315': attribute type 1 has an invalid length.
[  139.777706][ T1344] input: HID 17ef:6049 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6049.0001/input/input5
[  139.832875][ T5551] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.872711][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.883896][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.938321][ T1344] lenovo 0003:17EF:6049.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6049] on usb-dummy_hcd.4-1/input0
[  139.938835][ T5543] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  139.961009][ T5496] device bridge_slave_1 entered promiscuous mode
[  140.026382][ T5543] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  140.089567][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'.
[  140.274074][ T5555] bond1: (slave bridge2): making interface the new active one
[  140.320440][ T5555] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  140.374132][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  140.439092][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.475376][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.646271][ T5496] team0: Port device team_slave_0 added
[  140.667561][ T5496] team0: Port device team_slave_1 added
[  140.676040][ T4681] Bluetooth: hci5: command 0x041b tx timeout
[  140.722620][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.750478][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.795655][ T5496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.836076][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.919289][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.949728][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.983956][ T5496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.532199][ T5567] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.541120][ T5567] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.549931][ T5567] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.558871][ T5567] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.735864][   T13] usb 5-1: reset full-speed USB device number 5 using dummy_hcd
[  141.784420][ T5496] device hsr_slave_0 entered promiscuous mode
[  141.793773][ T5496] device hsr_slave_1 entered promiscuous mode
[  141.805343][ T5496] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.813583][ T5496] Cannot create hsr debugfs directory
[  141.920970][ T5569] netlink: 'syz.1.319': attribute type 10 has an invalid length.
[  141.940647][ T5569] device geneve0 entered promiscuous mode
[  141.955767][    C1] net_ratelimit: 59 callbacks suppressed
[  141.993156][ T5569] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  142.193848][ T5575] device pim6reg1 entered promiscuous mode
[  142.261772][ T5585] loop4: detected capacity change from 0 to 512
[  142.621941][ T1107] usb 5-1: USB disconnect, device number 5
[  142.810148][ T5072] Bluetooth: hci5: command 0x040f tx timeout
[  143.346557][ T5592] FAULT_INJECTION: forcing a failure.
[  143.346557][ T5592] name failslab, interval 1, probability 0, space 0, times 9999
[  143.415909][ T5592] CPU: 0 PID: 5592 Comm: syz.2.326 Not tainted syzkaller #0
[  143.423258][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.433459][ T5592] Call Trace:
[  143.436765][ T5592]  <TASK>
[  143.439703][ T5592]  dump_stack_lvl+0x188/0x250
[  143.444431][ T5592]  ? show_regs_print_info+0x20/0x20
[  143.449652][ T5592]  ? load_image+0x410/0x410
[  143.454349][ T5592]  ? _printk+0xda/0x130
[  143.458572][ T5592]  should_fail+0x383/0x4b0
[  143.463015][ T5592]  should_failslab+0x5/0x20
[  143.467539][ T5592]  slab_pre_alloc_hook+0x51/0xc0
[  143.472498][ T5592]  kmem_cache_alloc_node+0x47/0x2c0
[  143.477714][ T5592]  ? __alloc_skb+0xf4/0x750
[  143.482236][ T5592]  __alloc_skb+0xf4/0x750
[  143.486583][ T5592]  _sctp_make_chunk+0x5b/0x430
[  143.491356][ T5592]  ? sctp_make_abort_user+0x1c/0xf50
[  143.496669][ T5592]  sctp_make_abort_user+0x3a/0xf50
[  143.501798][ T5592]  ? skb_dequeue+0x120/0x150
[  143.506404][ T5592]  ? sctp_queue_purge_ulpevents+0x10/0x120
[  143.512225][ T5592]  sctp_close+0x2a0/0x890
[  143.516570][ T5592]  ? __sctp_write_space+0x500/0x500
[  143.521775][ T5592]  ? rwsem_write_trylock+0x135/0x1c0
[  143.527069][ T5592]  ? clear_nonspinnable+0x60/0x60
[  143.532116][ T5592]  ? ip_mc_drop_socket+0x25f/0x270
[  143.537258][ T5592]  inet_release+0x139/0x180
[  143.541789][ T5592]  sock_close+0xbf/0x210
[  143.546054][ T5592]  ? sock_mmap+0x90/0x90
[  143.550325][ T5592]  __fput+0x212/0x8c0
[  143.554339][ T5592]  task_work_run+0x125/0x1a0
[  143.558959][ T5592]  exit_to_user_mode_loop+0x10f/0x130
[  143.564421][ T5592]  exit_to_user_mode_prepare+0xee/0x180
[  143.569984][ T5592]  syscall_exit_to_user_mode+0x16/0x40
[  143.575461][ T5592]  do_syscall_64+0x58/0xa0
[  143.579892][ T5592]  ? clear_bhb_loop+0x30/0x80
[  143.584585][ T5592]  ? clear_bhb_loop+0x30/0x80
[  143.589284][ T5592]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.595198][ T5592] RIP: 0033:0x7fac2d06e559
[  143.599628][ T5592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.619247][ T5592] RSP: 002b:00007fac2b2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  143.627674][ T5592] RAX: 0000000000000000 RBX: 00007fac2d2f5fa0 RCX: 00007fac2d06e559
[  143.635658][ T5592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  143.643639][ T5592] RBP: 00007fac2d1058b0 R08: 0000000000000000 R09: 0000000000000000
[  143.651625][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.659610][ T5592] R13: 00007fac2d2f6038 R14: 00007fac2d2f5fa0 R15: 00007ffd84a98798
[  143.667611][ T5592]  </TASK>
[  144.278407][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'.
[  144.499961][ T5604] loop1: detected capacity change from 0 to 512
[  144.507234][ T5596] device hsr_slave_0 left promiscuous mode
[  144.542222][ T5596] device hsr_slave_1 left promiscuous mode
[  145.230639][ T4681] Bluetooth: hci5: command 0x0419 tx timeout
[  145.289215][ T5604] EXT4-fs (loop1): Test dummy encryption mode enabled
[  145.298823][ T5609] xt_ipcomp: unknown flags 1D
[  145.366040][ T5604] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  145.468315][ T5604] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  145.505661][ T5604] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,errors=continue,auto_da_alloc,lazytime,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  145.582019][ T5615] MPTCP: addr_signal error, rm_addr=1
[  145.648638][ T5617] netlink: 'syz.3.335': attribute type 10 has an invalid length.
[  145.672652][ T5604] xt_policy: neither incoming nor outgoing policy selected
[  145.692228][ T5617] device geneve0 entered promiscuous mode
[  145.730719][ T5617] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  145.740343][ T5496] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  145.828206][ T5496] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  145.864285][ T5622] device pim6reg1 entered promiscuous mode
[  145.878001][ T5496] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  145.962694][ T5496] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  146.433001][ T5632] FAULT_INJECTION: forcing a failure.
