last executing test programs:

16m19.714065056s ago: executing program 1 (id=129):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x161601)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c446, &(0x7f0000002880)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES8=0x0], 0x1, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

16m16.872707024s ago: executing program 1 (id=135):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_pts(r4, 0x3)

16m12.25606997s ago: executing program 1 (id=143):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x3fd, &(0x7f0000000500)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x400000000000000}])

16m12.052842062s ago: executing program 1 (id=145):
syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1800880, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x5fb, &(0x7f0000000b00)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)

16m10.934354813s ago: executing program 1 (id=150):
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180))
connect$unix(0xffffffffffffffff, 0x0, 0x67)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

16m10.052642435s ago: executing program 1 (id=152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x8, 0xffff, 0x400e0a, 0x7f, ' <\x00', 0x8, 0x5})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700)
mount(&(0x7f0000000040)=@filename='./loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x85, &(0x7f0000000400)='rtdev=./loop0\x00')

16m9.813740015s ago: executing program 32 (id=152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x8, 0xffff, 0x400e0a, 0x7f, ' <\x00', 0x8, 0x5})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700)
mount(&(0x7f0000000040)=@filename='./loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x85, &(0x7f0000000400)='rtdev=./loop0\x00')

11m32.214998034s ago: executing program 2 (id=736):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0)
write(r0, &(0x7f0000000200)='res', 0x3)

11m23.912549043s ago: executing program 2 (id=753):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x728d9debdaa4f37e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

11m22.745300946s ago: executing program 2 (id=757):
socket(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x800008, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1fe)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, 0x0)
write$vga_arbiter(r4, &(0x7f0000000240), 0xf)

11m16.422300915s ago: executing program 2 (id=775):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000019c0), 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xa, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

11m15.936845551s ago: executing program 2 (id=777):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xcc5e, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x52, 0x8c}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
getpeername(r1, 0x0, &(0x7f00000005c0))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000040)='1\x00', 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24004884)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x28, {0x28, 0x21, "c26313087d4402625682ac4a7cb2eace918d0fb74237cc6e446c4e88e78881ce2a52973661d6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

11m9.680015796s ago: executing program 2 (id=790):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)

11m9.113322478s ago: executing program 33 (id=790):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)

2m42.131359505s ago: executing program 3 (id=1918):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400)
inotify_rm_watch(0xffffffffffffffff, r5)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1})
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

2m40.746420262s ago: executing program 3 (id=1920):
unshare(0x2c020400)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
r0 = semget$private(0x0, 0x4000, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

2m37.17192771s ago: executing program 3 (id=1931):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setuid(0xee01)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x1)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, 0x0, 0x0)
open(0x0, 0x81, 0x166)
r5 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r3, 0x0, r5, 0x0, 0x3, 0x6)

2m35.682275145s ago: executing program 3 (id=1933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)

2m35.631210275s ago: executing program 3 (id=1934):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
close_range(r0, 0xffffffffffffffff, 0x0)

2m35.175480236s ago: executing program 3 (id=1937):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345)
r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)
fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, <r3=>r2})
r4 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480))
sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x200a7a)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r6 = syz_open_procfs(r3, &(0x7f0000000380)='net/connector\x00')
pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)
socketpair(0x11, 0x2, 0x2, 0x0)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r7, 0x0, 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')

2m34.713567608s ago: executing program 34 (id=1937):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345)
r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil)
fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, <r3=>r2})
r4 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480))
sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x200a7a)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r6 = syz_open_procfs(r3, &(0x7f0000000380)='net/connector\x00')
pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8)
socketpair(0x11, 0x2, 0x2, 0x0)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r7, 0x0, 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')

6.732218462s ago: executing program 7 (id=2328):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)

6.627141294s ago: executing program 7 (id=2331):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="33020000000100000000000086dd6000000000072c40fe800000001000000000000000000001ff0200000000000000000000000000018b017811c9bfc591493b2cc6038f4b6302bb31b597130a4393656691f51fb68644f9f9b1661cda44f3623c17fade0f6cc5bad28cdf8037f740dac9e94099aec796dc3336d426fe5ff7e0"], 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0)
syz_open_pts(0xffffffffffffffff, 0x161601)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0)=0x8, 0x4)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c446, &(0x7f0000002880)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000830bbf712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e509115f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158314570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5ce0500000000000000973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd394ab3fbe2ddbbb373bc82df19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e3944560000000000000000000000000000003817b7051a63f3b8458458899cb957684a987df9cd9a07d57d0c00b322baec1e20a9746be433018f0f5b9c4257c67ec5578fa41e837b4f0fadfe479b0a085e776f9ccb4a2846adf4b9f018bd778d1744a48391df6d7a767f0ccb570eba43abdd496952976635fa", @ANYRES8, @ANYRES8=0x0], 0x1, 0x2b1, &(0x7f0000000100)="$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")
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000080)="520003000100b8", 0x7)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

5.250818789s ago: executing program 6 (id=2334):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc})
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.250048429s ago: executing program 0 (id=2335):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.167991916s ago: executing program 7 (id=2336):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
accept(0xffffffffffffffff, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2)
r4 = epoll_create1(0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x40000000})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r7, &(0x7f0000000180)='hist:k', 0x6)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
read$FUSE(r6, &(0x7f00000014c0)={0x2020}, 0x2020)
syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, &(0x7f0000000380)=""/209, &(0x7f0000000280)=[r1], 0x1}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x2000000000000274, &(0x7f0000000300)=ANY=[@ANYBLOB="1800cb130b0000f2ff00000000000009255f14164405000000000095000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x80)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x18000c1, &(0x7f0000000240)=ANY=[], 0x4, 0x19b, &(0x7f0000000340)="$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")