[  146.433001][ T5632] name failslab, interval 1, probability 0, space 0, times 9998
[  146.490969][ T5632] CPU: 1 PID: 5632 Comm: syz.4.340 Not tainted syzkaller #0
[  146.499669][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  146.509758][ T5632] Call Trace:
[  146.513105][ T5632]  <TASK>
[  146.516270][ T5632]  dump_stack_lvl+0x188/0x250
[  146.520986][ T5632]  ? show_regs_print_info+0x20/0x20
[  146.526204][ T5632]  ? load_image+0x410/0x410
[  146.530729][ T5632]  ? load_image+0x410/0x410
[  146.535257][ T5632]  should_fail+0x383/0x4b0
[  146.539701][ T5632]  should_failslab+0x5/0x20
[  146.544219][ T5632]  slab_pre_alloc_hook+0x51/0xc0
[  146.549166][ T5632]  kmem_cache_alloc_node+0x47/0x2c0
[  146.554365][ T5632]  ? __alloc_skb+0xf4/0x750
[  146.558887][ T5632]  __alloc_skb+0xf4/0x750
[  146.563245][ T5632]  ? _raw_spin_unlock+0x40/0x40
[  146.568123][ T5632]  sctp_ulpevent_make_assoc_change+0x182/0xa50
[  146.574296][ T5632]  sctp_do_sm+0x724/0x5690
[  146.578743][ T5632]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  146.584715][ T5632]  ? skb_put+0x10e/0x200
[  146.588986][ T5632]  ? sctp_make_abort_user+0xacb/0xf50
[  146.589010][ T5632]  sctp_primitive_ABORT+0x94/0xc0
[  146.589035][ T5632]  sctp_close+0x2b0/0x890
[  146.599434][ T5632]  ? __sctp_write_space+0x500/0x500
[  146.599464][ T5632]  ? rwsem_write_trylock+0x135/0x1c0
[  146.608980][ T5632]  ? clear_nonspinnable+0x60/0x60
[  146.609002][ T5632]  ? ip_mc_drop_socket+0x25f/0x270
[  146.619313][ T5632]  inet_release+0x139/0x180
[  146.619340][ T5632]  sock_close+0xbf/0x210
[  146.628916][ T5632]  ? sock_mmap+0x90/0x90
[  146.628944][ T5632]  __fput+0x212/0x8c0
[  146.628972][ T5632]  task_work_run+0x125/0x1a0
[  146.637416][ T5632]  exit_to_user_mode_loop+0x10f/0x130
[  146.637441][ T5632]  exit_to_user_mode_prepare+0xee/0x180
[  146.645986][ T5632]  syscall_exit_to_user_mode+0x16/0x40
[  146.646008][ T5632]  do_syscall_64+0x58/0xa0
[  146.646025][ T5632]  ? clear_bhb_loop+0x30/0x80
[  146.656924][ T5632]  ? clear_bhb_loop+0x30/0x80
[  146.656949][ T5632]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  146.666951][ T5632] RIP: 0033:0x7f494e41a559
[  146.666982][ T5632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.666996][ T5632] RSP: 002b:00007f494c672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  146.676337][ T5632] RAX: 0000000000000000 RBX: 00007f494e6a1fa0 RCX: 00007f494e41a559
[  146.676352][ T5632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  146.676362][ T5632] RBP: 00007f494e4b18b0 R08: 0000000000000000 R09: 0000000000000000
[  146.676373][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.686655][ T5632] R13: 00007f494e6a2038 R14: 00007f494e6a1fa0 R15: 00007ffe7bfc5618
[  146.686686][ T5632]  </TASK>
[  146.967770][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.070687][ T5642] loop3: detected capacity change from 0 to 256
[  147.080047][    C0] net_ratelimit: 1283 callbacks suppressed
[  147.332494][ T5642] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d)
[  147.348413][ T5642] exFAT-fs (loop3): IO charset iso;859-7§92¼ø$N•-$°•Þ½òuØ.+ø	ä™y ¢¡[ÃÝë…S¡f
ÐŒIÕµQ´JËnðÕî¹öÆ
åÞ not found
[  147.755999][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.766611][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.850669][ T5496] 8021q: adding VLAN 0 to HW filter on device team0
[  147.915610][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.948635][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.457347][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.465020][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.730703][ T5656] 9pnet_virtio: no channels available for device syz
[  148.754886][ T5658] loop3: detected capacity change from 0 to 512
[  148.793320][ T5653] team0 (unregistering): Port device team_slave_0 removed
[  148.867485][ T5658] EXT4-fs (loop3): Test dummy encryption mode enabled
[  148.899950][ T5653] team0 (unregistering): Failed to send options change via netlink (err -105)
[  148.976204][ T5658] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  148.986007][ T5653] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  149.019386][ T5653] team0 (unregistering): Port device team_slave_1 removed
[  149.075820][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  149.096823][ T5658] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  149.104431][ T5658] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,errors=continue,auto_da_alloc,lazytime,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  149.142448][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.160509][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.171659][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.182696][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.189952][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.206662][ T5658] xt_policy: neither incoming nor outgoing policy selected
[  149.624967][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.886037][ T5641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.344'.
[  149.916095][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.928954][ T5668] loop4: detected capacity change from 0 to 256
[  149.977358][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  150.009919][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.020717][ T5668] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  150.065784][ T5668] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  150.130117][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.158713][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.162692][ T5668] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xda9de4d5, utbl_chksum : 0xe619d30d)
[  150.196943][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  150.226849][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.258657][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.277404][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.296525][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.317042][ T5677] bridge0: port 3(syz_tun) entered blocking state
[  150.380538][ T5677] bridge0: port 3(syz_tun) entered disabled state
[  150.583795][ T5677] device syz_tun entered promiscuous mode
[  150.669666][ T5677] bridge0: port 3(syz_tun) entered blocking state
[  150.676723][ T5677] bridge0: port 3(syz_tun) entered listening state
[  151.413297][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.428350][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  151.456356][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  151.528867][ T5706] loop4: detected capacity change from 0 to 512
[  151.612017][ T5706] EXT4-fs (loop4): Test dummy encryption mode enabled
[  151.654274][ T5706] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  151.698681][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[  151.715149][ T5706] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  151.724217][ T5706] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,errors=continue,auto_da_alloc,lazytime,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  151.767430][ T5706] xt_policy: neither incoming nor outgoing policy selected
[  151.973234][ T5732] loop4: detected capacity change from 0 to 164
[  152.071317][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  152.084235][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  152.116010][    C1] net_ratelimit: 51 callbacks suppressed
[  152.144354][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  152.163908][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  152.184665][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.203845][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.224479][ T5496] device veth0_vlan entered promiscuous mode
[  152.245001][ T5738] loop2: detected capacity change from 0 to 512
[  152.275947][ T5496] device veth1_vlan entered promiscuous mode
[  152.321174][ T5738] EXT4-fs (loop2): Ignoring removed oldalloc option
[  152.356174][ T5738] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  152.388336][ T5738] EXT4-fs (loop2): 1 truncate cleaned up
[  152.394134][ T5738] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  152.436322][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  152.445543][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  152.469843][ T5738] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  152.494185][ T5496] device veth0_macvtap entered promiscuous mode
[  152.515946][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  152.540697][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  152.578216][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.616978][ T5496] device veth1_macvtap entered promiscuous mode
[  152.681748][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.699888][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.712035][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.731837][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.744804][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.755652][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.766874][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.794463][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.809716][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.837976][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.858485][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.868988][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.879943][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.890564][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.902713][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.950890][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.975639][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.993756][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.004130][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.034922][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.052429][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.063624][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.112201][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.157818][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.190669][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.208034][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  153.231854][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  153.255438][ T5496] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.295286][ T5496] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.318582][ T5496] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.355277][ T5496] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.546540][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.559812][ T4681] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  153.571719][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.600746][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  153.679445][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.691915][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.713079][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  153.815748][ T4681] usb 4-1: Using ep0 maxpacket: 32
[  153.936189][ T4681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.096165][ T4681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.106514][ T4681] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  154.116132][ T4681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.137346][ T4681] usb 4-1: config 0 descriptor??
[  154.176843][ T5778] xt_limit: Overflow, try lower: 1207959552/384
[  154.186947][ T5778] loop2: detected capacity change from 0 to 128
[  154.265390][ T5778] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x000000000000000a,,errors=continue. Quota mode: none.
[  154.279368][ T5778] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.339657][ T5782] loop4: detected capacity change from 0 to 512
[  154.358496][ T5784] loop1: detected capacity change from 0 to 512
[  154.362182][ T5782] EXT4-fs (loop4): Ignoring removed oldalloc option
[  154.391135][ T5782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  154.406002][ T5784] EXT4-fs error (device loop1): ext4_quota_enable:6444: comm syz.1.385: inode #524288: comm syz.1.385: iget: illegal inode #
[  154.420209][ T5784] EXT4-fs error (device loop1): ext4_quota_enable:6447: comm syz.1.385: Bad quota inode: 524288, type: 2
[  154.432721][ T5784] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=524288). Please run e2fsck to fix.
[  154.452129][ T5784] EXT4-fs (loop1): mount failed
[  154.461823][ T5782] EXT4-fs (loop4): 1 truncate cleaned up
[  154.485317][ T5782] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  154.579898][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[  154.592625][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[  154.633710][ T4681] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  154.958278][ T5791] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  154.977468][ T4266] usb 4-1: USB disconnect, device number 4
[  157.155692][    C1] net_ratelimit: 89 callbacks suppressed
[  157.829559][ T5832] bridge0: port 3(syz_tun) entered disabled state
[  157.917123][ T5832] device syz_tun left promiscuous mode
[  157.940124][ T5832] bridge0: port 3(syz_tun) entered disabled state
[  157.950146][ T5839] netlink: 44 bytes leftover after parsing attributes in process `syz.5.402'.
[  157.979966][ T5839] netlink: 43 bytes leftover after parsing attributes in process `syz.5.402'.
[  158.041621][ T5839] netlink: 'syz.5.402': attribute type 5 has an invalid length.
[  158.076569][ T5839] netlink: 43 bytes leftover after parsing attributes in process `syz.5.402'.
[  158.422196][ T5820] netlink: 68 bytes leftover after parsing attributes in process `syz.1.396'.
[  158.486393][ T1344] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  158.692823][ T5864] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  158.895988][ T1344] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.965064][ T1344] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  159.019539][ T1344] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  159.252026][ T1344] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  159.285014][ T5870] netlink: 'syz.4.409': attribute type 21 has an invalid length.
[  159.320383][ T5884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.410'.
[  159.898578][ T1344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.917954][ T5870] netlink: 156 bytes leftover after parsing attributes in process `syz.4.409'.
[  161.208748][ T5907] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  161.257202][ T1344] qmi_wwan: probe of 6-1:1.0 failed with error -22
[  161.317890][ T1344] usb 6-1: USB disconnect, device number 2
[  161.485744][ T4266] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  161.725730][ T4266] usb 3-1: Using ep0 maxpacket: 16
[  161.885850][ T4266] usb 3-1: unable to get BOS descriptor or descriptor too short
[  161.975829][ T4266] usb 3-1: config 7 has an invalid interface number: 201 but max is 0
[  161.991858][ T4266] usb 3-1: config 7 has no interface number 0
[  162.219712][    C1] net_ratelimit: 66 callbacks suppressed
[  162.295998][ T4266] usb 3-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=93.12
[  162.341933][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.495747][ T4266] usb 3-1: Product: syz
[  162.691191][ T4266] usb 3-1: Manufacturer: syz
[  162.819816][ T4266] usb 3-1: SerialNumber: syz
[  163.243130][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'.
[  163.309722][ T4266] option 3-1:7.201: GSM modem (1-port) converter detected
[  163.356201][ T4266] usb 3-1: USB disconnect, device number 4
[  163.403493][ T4266] option 3-1:7.201: device disconnected
[  163.523869][ T5959] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  163.891789][ T5965] loop2: detected capacity change from 0 to 512
[  163.955096][ T5965] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  164.436213][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  165.405630][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  165.445629][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  165.475638][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  166.374255][ T6010] fuse: Bad value for 'user_id'
[  166.407655][ T6010] 9pnet: Could not find request transport: xen
[  166.467002][ T6010] FAULT_INJECTION: forcing a failure.
[  166.467002][ T6010] name failslab, interval 1, probability 0, space 0, times 9997
[  166.509545][ T6010] CPU: 0 PID: 6010 Comm: syz.1.443 Not tainted syzkaller #0
[  166.516869][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.526931][ T6010] Call Trace:
[  166.530211][ T6010]  <TASK>
[  166.533146][ T6010]  dump_stack_lvl+0x188/0x250
[  166.537836][ T6010]  ? show_regs_print_info+0x20/0x20
[  166.543045][ T6010]  ? load_image+0x410/0x410
[  166.547558][ T6010]  ? __might_sleep+0xf0/0xf0
[  166.552154][ T6010]  ? __lock_acquire+0x7d40/0x7d40
[  166.557179][ T6010]  ? kernel_fpu_begin_mask+0x35c/0x450
[  166.562659][ T6010]  should_fail+0x383/0x4b0
[  166.567088][ T6010]  should_failslab+0x5/0x20
[  166.567109][ T6010]  slab_pre_alloc_hook+0x51/0xc0
[  166.567130][ T6010]  __kmalloc+0x6b/0x340
[  166.576537][ T6010]  ? init_skcipher_req+0x83/0x1b0
[  166.576565][ T6010]  init_skcipher_req+0x83/0x1b0
[  166.585702][ T6010]  encrypted_read+0x37f/0xf60
[  166.585730][ T6010]  ? encrypted_destroy+0x40/0x40
[  166.585764][ T6010]  ? __might_sleep+0xf0/0xf0
[  166.604715][ T6010]  ? read_lock_is_recursive+0x10/0x10
[  166.610096][ T6010]  ? rcu_is_watching+0x11/0xa0
[  166.614863][ T6010]  ? trace_kmalloc_node+0x1f/0xa0
[  166.619899][ T6010]  ? __kmalloc_node+0x261/0x3a0
[  166.624759][ T6010]  ? down_read+0x1aa/0x2e0
[  166.629182][ T6010]  keyctl_read_key+0x292/0x460
[  166.633954][ T6010]  __se_sys_keyctl+0x17f/0xa20
[  166.638727][ T6010]  ? __x64_sys_keyctl+0xc0/0xc0
[  166.643577][ T6010]  ? preempt_schedule_irq+0xe6/0x160
[  166.648868][ T6010]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  166.654857][ T6010]  ? lock_chain_count+0x20/0x20
[  166.659719][ T6010]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  166.665361][ T6010]  ? lockdep_hardirqs_on+0x94/0x140
[  166.670578][ T6010]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  166.676233][ T6010]  ? __se_sys_keyctl+0x8/0xa20
[  166.681007][ T6010]  do_syscall_64+0x4c/0xa0
[  166.685426][ T6010]  ? clear_bhb_loop+0x30/0x80
[  166.690113][ T6010]  ? clear_bhb_loop+0x30/0x80
[  166.694805][ T6010]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  166.700713][ T6010] RIP: 0033:0x7fa46da24559
[  166.705134][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.724746][ T6010] RSP: 002b:00007fa46bc7c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  166.733196][ T6010] RAX: ffffffffffffffda RBX: 00007fa46dcabfa0 RCX: 00007fa46da24559
[  166.733212][ T6010] RDX: 0000200000000240 RSI: 000000003f43c097 RDI: 000000000000000b
[  166.733225][ T6010] RBP: 00007fa46dabb8b0 R08: 0000000000000000 R09: 0000000000000000
[  166.733237][ T6010] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000
[  166.733247][ T6010] R13: 00007fa46dcac038 R14: 00007fa46dcabfa0 R15: 00007ffcbb3e5ed8
[  166.733271][ T6010]  </TASK>
[  166.786018][ T6010] trusted_key: encrypted_key: failed to allocate request for cbc(aes)
[  167.235673][    C1] net_ratelimit: 59 callbacks suppressed
[  167.342974][ T6032] loop5: detected capacity change from 0 to 512
[  167.398495][ T6032] EXT4-fs (loop5): Ignoring removed oldalloc option
[  167.405818][ T5072] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  167.477772][ T6032] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.450: iget: bad i_size value: 38620345925642
[  167.496309][ T6032] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.450: couldn't read orphan inode 15 (err -117)
[  167.543826][ T6032] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,norecovery,auto_da_alloc,abort,auto_da_alloc=0x0000000000000001,oldalloc,block_validity,,errors=continue. Quota mode: writeback.
[  167.629585][ T6032] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.450: bg 0: block 5: invalid block bitmap
[  167.655504][   T25] audit: type=1800 audit(1792042758.702:34): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.445" name="file2" dev="sda1" ino=2050 res=0 errno=0
[  167.684564][ T6032] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 65 with error 28
[  167.705907][ T6032] EXT4-fs (loop5): This should not happen!! Data will be lost
[  167.705907][ T6032] 
[  167.727051][ T6032] EXT4-fs (loop5): Total free blocks count 0
[  167.736650][ T6032] EXT4-fs (loop5): Free/Dirty block details
[  167.745885][ T6032] EXT4-fs (loop5): free_blocks=0
[  167.757860][ T6032] EXT4-fs (loop5): dirty_blocks=65
[  167.763124][ T6026] loop2: detected capacity change from 0 to 32768
[  167.766831][ T6032] EXT4-fs (loop5): Block reservation details
[  167.776099][ T5072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  167.794099][ T5072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.807416][ T6032] EXT4-fs (loop5): i_reserved_data_blocks=65
[  167.830130][ T6026] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.448 (6026)
[  167.905872][ T5072] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  167.914942][ T5072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.105626][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  168.135624][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  168.155624][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  168.175625][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  168.195625][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  168.687884][ T5072] usb 2-1: config 0 descriptor??
[  168.711596][ T6026] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  168.748685][ T6026] BTRFS info (device loop2): turning on async discard
[  168.766732][ T6026] BTRFS info (device loop2): using free space tree
[  168.807526][ T6026] BTRFS info (device loop2): has skinny extents
[  168.830383][ T6042] IPv6: sit1: Disabled Multicast RS
[  168.966136][ T6026] BTRFS info (device loop2): enabling ssd optimizations
[  169.073634][   T25] audit: type=1804 audit(1792042760.122:35): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.448" name="/newroot/101/file0/bus" dev="loop2" ino=263 res=1 errno=0
[  169.168018][ T5072] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  169.174815][ T5072] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  169.189594][ T5072] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  169.205785][ T5072] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  169.213096][   T25] audit: type=1804 audit(1792042760.262:36): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.448" name="/newroot/101/file0/bus" dev="loop2" ino=263 res=1 errno=0
[  169.234632][ T5072] elan 0003:04F3:0755.0003: unknown main item tag 0x0
[  169.242552][ T5072] elan 0003:04F3:0755.0003: failed to start in urb: -90
[  169.260787][ T5072] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  169.363150][ T6071] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  169.416071][    T7] usb 2-1: USB disconnect, device number 3
[  169.493113][ T6069] fido_id[6069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  169.561231][   T25] audit: type=1326 audit(1792042760.612:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  169.672722][   T25] audit: type=1326 audit(1792042760.612:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  169.772065][   T25] audit: type=1326 audit(1792042760.612:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  169.896656][   T25] audit: type=1326 audit(1792042760.652:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  169.939484][   T25] audit: type=1326 audit(1792042760.652:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  169.963857][   T25] audit: type=1326 audit(1792042760.652:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  170.049073][   T25] audit: type=1326 audit(1792042760.652:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.4.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  172.266160][    C0] net_ratelimit: 48 callbacks suppressed
[  172.321556][ T6124] netlink: 'syz.5.469': attribute type 1 has an invalid length.
[  172.419696][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.468'.
[  172.477646][ T6125] netlink: 44 bytes leftover after parsing attributes in process `syz.4.468'.
[  172.751309][ T6138] jffs2: notice: (6138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  172.837202][ T6136] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.050246][ T6143] bond1: (slave ip6gretap1): making interface the new active one
[  173.087790][ T6143] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  173.251484][ T6136] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  173.383006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  174.325083][ T6159] loop5: detected capacity change from 0 to 512
[  175.027321][ T6159] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  175.497462][ T6177] sock: sock_timestamping_bind_phc: sock not bind to device
[  176.322730][ T6185] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  177.875616][    C1] net_ratelimit: 67 callbacks suppressed
[  179.226509][ T6225] netlink: 52 bytes leftover after parsing attributes in process `syz.3.497'.
[  179.349612][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.500'.
[  179.958461][ T6242] capability: warning: `syz.5.502' uses deprecated v2 capabilities in a way that may be insecure
[  180.100777][ T6242] Invalid option length (137) for dns_resolver key
[  180.292907][ T6251] loop3: detected capacity change from 0 to 16
[  180.377896][ T6251] erofs: (device loop3): mounted with root inode @ nid 36.