5.160513358s ago: executing program 0 (id=2337):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0xa0]}}, 0x0, 0x1c, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

4.101128298s ago: executing program 5 (id=2338):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="ff138bd7abfd06ff106c3ed990f7", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

4.072998914s ago: executing program 7 (id=2339):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb7}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r4, r1, 0x4}, 0x5)

3.867896076s ago: executing program 6 (id=2340):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x88102, 0x0)
syz_pidfd_open(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18}}, 0x0)

3.864922197s ago: executing program 7 (id=2341):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x122c022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=0,size=7'])

3.823230806s ago: executing program 5 (id=2342):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.799540061s ago: executing program 7 (id=2343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100019e"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fsopen(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x4080)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884)

3.536057305s ago: executing program 0 (id=2344):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.932530681s ago: executing program 5 (id=2345):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="3508f133aedbc3749e6bf8b1ec24", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2.824536493s ago: executing program 6 (id=2346):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="33020000000100000000000086dd6000000000072c40fe800000001000000000000000000001ff0200000000000000000000000000018b017811c9bfc591493b2cc6038f4b6302bb31b597130a4393656691f51fb68644f9f9b1661cda44f3623c17fade0f6cc5bad28cdf8037f740dac9e94099aec796dc3336d426fe5ff7e0"], 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0)
syz_open_pts(0xffffffffffffffff, 0x161601)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0)=0x8, 0x4)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c446, &(0x7f0000002880)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000830bbf712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e509115f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158314570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5ce0500000000000000973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd394ab3fbe2ddbbb373bc82df19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e3944560000000000000000000000000000003817b7051a63f3b8458458899cb957684a987df9cd9a07d57d0c00b322baec1e20a9746be433018f0f5b9c4257c67ec5578fa41e837b4f0fadfe479b0a085e776f9ccb4a2846adf4b9f018bd778d1744a48391df6d7a767f0ccb570eba43abdd496952976635fa", @ANYRES8, @ANYRES8=0x0], 0x1, 0x2b1, &(0x7f0000000100)="$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")
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000080)="520003000100b8", 0x7)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

2.732109992s ago: executing program 0 (id=2347):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_create(0x3, 0x0, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, 0x0, 0x0)
ptrace(0x10, 0x1)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
sendto(0xffffffffffffffff, &(0x7f0000000c00)="0cc3184098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0af33709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf49", 0x8f, 0x4e000, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @local}, 0x2, 0x1, 0x2}}, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0)
write$cgroup_pid(r4, &(0x7f00000003c0), 0x12)
r5 = semget$private(0x0, 0x7, 0x235)
semtimedop(r5, 0x0, 0x0, 0x0)
sync()

2.730621543s ago: executing program 5 (id=2348):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0xfc}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x80000)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x80044100, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = gettid()
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x4, 0x100}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1)
close(r3)
r5 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
flock(r5, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
syz_usb_connect$midi(0x3, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x1, 0x18, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x8, 0x81, 0x9, {0x7, 0x25, 0x1, 0x3, "ffffff"}}}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

2.368923078s ago: executing program 6 (id=2349):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e84"], 0xffdd)

2.21328891s ago: executing program 4 (id=2350):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

2.134442116s ago: executing program 6 (id=2351):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0xd77, 0xfb, 0x9, 0x794f}]})

2.083661797s ago: executing program 4 (id=2352):
close(0x3)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48)
close(0x3)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x61)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24)

1.982960438s ago: executing program 4 (id=2353):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x122c022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=0,size=7'])

1.932034649s ago: executing program 6 (id=2354):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='270', 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0xc, [{0xd, 0x8ff, 0x7}]}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f00000005c0)=""/142, 0x35, 0x8e, 0x0, 0x20000000}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={0x24, r2, 0x1, 0x0, 0x3, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x6433}]}, 0x24}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='md0', 0x3)

1.809892274s ago: executing program 4 (id=2355):
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xee00])
setregid(0x0, r0)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40442, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [], 0x6b}})
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1a3040, 0x0)
epoll_pwait(r2, 0x0, 0x0, 0x6c8, &(0x7f0000000140)={[0x8]}, 0x8)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@float={0x7, 0x0, 0x0, 0x10, 0x10}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x4, 0x1, 0x1000000}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x0, 0x2e, 0x30, 0x5f]}}, 0x0, 0x46, 0x0, 0x1, 0x2}, 0x28)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x1}}, 0x18)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="a62155fcafed", 0x0, 0x100086, 0x10030, 0x3, 0x0})
r7 = fsmount(r1, 0x0, 0x82)
fchdir(r7)
fchmodat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0)

1.798763986s ago: executing program 5 (id=2356):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x88102, 0x0)
syz_pidfd_open(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18}}, 0x0)

1.419423685s ago: executing program 0 (id=2357):
listen(0xffffffffffffffff, 0x5)
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
connect(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='add .', 0x5)
accept(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_restrict_self(0xffffffffffffffff, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

736.008287ms ago: executing program 4 (id=2358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60)

482.353739ms ago: executing program 5 (id=2359):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="33020000000100000000000086dd6000000000072c40fe800000001000000000000000000001ff0200000000000000000000000000018b017811c9bfc591493b2cc6038f4b6302bb31b597130a4393656691f51fb68644f9f9b1661cda44f3623c17fade0f6cc5bad28cdf8037f740dac9e94099aec796dc3336d426fe5ff7e0"], 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0)
syz_open_pts(0xffffffffffffffff, 0x161601)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0)=0x8, 0x4)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c446, &(0x7f0000002880)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES8=0x0], 0x1, 0x2b1, &(0x7f0000000100)="$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")
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000080)="520003000100b8", 0x7)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

210.111256ms ago: executing program 4 (id=2360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
close(0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000)

0s ago: executing program 0 (id=2361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x20000090)
set_mempolicy(0x5, 0x0, 0xf)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r4, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x4000)

kernel console output (not intermixed with test programs):

EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1078: corrupted inode contents
[  609.667607][ T8954] EXT4-fs (loop3): Remounting filesystem read-only
[  609.672564][ T8984] loop0: detected capacity change from 0 to 512
[  609.687328][ T8954] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  609.696684][ T8954] EXT4-fs (loop3): Remounting filesystem read-only
[  609.704544][ T8954] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1078: corrupted inode contents
[  609.717057][ T8954] EXT4-fs (loop3): Remounting filesystem read-only
[  609.723616][ T8954] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.1078: mark_inode_dirty error
[  609.735895][ T8954] EXT4-fs (loop3): Remounting filesystem read-only
[  609.742482][ T8954] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  609.751987][ T8954] EXT4-fs (loop3): Remounting filesystem read-only
[  609.759121][ T8954] EXT4-fs (loop3): 1 truncate cleaned up
[  609.768695][ T8954] EXT4-fs (loop3): pa ffff88801d311e00: logic 1, phys. 41, len 23
[  609.777095][ T8954] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23
[  609.821642][ T8984] EXT4-fs (loop0): Ignoring removed orlov option
[  609.855874][ T8954] EXT4-fs (loop3): Remounting filesystem read-only
[  609.883235][ T8954] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback.
[  609.983425][ T8984] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  610.113787][ T8984] netlink: 'syz.0.1093': attribute type 5 has an invalid length.
[  610.414320][ T4620] Bluetooth: hci0: command 0x2021 tx timeout
[  611.400657][ T8999] loop5: detected capacity change from 0 to 8
[  611.495803][ T8999] SQUASHFS error: Unable to read directory block [1d0:0]
[  612.249883][ T9010] loop0: detected capacity change from 0 to 512
[  612.326512][ T9012] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  612.390389][ T9014] loop3: detected capacity change from 0 to 256
[  613.443924][ T9014] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  613.870535][ T9024] XFS (loop0): Invalid device [./loop0], error=-16
[  614.715984][ T9029] input: syz1 as /devices/virtual/input/input43
[  615.977242][ T4202] Bluetooth: to_multiplier 8192 > 3200
[  617.532582][ T9042] binder: 9040:9042 ioctl 4018620d 0 returned -22
[  617.650380][ T9042] netlink: 'syz.6.1107': attribute type 5 has an invalid length.
[  618.014033][ T4620] Bluetooth: hci3: command 0x2021 tx timeout
[  618.650972][ T9050] Illegal XDP return value 4294967274, expect packet loss!
[  619.846859][ T9064] XFS (loop0): Invalid device [./loop0], error=-16
[  620.752726][ T9073] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  620.786357][ T9072] loop0: detected capacity change from 0 to 1024
[  621.663926][ T9072] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  621.841832][ T4202] Bluetooth: to_multiplier 8192 > 3200
[  623.296260][ T9084] netlink: 'syz.4.1118': attribute type 5 has an invalid length.
[  623.860362][ T4620] Bluetooth: hci1: command 0x2021 tx timeout
[  624.253520][ T9092] loop5: detected capacity change from 0 to 64
[  625.954695][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  625.961119][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  626.225238][ T9114] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  626.494564][ T9116] XFS (loop0): Invalid device [./loop0], error=-16
[  627.391006][ T4202] Bluetooth: to_multiplier 8192 > 3200
[  627.554132][ T5050] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  628.770527][   T13] Bluetooth: hci3: command 0x0406 tx timeout
[  629.693761][   T13] Bluetooth: hci0: command 0x2021 tx timeout
[  630.855241][ T5050] usb 6-1: unable to read config index 0 descriptor/start: -71
[  630.874262][ T9139] loop0: detected capacity change from 0 to 64
[  632.188938][ T5050] usb 6-1: can't read configurations, error -71
[  632.552335][ T9145] loop5: detected capacity change from 0 to 512
[  632.810963][ T9145] EXT4-fs (loop5): Ignoring removed orlov option
[  633.907730][ T9145] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  634.407298][ T9165] XFS (loop0): Invalid device [./loop0], error=-16
[  634.476894][ T9166] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  634.513728][ T9145] netlink: 'syz.5.1136': attribute type 5 has an invalid length.
[  635.260203][ T9173] input: syz1 as /devices/virtual/input/input44
[  637.765333][ T9207] loop5: detected capacity change from 0 to 64
[  640.661787][ T9217] loop3: detected capacity change from 0 to 512
[  640.730608][ T9218] XFS (loop0): Invalid device [./loop0], error=-16
[  640.950426][ T9217] EXT4-fs (loop3): Ignoring removed orlov option
[  641.355987][ T9217] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  641.680342][ T9217] netlink: 'syz.3.1153': attribute type 5 has an invalid length.
[  644.977774][ T9256] loop5: detected capacity change from 0 to 512
[  646.322436][ T9268] loop5: detected capacity change from 0 to 512
[  646.387371][ T9268] EXT4-fs (loop5): Ignoring removed orlov option
[  646.493051][ T9268] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  646.531043][ T9268] netlink: 'syz.5.1166': attribute type 5 has an invalid length.
[  646.764106][ T4266] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  647.489319][ T9276] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  647.544177][ T9276] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  647.603204][ T9276] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  647.624090][ T9276] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  647.664074][ T9276] page dumped because: unmovable page
[  647.824177][ T4266] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  648.083214][ T9276] page_owner info is not present (never set?)
[  648.128043][ T4266] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  648.163044][ T4266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.696495][ T4266] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  649.704995][ T4266] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[  649.714492][ T4266] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[  649.725496][ T4266] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  649.733284][ T4266] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  650.004115][ T4266] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  650.030642][ T4266] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  650.056881][ T4266] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  650.075261][ T4266] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  650.226049][ T4266] usb 7-1: USB disconnect, device number 2