[  180.482685][ T6253] netlink: 14 bytes leftover after parsing attributes in process `syz.5.506'.
[  181.856126][   T25] kauditd_printk_skb: 68 callbacks suppressed
[  181.856138][   T25] audit: type=1326 audit(1792042772.912:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  181.952030][ T6323] device macsec1 entered promiscuous mode
[  181.989406][ T6323] device virt_wifi0 entered promiscuous mode
[  182.016872][   T25] audit: type=1326 audit(1792042772.962:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  182.143278][   T25] audit: type=1326 audit(1792042772.962:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  182.203809][   T25] audit: type=1326 audit(1792042772.962:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  182.237792][   T25] audit: type=1326 audit(1792042772.962:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  182.970458][    C0] net_ratelimit: 81 callbacks suppressed
[  182.976302][   T25] audit: type=1326 audit(1792042772.962:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  183.017815][   T25] audit: type=1326 audit(1792042772.962:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  183.119801][   T25] audit: type=1326 audit(1792042772.962:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  183.341680][   T25] audit: type=1326 audit(1792042772.962:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  185.150990][   T25] audit: type=1326 audit(1792042772.962:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.1.515" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  185.275149][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'.
[  185.835638][ T6373] loop1: detected capacity change from 0 to 2048
[  186.696134][ T6373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.128284][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'.
[  187.478863][   T21] Bluetooth: hci0: command 0x0406 tx timeout
[  187.485355][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  187.536086][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  187.556667][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  187.620716][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  187.758330][ T6406] device syzkaller0 entered promiscuous mode
[  187.787332][ T6406] tipc: Started in network mode
[  187.814797][ T6406] tipc: Node identity 6a3c639a3aae, cluster identity 4711
[  187.842050][ T6406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.875854][ T6405] tipc: Resetting bearer <eth:syzkaller0>
[  187.933979][ T6405] tipc: Disabling bearer <eth:syzkaller0>
[  188.160805][ T6412] loop3: detected capacity change from 0 to 2048
[  188.253097][ T6412] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.329569][ T6412] netlink: 'syz.3.545': attribute type 16 has an invalid length.
[  188.347102][ T6412] netlink: 'syz.3.545': attribute type 17 has an invalid length.
[  188.391534][ T6412] netlink: 'syz.3.545': attribute type 27 has an invalid length.
[  188.435607][    C0] net_ratelimit: 60 callbacks suppressed
[  188.455993][ T6425] futex_wake_op: syz.5.551 tries to shift op by 144; fix this program
[  190.005132][ T6452] xt_CT: You must specify a L4 protocol and not use inversions on it
[  190.623188][ T6467] loop2: detected capacity change from 0 to 256
[  191.194785][ T6467] FAT-fs (loop2): Unrecognized mount option "iocharsetp857" or missing value
[  191.259396][ T6477] netlink: 'syz.4.568': attribute type 10 has an invalid length.
[  191.267838][ T6441] loop5: detected capacity change from 0 to 32768
[  191.407367][ T6441] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.556 (6441)
[  191.451024][ T6441] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  191.483779][ T6441] BTRFS info (device loop5): setting nodatacow, compression disabled
[  191.494154][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'.
[  191.531952][ T6441] BTRFS info (device loop5): disabling tree log
[  191.545358][ T6441] BTRFS info (device loop5): turning on async discard
[  191.554881][ T6485] fuse: Bad value for 'fd'
[  191.573322][ T6441] BTRFS info (device loop5): max_inline at 0
[  191.593558][ T6441] BTRFS info (device loop5): using free space tree
[  191.613602][ T6441] BTRFS info (device loop5): has skinny extents
[  191.684500][ T6495] fuse: Bad value for 'fd'
[  191.844783][ T6500] futex_wake_op: syz.3.575 tries to shift op by 144; fix this program
[  191.868460][ T6500] futex_wake_op: syz.3.575 tries to shift op by 144; fix this program
[  191.942590][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'.
[  192.630858][ T6521] netem: change failed
[  193.158915][ T6441] BTRFS error (device loop5): open_ctree failed: -22
[  193.646515][    C1] net_ratelimit: 63 callbacks suppressed
[  193.908497][ T6541] EXT4-fs warning (device sda1): verify_group_input:171: Bad blocks count 0
[  194.722710][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  194.734468][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  194.756246][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  195.166716][ T6557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.589'.
[  195.250604][ T6557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.589'.
[  195.270094][ T6562] loop2: detected capacity change from 0 to 512
[  195.318921][ T6565] fuse: Bad value for 'fd'
[  195.368487][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'.
[  196.022903][ T6557] xt_TCPMSS: Only works on TCP SYN packets
[  196.094369][ T6566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.883634][ T6566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.931939][ T6566] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  197.053707][ T6566] bond0 (unregistering): Released all slaves
[  197.881659][ T6604] netlink: 'syz.4.607': attribute type 14 has an invalid length.
[  198.725381][    C1] net_ratelimit: 95 callbacks suppressed
[  200.887814][ T6649] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  200.948977][   T25] kauditd_printk_skb: 53 callbacks suppressed
[  200.948993][   T25] audit: type=1326 audit(1792045370.000:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  200.980058][ T6649] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  200.988673][   T25] audit: type=1326 audit(1792045370.050:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  201.028522][   T25] audit: type=1326 audit(1792045370.050:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  201.058701][   T25] audit: type=1326 audit(1792045370.050:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  201.089920][   T25] audit: type=1326 audit(1792045370.050:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  201.135701][   T25] audit: type=1326 audit(1792045370.050:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  201.310159][   T25] audit: type=1326 audit(1792045370.050:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  201.335136][   T25] audit: type=1326 audit(1792045370.050:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  201.377234][   T25] audit: type=1326 audit(1792045370.070:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  201.402414][   T25] audit: type=1326 audit(1792045370.070:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.623" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46da24559 code=0x7ffc0000
[  202.429661][ T6686] IPv6: NLM_F_CREATE should be specified when creating new route
[  202.504599][ T6687] netlink: 'syz.5.632': attribute type 1 has an invalid length.
[  202.727693][ T6687] 8021q: adding VLAN 0 to HW filter on device bond2
[  202.901180][ T6689] device gretap1 entered promiscuous mode
[  203.079671][ T6689] bond2: (slave gretap1): making interface the new active one
[  203.216421][ T6689] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  203.285633][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  203.336587][ T6696] bridge0: port 3(vxlan1) entered blocking state
[  203.345369][ T6696] bridge0: port 3(vxlan1) entered disabled state
[  203.398283][ T6696] device vxlan1 entered promiscuous mode
[  203.875000][    C0] net_ratelimit: 78 callbacks suppressed
[  205.105619][ T6728] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.603744][ T6738] netlink: 204 bytes leftover after parsing attributes in process `syz.1.651'.
[  205.637670][ T6745] tipc: Started in network mode
[  205.674867][ T6745] tipc: Node identity ac1414aa, cluster identity 4711
[  205.713695][ T6745] tipc: New replicast peer: 172.20.20.187
[  205.739895][ T6738] xt_CT: You must specify a L4 protocol and not use inversions on it
[  205.788884][ T6745] tipc: Enabled bearer <udp:syz0>, priority 10
[  205.901909][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.654'.
[  205.924793][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'.
[  205.933658][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'.
[  205.933772][ T6750] netlink: 108 bytes leftover after parsing attributes in process `syz.4.654'.
[  205.992823][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.654'.
[  206.019210][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.654'.
[  206.936726][   T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  207.346383][ T1356] tipc: Node number set to 2886997162
[  207.391220][ T6768] tipc: Started in network mode
[  207.403202][ T6768] tipc: Node identity 36fb7458e863, cluster identity 4711
[  207.419859][ T6768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.430579][ T6771] IPv6: NLM_F_CREATE should be specified when creating new route
[  207.534465][   T21] usb 6-1: Using ep0 maxpacket: 32
[  207.639778][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'.
[  207.657091][ T6780] fuse: Bad value for 'fd'
[  207.784863][   T21] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  207.793341][   T21] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  207.793364][   T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  207.793412][   T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  208.254795][   T21] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  208.271008][ T6788] netlink: 'syz.3.667': attribute type 1 has an invalid length.
[  208.896037][   T21] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  208.914108][    C1] net_ratelimit: 72 callbacks suppressed
[  209.022424][   T21] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  209.090794][ T6788] 8021q: adding VLAN 0 to HW filter on device bond2
[  209.101622][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.216777][ T6793] device gretap1 entered promiscuous mode
[  209.231256][   T21] usb 6-1: config 0 descriptor??
[  209.274626][   T21] usb 6-1: can't set config #0, error -71
[  209.323427][   T21] usb 6-1: USB disconnect, device number 3
[  209.424925][ T6793] bond2: (slave gretap1): making interface the new active one
[  209.523357][ T6793] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  209.674438][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  209.696650][ T6535] tipc: Node number set to 3734533208
[  209.724175][   T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  210.673861][   T21] usb 6-1: Using ep0 maxpacket: 8
[  210.794268][   T21] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  210.819285][   T21] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  210.878971][   T21] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  210.916794][   T21] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  210.929761][   T21] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  210.940389][   T21] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.956761][   T21] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  210.966140][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.235067][   T21] usb 6-1: GET_CAPABILITIES returned 0
[  211.240651][   T21] usbtmc 6-1:16.0: can't read capabilities
[  211.483958][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  211.495623][ T6795] usbtmc 6-1:16.0: Unable to send data, error -71
[  211.507929][    T7] usb 6-1: USB disconnect, device number 4
[  214.092163][    C1] net_ratelimit: 51 callbacks suppressed
[  215.709219][ T6847] netlink: 204 bytes leftover after parsing attributes in process `syz.3.687'.
[  215.731949][ T6847] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.735702][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'.
[  216.977375][   T25] kauditd_printk_skb: 185 callbacks suppressed
[  216.977390][   T25] audit: type=1326 audit(1792047964.034:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.4.692" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  217.048127][   T25] audit: type=1326 audit(1792047964.034:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.4.692" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  217.093075][   T25] audit: type=1326 audit(1792047964.034:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.4.692" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  217.829694][ T6873] rxe_eth0 speed is unknown, defaulting to 1000
[  217.854748][ T6882] loop5: detected capacity change from 0 to 2048
[  217.977997][   T25] audit: type=1326 audit(1792050543.038:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.4.692" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  218.076907][ T6882] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  218.183554][   T25] audit: type=1326 audit(1792050543.038:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.4.692" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494e41a559 code=0x7ffc0000
[  218.233874][ T6891] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  219.039031][ T6898] netlink: 64 bytes leftover after parsing attributes in process `syz.3.702'.
[  219.714527][ T4467] net_ratelimit: 79 callbacks suppressed
[  221.024497][ T6944] hub 8-0:1.0: USB hub found
[  221.060662][ T6944] hub 8-0:1.0: 1 port detected
[  221.466687][ T6959] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  223.586537][ T6980] overlayfs: failed to clone upperpath
[  224.831539][    C1] net_ratelimit: 44 callbacks suppressed
[  226.591135][ T5975] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  226.854744][ T5975] usb 6-1: Using ep0 maxpacket: 32
[  227.047584][ T7046] netlink: 56 bytes leftover after parsing attributes in process `syz.3.740'.
[  227.127843][ T7046] 9pnet: Insufficient options for proto=fd
[  227.750114][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.761189][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.771024][ T5975] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  227.780071][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.922139][ T5975] usb 6-1: config 0 descriptor??
[  229.870621][    C0] net_ratelimit: 49 callbacks suppressed
[  230.107410][ T5975] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  230.683136][ T6089] usb 6-1: USB disconnect, device number 5
[  231.334413][ T7084] overlayfs: failed to clone upperpath
[  231.662265][ T7079] fido_id[7079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  232.927519][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'.
[  233.437470][ T7116] rxe_eth0 speed is unknown, defaulting to 1000
[  233.747017][ T7097] netlink: 68 bytes leftover after parsing attributes in process `syz.5.738'.
[  234.017822][ T7116] chnl_net:caif_netlink_parms(): no params data found
[  234.286939][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.307669][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.325159][ T7116] device bridge_slave_0 entered promiscuous mode
[  234.356353][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.373576][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.389525][ T7116] device bridge_slave_1 entered promiscuous mode
[  234.481146][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.509402][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.624250][ T7116] team0: Port device team_slave_0 added
[  234.641002][ T7116] team0: Port device team_slave_1 added
[  234.703288][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.717601][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.751408][ T7116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.771832][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.778808][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.812420][ T7116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.909741][ T7116] device hsr_slave_0 entered promiscuous mode
[  234.916929][ T7116] device hsr_slave_1 entered promiscuous mode
[  234.933738][ T7116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.944800][ T7116] Cannot create hsr debugfs directory
[  234.989646][    C1] net_ratelimit: 60 callbacks suppressed
[  235.222031][ T7116] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  235.235822][ T7116] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  235.248794][ T7116] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  235.265329][ T7116] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  235.319717][ T5975] Bluetooth: hci2: command 0x0409 tx timeout
[  235.355770][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.376018][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  235.384715][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  235.396314][ T7116] 8021q: adding VLAN 0 to HW filter on device team0
[  235.408164][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  235.421275][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  235.437082][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.444236][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.474325][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  235.484033][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  235.493066][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  235.502727][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.509837][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.519040][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  235.528715][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  235.551335][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  235.563142][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  235.571957][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  235.585909][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  235.594898][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  235.609332][ T7116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.622078][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  235.631411][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  235.640013][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  235.728590][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.743813][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.755410][ T7116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.875022][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  235.885643][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  235.905302][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  235.918507][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  235.928244][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  235.936257][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  235.946680][ T7116] device veth0_vlan entered promiscuous mode
[  235.967219][ T7116] device veth1_vlan entered promiscuous mode
[  235.988825][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  235.997590][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  236.005713][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  236.014601][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  236.027880][ T7116] device veth0_macvtap entered promiscuous mode
[  236.039178][ T7116] device veth1_macvtap entered promiscuous mode
[  236.058045][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.069340][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.080523][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.091491][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.102026][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.113178][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.123923][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.137687][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.147970][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.159225][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.169107][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.180944][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.193167][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.203575][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.214526][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.224434][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.235026][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.245085][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.255991][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.268734][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.280495][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.290471][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.301070][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.311272][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.321997][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.333427][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.343352][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  236.352265][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  236.360568][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  236.369177][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  236.378993][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  236.390980][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  236.403863][ T7116] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.412933][ T7116] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.421763][ T7116] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.430739][ T7116] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.518827][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.539506][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.548674][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  236.582490][ T4630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.591653][ T4630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.600945][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  236.893498][ T7170] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  236.952096][ T7183] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.620969][ T6535] Bluetooth: hci2: command 0x041b tx timeout
[  237.696588][ T7170] kvm: pic: non byte read
[  239.638993][ T6088] Bluetooth: hci2: command 0x040f tx timeout
[  240.028776][    C1] net_ratelimit: 83 callbacks suppressed
[  240.601654][ T7227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.761'.
[  240.902198][ T7232] device syzkaller0 entered promiscuous mode
[  241.141352][ T7239] xt_CT: You must specify a L4 protocol and not use inversions on it
[  241.721819][ T6088] Bluetooth: hci2: command 0x0419 tx timeout
[  244.909054][   T25] audit: type=1800 audit(1792050569.972:375): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.765" name="file2" dev="sda1" ino=2050 res=0 errno=0
[  245.108265][ T4264] net_ratelimit: 63 callbacks suppressed
[  246.176388][ T7277] bridge0: port 3(macvlan2) entered blocking state
[  246.185113][ T7277] bridge0: port 3(macvlan2) entered disabled state
[  246.219718][ T7277] device macvlan2 entered promiscuous mode
[  246.283434][ T7277] bridge0: port 3(macvlan2) entered blocking state
[  246.290055][ T7277] bridge0: port 3(macvlan2) entered forwarding state
[  246.966740][ T7287] loop6: detected capacity change from 0 to 128
[  247.747191][ T7287] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  248.007866][ T7287] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.055016][ T7286] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.778: No space for directory leaf checksum. Please run e2fsck -D.
[  248.117599][ T7286] EXT4-fs error (device loop6): __ext4_find_entry:1698: inode #2: comm syz.6.778: checksumming directory block 0
[  250.346993][    C1] net_ratelimit: 77 callbacks suppressed
[  250.559851][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.588303][ T7342] device bridge_slave_0 left promiscuous mode
[  250.595180][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.174151][ T7354] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  252.182450][ T7354] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  252.191259][ T7354] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  252.201147][ T7354] Error parsing options; rc = [-22]
[  254.456225][ T7388] sctp: [Deprecated]: syz.2.805 (pid 7388) Use of struct sctp_assoc_value in delayed_ack socket option.
[  254.456225][ T7388] Use struct sctp_sack_info instead
[  254.477202][ T7388] sctp: [Deprecated]: syz.2.805 (pid 7388) Use of struct sctp_assoc_value in delayed_ack socket option.
[  254.477202][ T7388] Use struct sctp_sack_info instead
[  254.497083][ T7379] loop6: detected capacity change from 0 to 4096
[  254.572710][ T7379] EXT4-fs (loop6): Ignoring removed nobh option
[  254.583959][ T7379] EXT4-fs (loop6): Test dummy encryption mode enabled
[  254.591640][ T7379] EXT4-fs (loop6): Ignoring removed bh option
[  254.721337][ T7379] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[  255.386143][    C1] net_ratelimit: 69 callbacks suppressed
[  255.946108][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  255.958303][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  255.964641][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  256.001681][ T7408] serio: Serial port ptm0
[  256.117744][ T7408] serio: Serial port ptm0
[  256.198320][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.239983][ T7398] batman_adv: batadv0: Interface deactivated: dummy0
[  256.593502][ T7398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.631065][ T7398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.963603][ T7398] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.972787][ T7398] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.981997][ T7398] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.990993][ T7398] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.174402][ T7398] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.183491][ T7398] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.192527][ T7398] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.201449][ T7398] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.222417][ T7377] netlink: 'syz.6.803': attribute type 12 has an invalid length.
[  257.297327][ T7414] netlink: 'syz.5.812': attribute type 13 has an invalid length.