[  650.242585][ T4266] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  650.257660][ T4266] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  650.275318][ T4266] keyspan 7-1:1.0: device disconnected
[  651.959184][ T9304] loop0: detected capacity change from 0 to 512
[  652.043985][ T9306] loop3: detected capacity change from 0 to 64
[  652.731444][ T4266] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  653.694689][ T9304] loop0: detected capacity change from 0 to 128
[  654.543671][ T9312] netlink: 'syz.4.1179': attribute type 5 has an invalid length.
[  655.626113][ T9320] XFS (loop0): Invalid device [./loop0], error=-16
[  657.064019][ T5836] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  657.796767][ T9332] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  657.964771][ T9332] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  657.974495][ T9332] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  658.005631][ T9332] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  658.464451][ T5836] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  658.553050][ T5836] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  658.630770][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.881286][ T9332] page dumped because: unmovable page
[  658.900441][ T9332] page_owner info is not present (never set?)
[  659.445039][ T5836] usb 7-1: can't set config #1, error -71
[  660.004306][ T5836] usb 7-1: USB disconnect, device number 3
[  662.471475][ T9363] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  664.738685][ T4202] Bluetooth: Wrong link type (-22)
[  664.990268][ T9389] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  665.079934][ T9390] XFS (loop0): Invalid device [./loop0], error=-16
[  665.770426][ T9393] loop5: detected capacity change from 0 to 512
[  666.868758][ T9393] loop5: detected capacity change from 0 to 128
[  668.521780][ T9408] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  668.887745][ T9414] fuse: Bad value for 'fd'
[  669.512358][ T5051] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  669.575759][ T9421] FAULT_INJECTION: forcing a failure.
[  669.575759][ T9421] name failslab, interval 1, probability 0, space 0, times 0
[  669.620268][ T9421] CPU: 0 PID: 9421 Comm: syz.3.1211 Not tainted syzkaller #0
[  669.627721][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  669.638337][ T9421] Call Trace:
[  669.641649][ T9421]  <TASK>
[  669.644610][ T9421]  dump_stack_lvl+0x188/0x250
[  669.649527][ T9421]  ? show_regs_print_info+0x20/0x20
[  669.654765][ T9421]  ? load_image+0x410/0x410
[  669.659314][ T9421]  ? __might_sleep+0xf0/0xf0
[  669.664173][ T9421]  ? __lock_acquire+0x7b50/0x7b50
[  669.669304][ T9421]  ? lockdep_init_map_type+0x98/0x900
[  669.674725][ T9421]  should_fail+0x383/0x4b0
[  669.679306][ T9421]  should_failslab+0x5/0x20
[  669.684275][ T9421]  slab_pre_alloc_hook+0x51/0xc0
[  669.689303][ T9421]  ? security_inode_alloc+0x30/0x110
[  669.694685][ T9421]  kmem_cache_alloc+0x3d/0x280
[  669.699489][ T9421]  security_inode_alloc+0x30/0x110
[  669.704634][ T9421]  inode_init_always+0x8e5/0xc90
[  669.709668][ T9421]  new_inode_pseudo+0x8e/0x210
[  669.714473][ T9421]  __sock_create+0x128/0x910
[  669.719224][ T9421]  __sys_socket+0xe2/0x170
[  669.723681][ T9421]  __x64_sys_socket+0x76/0x80
[  669.728392][ T9421]  do_syscall_64+0x4c/0xa0
[  669.732949][ T9421]  ? clear_bhb_loop+0x30/0x80
[  669.737824][ T9421]  ? clear_bhb_loop+0x30/0x80
[  669.742538][ T9421]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  669.748471][ T9421] RIP: 0033:0x7f2acf182159
[  669.752978][ T9421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  669.772801][ T9421] RSP: 002b:00007f2acd3da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  669.781349][ T9421] RAX: ffffffffffffffda RBX: 00007f2acf409fa0 RCX: 00007f2acf182159
[  669.789352][ T9421] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  669.797386][ T9421] RBP: 00007f2acf21906b R08: 0000000000000000 R09: 0000000000000000
[  669.805395][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  669.813401][ T9421] R13: 00007f2acf40a038 R14: 00007f2acf409fa0 R15: 00007ffd0df31318
[  669.821460][ T9421]  </TASK>
[  669.954077][ T5051] usb 6-1: Using ep0 maxpacket: 8
[  670.071732][ T9421] socket: no more sockets
[  670.079723][ T9421] FAULT_INJECTION: forcing a failure.
[  670.079723][ T9421] name fail_futex, interval 1, probability 0, space 0, times 0
[  670.125381][ T5051] usb 6-1: unable to get BOS descriptor or descriptor too short
[  670.195845][ T9421] CPU: 1 PID: 9421 Comm: syz.3.1211 Not tainted syzkaller #0
[  670.203308][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  670.213645][ T9421] Call Trace:
[  670.216961][ T9421]  <TASK>
[  670.219955][ T9421]  dump_stack_lvl+0x188/0x250
[  670.224674][ T9421]  ? stack_trace_snprint+0xe0/0xe0
[  670.224887][ T5051] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  670.229894][ T9421]  ? show_regs_print_info+0x20/0x20
[  670.245799][ T9421]  ? load_image+0x410/0x410
[  670.250361][ T9421]  ? __kasan_slab_alloc+0xa9/0xc0
[  670.255501][ T9421]  ? slab_post_alloc_hook+0x4c/0x380
[  670.260840][ T9421]  ? kmem_cache_alloc+0x15d/0x280
[  670.266252][ T9421]  ? security_file_alloc+0x30/0x110
[  670.271556][ T9421]  ? __alloc_file+0xc2/0x240
[  670.276242][ T9421]  ? alloc_empty_file+0x90/0x180
[  670.281221][ T9421]  ? alloc_file+0x5c/0x510
[  670.285684][ T9421]  should_fail+0x383/0x4b0
[  670.290153][ T9421]  get_futex_key+0x1a1/0x12d0
[  670.295002][ T9421]  ? futex_wait_restart+0x250/0x250
[  670.300245][ T9421]  ? __lock_acquire+0x13dc/0x7b50
[  670.305326][ T9421]  futex_wake+0x101/0x540
[  670.309713][ T9421]  ? futex_wait+0x680/0x680
[  670.314273][ T9421]  ? verify_lock_unused+0x140/0x140
[  670.319611][ T9421]  ? verify_lock_unused+0x140/0x140
[  670.324857][ T9421]  do_futex+0xd83/0x12b0
[  670.329232][ T9421]  ? __raw_spin_lock_init+0x41/0x100
[  670.334596][ T9421]  ? futex_exit_release+0x1c0/0x1c0
[  670.339841][ T9421]  ? __context_tracking_exit+0x4c/0x80
[  670.345416][ T9421]  __se_sys_futex+0x389/0x420
[  670.350149][ T9421]  ? __x64_sys_futex+0xf0/0xf0
[  670.354961][ T9421]  ? __x64_sys_futex+0x1d/0xf0
[  670.359775][ T9421]  do_syscall_64+0x4c/0xa0
[  670.364244][ T9421]  ? clear_bhb_loop+0x30/0x80
[  670.368963][ T9421]  ? clear_bhb_loop+0x30/0x80
[  670.373709][ T9421]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  670.379645][ T9421] RIP: 0033:0x7f2acf182159
[  670.384103][ T9421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.404141][ T9421] RSP: 002b:00007f2acd3da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  670.412605][ T9421] RAX: ffffffffffffffda RBX: 00007f2acf409fa8 RCX: 00007f2acf182159
[  670.420749][ T9421] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2acf409fac
[  670.428776][ T9421] RBP: 00007f2acf409fa0 R08: 000179c009a1e806 R09: 0000000000000000
[  670.436883][ T9421] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  670.444898][ T9421] R13: 00007f2acf40a038 R14: 00007ffd0df31230 R15: 00007ffd0df31318
[  670.452941][ T9421]  </TASK>
[  670.694564][ T5051] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  670.731328][ T5051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.937229][ T9437] XFS (loop0): Invalid device [./loop0], error=-16
[  670.956069][ T5051] usb 6-1: Product: syz
[  671.454036][ T5051] usb 6-1: Manufacturer: syz
[  671.464227][ T5051] usb 6-1: SerialNumber: syz
[  673.094486][   T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  673.134740][ T5051] usb 6-1: MIDIStreaming interface descriptor not found
[  673.284294][ T5051] usb 6-1: USB disconnect, device number 7
[  673.464384][   T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  673.514180][   T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  673.548209][   T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  673.570677][ T9459] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  673.579765][   T13] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  673.620161][   T13] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  673.641147][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.798930][ T9455] udevd[9455]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  673.874270][   T13] usb 4-1: can't set config #1, error -71
[  674.004250][   T13] usb 4-1: USB disconnect, device number 9
[  674.064162][   T26] audit: type=1800 audit(674.023:66): pid=9465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1221" name="buffered_io" dev="configfs" ino=45820 res=0 errno=0
[  674.098749][ T9459] loop5: detected capacity change from 0 to 128
[  674.734752][ T9474] loop0: detected capacity change from 0 to 256
[  674.803316][ T9474] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  674.890203][    C0] Unknown status report in ack skb
[  676.989595][ T9490] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  677.948285][   T26] audit: type=1800 audit(677.903:67): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1232" name="buffered_io" dev="configfs" ino=46234 res=0 errno=0
[  679.345465][   T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  679.655676][ T9518] input: syz1 as /devices/virtual/input/input47
[  679.814811][   T23] usb 7-1: config 0 has an invalid interface number: 13 but max is 0
[  679.827047][   T23] usb 7-1: config 0 has no interface number 0
[  679.833469][   T23] usb 7-1: too many endpoints for config 0 interface 13 altsetting 170: 97, using maximum allowed: 30
[  679.844922][   T23] usb 7-1: config 0 interface 13 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  679.862874][   T23] usb 7-1: config 0 interface 13 has no altsetting 0
[  679.876576][   T23] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  679.894672][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.915795][   T23] usb 7-1: config 0 descriptor??
[  680.224592][   T23] usb 7-1: string descriptor 0 read error: -71
[  680.256364][   T23] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  680.334365][   T23] gp8psk: usb in 128 operation failed.
[  680.398806][   T23] gp8psk: usb in 137 operation failed.
[  680.421453][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  680.475440][   T23] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  680.493671][   T23] usb 7-1: media controller created
[  680.542685][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  680.730743][   T23] gp8psk_fe: Frontend attached
[  680.742114][   T23] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  680.775442][   T23] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  681.314375][   T23] gp8psk: usb in 138 operation failed.
[  681.320422][   T23] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  681.350628][   T23] gp8psk: found Genpix USB device pID = 203 (hex)
[  681.488583][   T23] usb 7-1: USB disconnect, device number 4
[  682.011632][   T23] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  682.323378][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  682.416265][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  682.448112][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  683.718340][ T9538] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  683.826775][   T26] audit: type=1800 audit(683.783:68): pid=9549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1245" name="buffered_io" dev="configfs" ino=46301 res=0 errno=0
[  683.894441][ T9549] nvmet: failed to open file ./file0: (-22)
[  683.983419][ T9556] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  684.355548][ T9557] loop5: detected capacity change from 0 to 128
[  685.764997][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1253'.
[  686.817524][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  686.823894][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  689.842641][ T9592] overlayfs: failed to clone upperpath
[  689.925477][   T26] audit: type=1800 audit(689.883:69): pid=9598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1259" name="buffered_io" dev="configfs" ino=46373 res=0 errno=0
[  689.946936][ T9598] nvmet: failed to open file ./file0: (-22)
[  690.467657][ T9615] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  690.754093][   T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  691.406487][ T9619] loop3: detected capacity change from 0 to 128
[  691.558506][   T13] usb 1-1: Using ep0 maxpacket: 8
[  691.744273][   T13] usb 1-1: unable to get BOS descriptor or descriptor too short
[  691.844333][   T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  691.947992][ T4614] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  692.966941][ T4614] usb 7-1: unable to get BOS descriptor or descriptor too short
[  693.054269][ T4614] usb 7-1: config 63 has an invalid interface number: 66 but max is 0
[  693.094087][ T4614] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  693.142184][ T4614] usb 7-1: config 63 has no interface number 0
[  693.160042][ T4614] usb 7-1: config 63 interface 66 has no altsetting 0
[  693.194296][   T13] usb 1-1: string descriptor 0 read error: -71
[  693.200627][   T13] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  693.388348][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.495307][ T4614] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  693.538376][ T4614] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.566480][ T4614] usb 7-1: Product: syz
[  693.580086][ T4614] usb 7-1: Manufacturer: syz
[  693.594398][ T4614] usb 7-1: SerialNumber: syz
[  694.219921][ T4614] usb 7-1: Found UVC 0.07 device syz (174f:8acf)