[  257.357118][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  257.426800][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  257.443545][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  257.461621][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready
[  257.499518][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready
[  257.546162][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready
[  257.554637][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready
[  257.581149][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready
[  257.591743][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready
[  257.599996][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready
[  257.620125][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready
[  257.712876][ T7429] binder: 7425:7429 ioctl c018620c 200000000080 returned -22
[  257.791516][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready
[  257.865228][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready
[  257.941674][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready
[  258.031784][ T7414] rdma_rxe: ignoring netdev event = 30 for rxe_eth0
[  258.081250][ T7414] infiniband rxe0: set active
[  258.134781][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready
[  258.226151][ T7414] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready
[  258.326709][ T7423] netlink: 14 bytes leftover after parsing attributes in process `syz.2.813'.
[  258.349562][ T7423] batman_adv: batadv0: Removing interface: dummy0
[  258.368405][ T4257] rxe_eth0 speed is unknown, defaulting to 1000
[  260.425406][    C0] net_ratelimit: 74 callbacks suppressed
[  260.598748][ T7460] loop6: detected capacity change from 0 to 256
[  261.855525][ T7470] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  263.047084][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'.
[  263.062323][ T7493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  263.707346][ T7498] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  263.852760][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.906349][ T7504] device bridge_slave_0 left promiscuous mode
[  263.932003][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.004955][ T7504] team0: Port device bridge_slave_0 added
[  265.210086][ T7528] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups)
[  265.846503][ T4611] net_ratelimit: 43 callbacks suppressed
[  266.650114][ T7536] loop6: detected capacity change from 0 to 2048
[  266.801094][ T7541] netlink: 'syz.5.850': attribute type 1 has an invalid length.
[  266.849919][ T7543] fuse: Bad value for 'fd'
[  266.854602][ T7541] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.850'.
[  266.867961][ T7536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  267.824388][ T7563] loop5: detected capacity change from 0 to 512
[  268.554147][ T7572] xt_TPROXY: Can be used only with -p tcp or -p udp
[  268.877582][ T7563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  268.973976][ T7563] System zones: 1-12
[  269.012088][ T7563] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.857: missing EA_INODE flag
[  269.100231][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'.
[  269.122039][ T7563] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.857: error while reading EA inode 12 err=-117
[  269.154147][ T7563] EXT4-fs (loop5): 1 orphan inode deleted
[  269.162608][ T7563] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  270.853540][ T4467] net_ratelimit: 47 callbacks suppressed
[  271.105483][ T7601] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  272.139422][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'.
[  272.269393][ T7636] fuse: Bad value for 'fd'
[  272.558044][ T7651] nvmet_tcp: malformed ip/port passed: :4
[  272.730478][ T7657] netlink: 'syz.3.884': attribute type 4 has an invalid length.
[  274.023307][ T7676] loop5: detected capacity change from 0 to 40427
[  274.191292][ T7676] F2FS-fs (loop5): invalid crc_offset: 4177530876
[  274.268509][ T7676] F2FS-fs (loop5): Wrong journal entry on segno 65538
[  274.276222][ T7676] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117)
[  275.482185][ T7697] loop6: detected capacity change from 0 to 128
[  275.992821][ T7707] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7707]
[  276.366474][ T7706] loop5: detected capacity change from 0 to 1024
[  276.422941][    C1] net_ratelimit: 52 callbacks suppressed
[  276.547117][ T7706] EXT4-fs (loop5): Test dummy encryption mode enabled
[  276.627315][ T7706] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  276.769104][ T7712] ipt_REJECT: TCP_RESET invalid for non-tcp
[  280.723627][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'.
[  281.461536][    C1] net_ratelimit: 44 callbacks suppressed
[  281.852855][ T4686] IPVS: ip_vs_send_async error -101
[  282.141639][ T7783] jffs2: notice: (7783) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  284.256189][ T1107] Bluetooth: hci5: command 0x0406 tx timeout
[  284.511567][ T4686] IPVS: ip_vs_send_async error -101
[  286.662408][    C1] net_ratelimit: 41 callbacks suppressed
[  286.915162][ T7849] loop6: detected capacity change from 0 to 512
[  287.007969][ T7854] tmpfs: Unknown parameter 'usrquotþ²êßm"ÌóVK\íßJa_blo'
[  287.306204][ T7862] netlink: 76 bytes leftover after parsing attributes in process `syz.5.946'.
[  287.750606][ T7854] overlayfs: './file0' not a directory
[  287.776625][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.943'.
[  287.791945][ T7854] Error parsing options; rc = [-22]
[  288.058607][ T7875] netlink: 112 bytes leftover after parsing attributes in process `syz.4.950'.
[  291.699928][    C1] net_ratelimit: 43 callbacks suppressed
[  292.775157][   T25] audit: type=1326 audit(1792050617.851:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.6.964" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f229777c559 code=0x0
[  293.506080][ T7927] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  293.657631][ T7927] bond2: (slave macvlan2): making interface the new active one
[  293.817124][ T7927] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  294.734858][ T7958] jffs2: notice: (7958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  295.484810][ T7958] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  295.521478][ T7964] netlink: 'syz.2.975': attribute type 4 has an invalid length.
[  295.559297][ T7964] netlink: 17 bytes leftover after parsing attributes in process `syz.2.975'.
[  295.603042][ T7968] netlink: 56 bytes leftover after parsing attributes in process `syz.3.976'.
[  296.729853][ T4264] net_ratelimit: 40 callbacks suppressed
[  297.577485][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.584977][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.745196][ T7968] device bond_slave_0 left promiscuous mode
[  298.409339][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.492386][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.079069][ T7968] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.087986][ T7968] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.097199][ T7968] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.106479][ T7968] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  299.310673][ T7968] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.319661][ T7968] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.328833][ T7968] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.337718][ T7968] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.460893][ T8001] netlink: 'syz.5.984': attribute type 11 has an invalid length.
[  299.516137][ T8010] netlink: 'syz.2.988': attribute type 13 has an invalid length.
[  299.528199][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  299.582349][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  299.612387][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  300.279494][ T8018] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  300.308911][ T8018] Cannot find add_set index 0 as target
[  300.328899][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready
[  300.400430][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready
[  300.482237][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready
[  300.526438][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready
[  300.546937][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready
[  300.558543][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready
[  300.566074][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready
[  300.586685][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready
[  300.624497][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready
[  300.636599][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready
[  300.655475][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready
[  300.684706][ T8010] infiniband rxe0: set active
[  300.693851][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready
[  300.706854][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): lapb7: link becomes ready
[  300.730547][ T4257] rxe_eth0 speed is unknown, defaulting to 1000
[  302.577903][    C1] net_ratelimit: 58 callbacks suppressed
[  307.643650][ T4467] net_ratelimit: 34 callbacks suppressed
[  307.667919][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.964898][ T8125] unsupported nlmsg_type 40
[  309.012309][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.054152][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.569545][ T8084] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.585115][ T8084] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.594415][ T8084] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.611908][ T8084] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.777122][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'.
[  309.878647][ T8108] netlink: 'syz.4.1009': attribute type 12 has an invalid length.
[  309.974981][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1012'.
[  312.736125][    C1] net_ratelimit: 31 callbacks suppressed
[  313.136449][ T4257] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  313.556656][ T4257] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  313.668449][ T4257] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  313.776636][ T4257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.836728][ T4257] usb 7-1: config 0 descriptor??
[  314.575475][ T4257] pwc: Askey VC010 type 2 USB webcam detected.
[  314.596189][ T4257] pwc: send_video_command error -71
[  314.601488][ T4257] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  314.622180][ T4257] Philips webcam: probe of 7-1:0.0 failed with error -71
[  314.661865][ T4257] usb 7-1: USB disconnect, device number 2
[  314.831329][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'.
[  314.935312][ T8177] device virt_wifi0 left promiscuous mode
[  315.260809][ T4257] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  316.755701][ T4257] usb 7-1: device not accepting address 3, error -71
[  317.823779][    C1] net_ratelimit: 25 callbacks suppressed
[  317.831837][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  317.842113][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  318.291286][ T8229] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  319.250404][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1052'.
[  321.936060][ T8285] netlink: 'syz.4.1067': attribute type 11 has an invalid length.
[  322.837405][    C0] net_ratelimit: 33 callbacks suppressed
[  322.884211][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1071'.
[  323.203547][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1073'.
[  323.586472][ T8319] batman_adv: batadv0: Adding interface: ip6gretap1
[  323.606109][ T8319] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.663062][ T8319] batman_adv: batadv0: Interface activated: ip6gretap1
[  324.772424][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'.
[  325.382061][ T8344] device bond_slave_0 entered promiscuous mode
[  325.389030][ T8344] device bond_slave_1 entered promiscuous mode
[  325.395258][ T8344] device dummy0 entered promiscuous mode
[  325.455203][ T8344] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  325.495002][ T8344] bond2: (slave macvlan3): making interface the new active one
[  325.517419][ T8344] bond2: (slave macvlan3): Enslaving as an active interface with an up link
[  325.540077][ T8337] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1082'.