[  694.254274][ T4614] usb 7-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[  694.284248][ T4614] usb 7-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[  694.324106][ T4614] usb 7-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[  694.367559][ T4614] usb 7-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  694.395188][   T13] usb 1-1: can't set config #1, error -71
[  694.438972][   T13] usb 1-1: USB disconnect, device number 7
[  694.464453][ T4614] usb 7-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[  695.236961][ T4614] usb 7-1: No streaming interface found for terminal 29.
[  695.287873][ T4614] uvcvideo 7-1:63.66: Entity type for entity Output 5 was not initialized!
[  695.945179][ T4614] usb 7-1: USB disconnect, device number 5
[  697.625915][ T9668] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9668]
[  698.243792][ T9666] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  698.414629][ T4620] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  700.953466][ T9677] nvmet: failed to open file ./file0: (-22)
[  702.251811][   T26] audit: type=1800 audit(702.203:70): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1286" name="buffered_io" dev="configfs" ino=46600 res=0 errno=0
[  702.272724][ T9692] fuse: Bad value for 'fd'
[  703.528515][ T9704] netlink: 'syz.4.1289': attribute type 5 has an invalid length.
[  706.976040][ T9734] loop0: detected capacity change from 0 to 8
[  708.171066][ T9749] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  708.367300][ T9752] loop5: detected capacity change from 0 to 128
[  708.737055][ T9734] SQUASHFS error: Unable to read directory block [1d0:0]
[  709.233402][ T9755] loop0: detected capacity change from 0 to 512
[  709.400549][ T9755] EXT4-fs (loop0): Ignoring removed orlov option
[  710.245663][ T9755] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  710.288799][ T9755] netlink: 'syz.0.1304': attribute type 5 has an invalid length.
[  712.332162][   T26] audit: type=1326 audit(712.283:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.6.1312" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6b074e159 code=0x0
[  712.502215][ T9797] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  713.936595][ T9811] fuse: Bad value for 'fd'
[  714.926882][ T4620] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  715.829966][ T9830] device-mapper: ioctl: unable to find target
[  716.064335][ T4620] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  716.093176][ T4620] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  716.132164][ T4620] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  716.142720][ T4620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.486806][ T9838] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  717.126279][ T4620] pegasus: probe of 1-1:1.0 failed with error -121
[  717.480279][ T4620] usb 1-1: USB disconnect, device number 8
[  719.502313][ T9867] device-mapper: ioctl: unable to find target
[  719.941148][ T9876] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  720.947686][ T9884] loop3: detected capacity change from 0 to 256
[  720.950987][ T9883] loop5: detected capacity change from 0 to 512
[  721.015396][ T9884] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  721.126172][ T9883] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  721.133552][ T9883] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  721.194243][ T9883] EXT4-fs (loop5): journaled quota format not specified
[  725.550035][ T9903] device-mapper: ioctl: unable to find target
[  727.184238][ T4469] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  727.834574][ T4469] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  727.860844][ T4469] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  728.087886][ T4469] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.246120][ T4469] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  728.258649][ T4469] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[  728.280057][ T4469] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[  728.292483][ T4469] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  728.315336][ T4469] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  728.357461][ T4469] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  728.393690][ T4469] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  728.422717][ T4469] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  728.437007][ T4469] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  728.497932][ T9915] can: request_module (can-proto-0) failed.
[  728.551433][   T26] audit: type=1800 audit(728.503:72): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1359" name="buffered_io" dev="configfs" ino=47268 res=0 errno=0
[  728.570775][ T9932] nvmet: failed to open file ./file0: (-22)
[  728.591706][ T4610] usb 7-1: USB disconnect, device number 6
[  728.607837][ T4610] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  728.672144][ T4610] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  728.693474][ T4610] keyspan 7-1:1.0: device disconnected
[  728.906871][ T9944] device-mapper: ioctl: unable to find target
[  732.034012][ T4614] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  732.750432][ T9975] loop3: detected capacity change from 0 to 512
[  733.020351][ T9975] EXT4-fs (loop3): Ignoring removed orlov option
[  733.176300][ T9975] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  733.194415][ T4614] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  733.218458][ T9979] can: request_module (can-proto-0) failed.
[  733.229298][ T9975] netlink: 'syz.3.1364': attribute type 5 has an invalid length.
[  733.255460][   T26] audit: type=1800 audit(733.213:73): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1371" name="buffered_io" dev="configfs" ino=48155 res=0 errno=0
[  733.276006][ T4614] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  733.289047][ T9984] nvmet: failed to open file ./file0: (-22)
[  733.298835][ T4614] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  733.328098][ T4614] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  733.341538][ T4614] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  733.356650][ T4614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.375518][ T9985] device-mapper: table: 248:0: mirror: Unrecognised feature requested
[  733.383740][ T9985] device-mapper: ioctl: error adding target to table
[  733.410180][ T4614] usb 7-1: invalid MIDI out EP 0
[  734.948907][ T4614] snd-usb-audio: probe of 7-1:27.0 failed with error -22
[  734.980950][ T4614] usb 7-1: USB disconnect, device number 7
[  735.728599][T10004] udevd[10004]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  736.250569][T10020] fuse: Bad value for 'fd'
[  736.834673][T10016] loop3: detected capacity change from 0 to 32768