[  325.580128][ T8337] device bond_slave_0 left promiscuous mode
[  325.592869][ T8337] device bond_slave_1 left promiscuous mode
[  325.601685][ T8337] device dummy0 left promiscuous mode
[  325.657521][ T8337] bond2: (slave macvlan3): Releasing active interface
[  325.696362][ T8337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  325.723699][ T8337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  325.762087][ T8337] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  325.792424][ T8337] bond0 (unregistering): Released all slaves
[  327.893579][ T5977] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  327.984282][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  328.253951][ T4264] net_ratelimit: 47 callbacks suppressed
[  328.273463][ T5977] usb 7-1: Using ep0 maxpacket: 8
[  328.884454][ T5977] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  329.095495][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.104698][ T5977] usb 7-1: Product: syz
[  329.108866][ T5977] usb 7-1: Manufacturer: syz
[  329.113478][ T5977] usb 7-1: SerialNumber: syz
[  329.170036][ T5977] usb 7-1: config 0 descriptor??
[  329.227215][ T5977] gspca_main: sq930x-2.14.0 probing 2770:930c
[  329.235409][ T8380] overlayfs: unrecognized mount option "subj_role=workdir" or missing value
[  331.096965][ T8415] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.1104'.
[  331.123058][ T5977] gspca_sq930x: reg_w 0105 0f00 failed -71
[  331.129346][ T5977] sq930x: probe of 7-1:0.0 failed with error -71
[  331.165117][ T5977] usb 7-1: USB disconnect, device number 5
[  331.268538][ T8423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.342977][ T8425] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.501014][ T8430] 9pnet_virtio: no channels available for device syz
[  332.838878][ T1107] tipc: Node number set to 2260312574
[  333.138859][ T8442] fuse: Bad value for 'fd'
[  333.221272][ T8447] loop6: detected capacity change from 0 to 512
[  333.264173][    C0] net_ratelimit: 38 callbacks suppressed
[  333.287289][ T8449] device lo entered promiscuous mode
[  333.322708][ T8449] device tunl0 entered promiscuous mode
[  333.328394][ T8449] device gre0 entered promiscuous mode
[  333.359022][ T8449] device gretap0 entered promiscuous mode
[  333.400211][ T8449] device erspan0 entered promiscuous mode
[  333.409841][ T8447] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  333.442811][ T8449] device ip_vti0 entered promiscuous mode
[  333.448858][ T8449] device ip6_vti0 entered promiscuous mode
[  333.496419][ T8447] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  333.505216][ T8449] device sit0 entered promiscuous mode
[  333.525948][ T8449] device ip6tnl0 entered promiscuous mode
[  333.532272][ T8449] device ip6gre0 entered promiscuous mode
[  333.542641][ T8449] device ip6gretap0 entered promiscuous mode
[  333.548868][ T8449] device bridge0 entered promiscuous mode
[  333.565766][ T8449] device vcan0 entered promiscuous mode
[  333.571570][ T8449] device bond0 entered promiscuous mode
[  333.582610][ T8449] device bond_slave_0 entered promiscuous mode
[  333.589159][ T8449] device bond_slave_1 entered promiscuous mode
[  333.602664][ T8449] device team0 entered promiscuous mode
[  333.608655][ T8449] device team_slave_0 entered promiscuous mode
[  333.646092][ T8449] device team_slave_1 entered promiscuous mode
[  333.683778][ T8449] device bridge_slave_0 entered promiscuous mode
[  333.716583][ T8449] device nlmon0 entered promiscuous mode
[  333.724970][ T8449] device caif0 entered promiscuous mode
[  333.730863][ T8449] device batadv0 entered promiscuous mode
[  333.742668][ T8449] device vxcan0 entered promiscuous mode
[  333.866976][ T8449] device vxcan1 entered promiscuous mode
[  333.885348][ T8449] device veth0 entered promiscuous mode
[  333.969903][ T8461] xt_hashlimit: max too large, truncated to 1048576
[  334.044377][ T8449] device veth1 entered promiscuous mode
[  334.338823][ T8449] device wg0 entered promiscuous mode
[  334.423603][ T8449] device wg1 entered promiscuous mode
[  334.429914][ T8449] device wg2 entered promiscuous mode
[  334.435932][ T8449] device veth0_to_bridge entered promiscuous mode
[  334.446775][ T8449] device veth1_to_bridge entered promiscuous mode
[  334.454394][ T8449] device veth0_to_bond entered promiscuous mode
[  334.461987][ T8449] device veth1_to_bond entered promiscuous mode
[  334.488525][ T8449] device veth0_to_team entered promiscuous mode
[  334.501869][ T8449] device veth1_to_team entered promiscuous mode
[  334.517457][ T8449] device veth0_to_batadv entered promiscuous mode
[  334.530911][ T8449] device batadv_slave_0 entered promiscuous mode
[  334.561588][ T8449] device veth1_to_batadv entered promiscuous mode
[  334.589459][ T8449] device batadv_slave_1 entered promiscuous mode
[  334.603302][ T8449] device xfrm0 entered promiscuous mode
[  334.633780][ T8449] device veth0_to_hsr entered promiscuous mode
[  334.675933][ T8449] device veth1_to_hsr entered promiscuous mode
[  334.704551][ T8449] device hsr0 entered promiscuous mode
[  334.727183][ T8449] device veth1_virt_wifi entered promiscuous mode
[  334.757026][ T8449] device veth0_virt_wifi entered promiscuous mode
[  334.757119][ T8449] device virt_wifi0 entered promiscuous mode
[  334.798364][ T8449] device vlan0 entered promiscuous mode
[  334.819394][ T8449] device vlan1 entered promiscuous mode
[  334.839633][ T8449] device macvlan0 entered promiscuous mode
[  334.856797][ T8449] device macvlan1 entered promiscuous mode
[  334.873728][ T8449] device ipvlan0 entered promiscuous mode
[  334.890965][ T8449] device ipvlan1 entered promiscuous mode
[  334.909498][ T8449] device macvtap0 entered promiscuous mode
[  334.926579][ T8449] device macsec0 entered promiscuous mode
[  334.941625][ T8449] device geneve0 entered promiscuous mode
[  334.963721][ T8449] device geneve1 entered promiscuous mode
[  334.980964][ T8449] device netdevsim0 entered promiscuous mode
[  334.999571][ T8449] device netdevsim1 entered promiscuous mode
[  335.017621][ T8449] device netdevsim2 entered promiscuous mode
[  335.046265][ T8449] device netdevsim3 entered promiscuous mode
[  335.073565][ T8449] device wlan0 entered promiscuous mode
[  335.091525][ T8449] device wlan1 entered promiscuous mode
[  335.110580][ T8449] device bond1 entered promiscuous mode
[  335.136020][ T8449] device ip6gretap1 entered promiscuous mode
[  335.161937][ T8449] device bond2 entered promiscuous mode
[  335.188610][ T8449] device bridge1 entered promiscuous mode
[  335.202529][ T8449] device nicvf0 entered promiscuous mode
[  335.218990][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'.