[  737.090402][T10016] XFS (loop3): Mounting V5 Filesystem
[  737.180214][T10040] overlayfs: failed to clone upperpath
[  737.880266][T10016] XFS (loop3): Ending clean mount
[  739.366662][T10042] loop0: detected capacity change from 0 to 512
[  739.509195][ T4191] XFS (loop3): Unmounting Filesystem
[  739.544199][T10042] EXT4-fs (loop0): Ignoring removed orlov option
[  739.641857][T10042] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  739.807769][T10042] netlink: 'syz.0.1387': attribute type 5 has an invalid length.
[  741.639312][T10058] loop0: detected capacity change from 0 to 32768
[  741.759715][ T4266] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  742.134684][T10075] device-mapper: table: 248:0: mirror: Unrecognised feature requested
[  742.316322][T10075] device-mapper: ioctl: error adding target to table
[  743.043071][T10082] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  743.808692][T10090] loop0: detected capacity change from 0 to 512
[  743.858486][ T4266] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  743.880471][T10090] EXT4-fs (loop0): Ignoring removed orlov option
[  743.903737][ T4266] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  743.933638][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.026645][ T4266] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  744.037552][ T4266] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81
[  744.055686][ T4266] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1
[  744.078743][ T4266] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  744.099392][ T4266] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  744.122806][ T4266] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  744.157169][ T4266] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  744.180003][T10090] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  744.263362][ T4266] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  744.473565][ T4266] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  744.937693][T10090] netlink: 'syz.0.1400': attribute type 5 has an invalid length.
[  745.143033][T10064] can: request_module (can-proto-0) failed.
[  745.174966][ T4469] usb 4-1: USB disconnect, device number 10
[  745.193889][ T4469] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  745.222301][ T4469] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  745.364062][ T4469] keyspan 4-1:1.0: device disconnected
[  747.218453][T10117] loop3: detected capacity change from 0 to 512
[  747.300986][T10117] EXT4-fs (loop3): Test dummy encryption mode enabled
[  747.324424][T10117] EXT4-fs (loop3): Ignoring removed oldalloc option
[  748.264827][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  748.271210][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  748.302840][T10117] EXT4-fs (loop3): 1 truncate cleaned up
[  748.317207][T10117] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,mb_optimize_scan=0x0000000000000001,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none.
[  748.452479][T10136] nvmet: failed to open file ./file0: (-22)
[  748.619685][T10141] loop3: detected capacity change from 0 to 512
[  748.685015][T10141] EXT4-fs (loop3): Ignoring removed orlov option
[  748.741036][T10141] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  748.781477][T10141] netlink: 'syz.3.1414': attribute type 5 has an invalid length.
[  748.914011][ T4267] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  749.139947][T10151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  749.374372][ T4267] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  749.391666][ T4267] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  749.403321][ T4267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.463448][ T4267] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  749.471372][ T4267] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[  749.481041][ T4267] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[  749.491176][ T4267] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  749.512310][ T4267] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  749.533006][ T4267] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  749.547615][ T4267] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  749.562937][ T4267] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  749.576119][ T4267] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  749.637263][   T26] audit: type=1800 audit(749.593:74): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1419" name="buffered_io" dev="configfs" ino=47576 res=0 errno=0
[  749.648837][T10158] nvmet: failed to open file ./file0: (-22)
[  749.699171][T10143] can: request_module (can-proto-0) failed.
[  749.716491][ T4267] usb 7-1: USB disconnect, device number 8
[  749.743238][ T4267] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  749.864887][ T4267] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  749.879866][ T4267] keyspan 7-1:1.0: device disconnected
[  750.781597][T10174] nvmet: failed to open file ./file0: (-22)
[  751.443784][T10183] input: syz1 as /devices/virtual/input/input51
[  752.527153][T10176] loop3: detected capacity change from 0 to 32768
[  752.697912][T10176] JBD2: Ignoring recovery information on journal
[  752.929369][T10176] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  753.157864][ T4191] ocfs2: Unmounting device (7,3) on (node local)
[  755.270189][T10209] loop5: detected capacity change from 0 to 64
[  756.314030][ T4614] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  756.594013][ T4614] usb 4-1: Using ep0 maxpacket: 8
[  756.754692][ T4614] usb 4-1: unable to get BOS descriptor or descriptor too short
[  756.854172][ T4614] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  756.963686][T10222] loop0: detected capacity change from 0 to 512
[  756.977442][T10224] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  757.036923][T10222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  757.054343][T10222] System zones: 1-12
[  757.064556][ T4614] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  757.102421][T10222] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1439: missing EA_INODE flag
[  757.119536][ T4614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.134324][T10222] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1439: error while reading EA inode 12 err=-117
[  757.167516][ T4614] usb 4-1: Product: syz
[  757.171786][ T4614] usb 4-1: Manufacturer: syz
[  757.180293][T10222] EXT4-fs (loop0): 1 orphan inode deleted
[  757.204382][T10222] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  757.238884][ T4614] usb 4-1: SerialNumber: syz
[  757.324114][ T4614] usb 4-1: can't set config #1, error -71
[  757.334383][ T4614] usb 4-1: USB disconnect, device number 11
[  758.298108][T10240] device-mapper: ioctl: unable to find target