[  336.262275][ T8478] ------------[ cut here ]------------
[  336.270044][ T8478] wlan0: Failed check-sdata-in-driver check, flags: 0x4
[  336.325059][ T8478] WARNING: CPU: 0 PID: 8478 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550
[  336.381913][ T8478] Modules linked in:
[  336.393456][ T8478] CPU: 0 PID: 8478 Comm: syz.2.1124 Not tainted syzkaller #0
[  336.431801][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  336.469572][ T8478] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  336.522167][ T8478] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9
[  336.572523][ T8478] RSP: 0018:ffffc900032ef240 EFLAGS: 00010246
[  336.581640][ T8478] RAX: 5cad35cf7f313300 RBX: 0000000000400000 RCX: 0000000000080000
[  336.601730][ T8478] RDX: ffffc9000eefd000 RSI: 0000000000003c1d RDI: 0000000000003c1e
[  336.628687][ T8478] RBP: 0000000000000004 R08: ffffffff9101512f R09: 1ffffffff2202a25
[  336.651589][ T8478] R10: dffffc0000000000 R11: fffffbfff2202a26 R12: ffff88805e8fc000
[  336.672282][ T8478] R13: ffff88805e8fd290 R14: ffff88802b540e00 R15: ffff88805e8fe268
[  336.694850][ T8478] FS:  00007fac2b2a56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  336.722463][ T8478] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  336.941996][ T8478] CR2: 00007f494e6704b8 CR3: 00000000297d1000 CR4: 00000000003506f0
[  337.035149][ T8478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  337.069010][ T8478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  337.088495][ T8478] Call Trace:
[  337.094387][ T8478]  <TASK>
[  337.098984][ T8478]  ? netif_carrier_on+0xd1/0x120
[  337.114254][ T8478]  ieee80211_ocb_leave+0x27f/0x320
[  337.121243][ T8478]  __cfg80211_leave_ocb+0x219/0x400
[  337.137459][ T8478]  cfg80211_leave_ocb+0x53/0x70
[  337.155888][ T8478]  cfg80211_change_iface+0x4ec/0xe10
[  337.170710][ T8478]  nl80211_set_interface+0x5b8/0x810
[  337.180712][ T8478]  ? nl80211_dump_interface+0x560/0x560
[  337.196336][ T8478]  ? mutex_lock_nested+0x17/0x20
[  337.209154][ T8478]  ? nl80211_pre_doit+0x27b/0x540
[  337.222866][ T8478]  genl_rcv_msg+0xd0b/0xfa0
[  337.222916][ T8478]  ? genl_bind+0x370/0x370
[  337.222945][ T8478]  ? verify_lock_unused+0x140/0x140
[  337.222968][ T8478]  ? verify_lock_unused+0x140/0x140
[  337.235547][ T8478]  ? nl80211_dump_interface+0x560/0x560
[  337.248652][ T8478]  netlink_rcv_skb+0x1e9/0x430
[  337.262653][ T8478]  ? genl_bind+0x370/0x370
[  337.267125][ T8478]  ? netlink_ack+0xb10/0xb10
[  337.272963][ T8478]  ? down_read+0x1aa/0x2e0
[  337.278609][ T8478]  genl_rcv+0x24/0x40
[  337.283466][ T8478]  netlink_unicast+0x78f/0x940
[  337.289183][ T8478]  netlink_sendmsg+0x8ba/0xbe0
[  337.294611][ T8478]  ? netlink_getsockopt+0x570/0x570
[  337.301948][ T8478]  ? aa_sock_msg_perm+0x94/0x150
[  337.307349][ T8478]  ? apparmor_socket_sendmsg+0x88/0x230
[  337.313762][ T8478]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  337.319752][ T8478]  ? security_socket_sendmsg+0x7c/0xa0
[  337.327018][ T8478]  ? netlink_getsockopt+0x570/0x570
[  337.333637][ T8478]  ____sys_sendmsg+0x5be/0x8f0
[  337.338675][ T8478]  ? __sys_sendmsg_sock+0x30/0x30
[  337.345214][ T8478]  ? import_iovec+0x6f/0xa0
[  337.350077][ T8478]  ___sys_sendmsg+0x236/0x2e0
[  337.355134][ T8478]  ? __sys_sendmsg+0x290/0x290
[  337.360395][ T8478]  __se_sys_sendmsg+0x1b7/0x2a0
[  337.368055][ T8478]  ? __x64_sys_sendmsg+0x80/0x80
[  337.376227][ T8478]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  337.382861][ T8478]  ? lockdep_hardirqs_on+0x94/0x140
[  337.390018][ T8478]  do_syscall_64+0x4c/0xa0
[  337.395394][ T8478]  ? clear_bhb_loop+0x30/0x80
[  337.402986][ T8478]  ? clear_bhb_loop+0x30/0x80
[  337.408236][ T8478]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  337.414269][ T8478] RIP: 0033:0x7fac2d06e559
[  337.419764][ T8478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  337.442809][ T8478] RSP: 002b:00007fac2b2a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  337.453091][ T8478] RAX: ffffffffffffffda RBX: 00007fac2d2f6090 RCX: 00007fac2d06e559
[  337.462141][ T8478] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  337.470614][ T8478] RBP: 00007fac2d1058b0 R08: 0000000000000000 R09: 0000000000000000
[  337.481345][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.491342][ T8478] R13: 00007fac2d2f6128 R14: 00007fac2d2f6090 R15: 00007ffd84a98798
[  337.504551][ T8478]  </TASK>
[  337.507847][ T8478] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  337.515515][ T8478] CPU: 0 PID: 8478 Comm: syz.2.1124 Not tainted syzkaller #0
[  337.525578][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  337.536689][ T8478] Call Trace:
[  337.540395][ T8478]  <TASK>
[  337.543733][ T8478]  dump_stack_lvl+0x188/0x250
[  337.549056][ T8478]  ? show_regs_print_info+0x20/0x20
[  337.555666][ T8478]  ? load_image+0x410/0x410
[  337.561668][ T8478]  panic+0x2f8/0x850
[  337.565913][ T8478]  ? bpf_jit_dump+0xd0/0xd0
[  337.572289][ T8478]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  337.579862][ T8478]  __warn+0x248/0x2b0
[  337.584794][ T8478]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  337.591746][ T8478]  report_bug+0x1b9/0x2e0
[  337.596368][ T8478]  handle_bug+0x3a/0x70
[  337.602280][ T8478]  exc_invalid_op+0x16/0x40
[  337.607678][ T8478]  asm_exc_invalid_op+0x16/0x20
[  337.617206][ T8478] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  337.628328][ T8478] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9
[  337.656099][ T8478] RSP: 0018:ffffc900032ef240 EFLAGS: 00010246
[  337.663110][ T8478] RAX: 5cad35cf7f313300 RBX: 0000000000400000 RCX: 0000000000080000
[  337.673103][ T8478] RDX: ffffc9000eefd000 RSI: 0000000000003c1d RDI: 0000000000003c1e
[  337.684596][ T8478] RBP: 0000000000000004 R08: ffffffff9101512f R09: 1ffffffff2202a25
[  337.694622][ T8478] R10: dffffc0000000000 R11: fffffbfff2202a26 R12: ffff88805e8fc000
[  337.703526][ T8478] R13: ffff88805e8fd290 R14: ffff88802b540e00 R15: ffff88805e8fe268
[  337.713224][ T8478]  ? netif_carrier_on+0xd1/0x120
[  337.722774][ T8478]  ieee80211_ocb_leave+0x27f/0x320
[  337.728373][ T8478]  __cfg80211_leave_ocb+0x219/0x400
[  337.735938][ T8478]  cfg80211_leave_ocb+0x53/0x70
[  337.741356][ T8478]  cfg80211_change_iface+0x4ec/0xe10
[  337.747145][ T8478]  nl80211_set_interface+0x5b8/0x810
[  337.754767][ T8478]  ? nl80211_dump_interface+0x560/0x560
[  337.762320][ T8478]  ? mutex_lock_nested+0x17/0x20
[  337.767583][ T8478]  ? nl80211_pre_doit+0x27b/0x540
[  337.773293][ T8478]  genl_rcv_msg+0xd0b/0xfa0
[  337.778319][ T8478]  ? genl_bind+0x370/0x370
[  337.783343][ T8478]  ? verify_lock_unused+0x140/0x140
[  337.788656][ T8478]  ? verify_lock_unused+0x140/0x140
[  337.796050][ T8478]  ? nl80211_dump_interface+0x560/0x560
[  337.801812][ T8478]  netlink_rcv_skb+0x1e9/0x430
[  337.808302][ T8478]  ? genl_bind+0x370/0x370
[  337.813221][ T8478]  ? netlink_ack+0xb10/0xb10
[  337.818107][ T8478]  ? down_read+0x1aa/0x2e0
[  337.824045][ T8478]  genl_rcv+0x24/0x40
[  337.829222][ T8478]  netlink_unicast+0x78f/0x940
[  337.834710][ T8478]  netlink_sendmsg+0x8ba/0xbe0
[  337.839671][ T8478]  ? netlink_getsockopt+0x570/0x570
[  337.845202][ T8478]  ? aa_sock_msg_perm+0x94/0x150
[  337.852739][    C1] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 6)
[  337.853416][ T8478]  ? apparmor_socket_sendmsg+0x88/0x230
[  337.853445][ T8478]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  337.853465][ T8478]  ? security_socket_sendmsg+0x7c/0xa0
[  337.853483][ T8478]  ? netlink_getsockopt+0x570/0x570
[  337.853501][ T8478]  ____sys_sendmsg+0x5be/0x8f0
[  337.872126][    C1] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 20 attempts, giving up
[  337.879537][ T8478]  ? __sys_sendmsg_sock+0x30/0x30
[  337.885178][    C1] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 9)
[  337.891731][ T8478]  ? import_iovec+0x6f/0xa0
[  337.891769][ T8478]  ___sys_sendmsg+0x236/0x2e0
[  337.891798][ T8478]  ? __sys_sendmsg+0x290/0x290
[  337.898223][    C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888074248c98 is addr:2001:: for cmd:0 at entry:ffff88805e1e8a80
[  337.903898][ T8478]  __se_sys_sendmsg+0x1b7/0x2a0
[  337.903937][ T8478]  ? __x64_sys_sendmsg+0x80/0x80
[  337.915642][    C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later
[  337.920586][ T8478]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  337.932538][    C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88807dcc8c98 is addr:2001:: for cmd:0 at entry:ffff88802cc75f80
[  337.938554][ T8478]  ? lockdep_hardirqs_on+0x94/0x140
[  337.943331][    C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later
[  337.948882][ T8478]  do_syscall_64+0x4c/0xa0
[  337.985138][ T4467] nf_conntrack: normal packet for ffff888077e82600
[  337.985228][ T8478]  ? clear_bhb_loop+0x30/0x80
[  337.985257][ T8478]  ? clear_bhb_loop+0x30/0x80
[  337.985278][ T8478]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  337.985300][ T8478] RIP: 0033:0x7fac2d06e559
[  337.985316][ T8478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.011999][    C1] nf_conntrack: new packet for ffff88804d2bad80
[  338.014003][ T8478] RSP: 002b:00007fac2b2a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  338.014030][ T8478] RAX: ffffffffffffffda RBX: 00007fac2d2f6090 RCX: 00007fac2d06e559
[  338.014043][ T8478] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  338.014054][ T8478] RBP: 00007fac2d1058b0 R08: 0000000000000000 R09: 0000000000000000
[  338.014065][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.014075][ T8478] R13: 00007fac2d2f6128 R14: 00007fac2d2f6090 R15: 00007ffd84a98798
[  338.023264][    C1] nf_nat: Already setup manip DST for ct ffff88804d2bad80 (status bits 0x188)
[  338.027712][ T8478]  </TASK>
[  338.034550][ T8478] Kernel Offset: disabled
[  338.161412][ T8478] Rebooting in 86400 seconds..