[  758.996986][T10247] loop0: detected capacity change from 0 to 32768
[  759.994571][T10257] loop3: detected capacity change from 0 to 64
[  760.953249][T10262] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  763.268490][T10279] device-mapper: ioctl: unable to find target
[  765.892105][T10306] loop3: detected capacity change from 0 to 64
[  769.960861][T10322] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  770.132995][T10328] loop0: detected capacity change from 0 to 1024
[  770.225084][T10328] hfsplus: unable to parse mount options
[  770.238437][T10328] jffs2: notice: (10328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  770.561128][T10336] device-mapper: ioctl: unable to find target
[  770.752825][T10338] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  770.931932][T10340] loop0: detected capacity change from 0 to 128
[  773.114848][T10355] loop0: detected capacity change from 0 to 512
[  774.008621][T10355] EXT4-fs (loop0): Ignoring removed orlov option
[  774.061115][T10353] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  774.113614][T10353] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  774.124481][T10355] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  774.152327][T10353] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  774.303578][T10366] netlink: 'syz.0.1470': attribute type 5 has an invalid length.
[  774.384222][T10353] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  774.392983][T10353] page dumped because: unmovable page
[  774.408195][T10353] page_owner info is not present (never set?)
[  775.905150][T10362] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  775.984700][T10372] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  776.321695][T10379] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  776.627144][T10387] loop0: detected capacity change from 0 to 128
[  778.923682][T10394] input: syz1 as /devices/virtual/input/input53
[  781.052313][T10410] loop3: detected capacity change from 0 to 64
[  782.039304][T10414] loop3: detected capacity change from 0 to 512
[  782.119384][T10414] EXT4-fs (loop3): Ignoring removed orlov option
[  782.231572][T10414] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  782.355870][T10414] netlink: 'syz.3.1490': attribute type 5 has an invalid length.
[  782.407319][T10420] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  782.418167][T10420] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  782.426519][T10420] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  782.435215][T10420] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  782.444003][T10420] page dumped because: unmovable page
[  782.449388][T10420] page_owner info is not present (never set?)
[  782.583389][T10424] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  784.436255][T10445] input: syz1 as /devices/virtual/input/input55
[  786.743851][T10456] loop3: detected capacity change from 0 to 64
[  789.016049][T10465] loop3: detected capacity change from 0 to 512
[  789.192232][T10465] EXT4-fs (loop3): Ignoring removed orlov option
[  789.299621][T10465] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  789.321719][T10481] loop5: detected capacity change from 0 to 512
[  790.389667][T10465] netlink: 'syz.3.1503': attribute type 5 has an invalid length.
[  790.634812][T10481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  790.646350][T10481] System zones: 1-12
[  790.657837][T10481] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1508: missing EA_INODE flag
[  790.677225][T10481] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1508: error while reading EA inode 12 err=-117
[  790.692858][T10481] EXT4-fs (loop5): 1 orphan inode deleted
[  790.708336][T10481] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  791.222606][T10495] input: syz1 as /devices/virtual/input/input56
[  792.194078][T10480] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  792.881602][T10499] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  792.892204][T10499] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  792.900293][T10499] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  792.908978][T10499] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  792.917634][T10499] page dumped because: unmovable page
[  792.923413][T10499] page_owner info is not present (never set?)
[  794.404590][T10523] loop5: detected capacity change from 0 to 8
[  794.492421][T10521] SQUASHFS error: Unable to read directory block [1d0:0]
[  796.166276][T10537] input: syz1 as /devices/virtual/input/input57
[  797.188476][T10541] loop3: detected capacity change from 0 to 8
[  797.859585][T10541] SQUASHFS error: lzo decompression failed, data probably corrupt
[  797.867510][T10541] SQUASHFS error: Failed to read block 0x91: -5
[  797.873758][T10541] SQUASHFS error: Unable to read metadata cache entry [8f]
[  797.881233][T10541] SQUASHFS error: Unable to read inode 0x11f
[  797.976688][T10546] fuse: Bad value for 'fd'
[  798.192262][T10548] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  798.234036][T10550] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  798.415252][T10552] loop3: detected capacity change from 0 to 128
[  801.416423][T10582] loop0: detected capacity change from 0 to 64
[  802.266184][T10583] loop3: detected capacity change from 0 to 8
[  802.333589][T10583] SQUASHFS error: Unable to read directory block [1d0:0]
[  802.955832][T10587] input: syz1 as /devices/virtual/input/input58
[  804.754126][ T4469] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  804.961100][T10592] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  804.981912][T10592] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  805.036009][T10592] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  805.078336][T10598] fuse: Bad value for 'fd'
[  805.083199][T10592] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  805.110214][T10592] page dumped because: unmovable page
[  805.133410][T10592] page_owner info is not present (never set?)
[  805.255366][ T4469] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  805.275910][ T4469] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  805.309718][ T4469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.409933][ T4469] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  805.445905][ T4469] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81
[  805.453669][ T4469] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1
[  805.515951][ T4469] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  805.550093][ T4469] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  805.589618][ T4469] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  805.650443][ T4469] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  805.709281][ T4469] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  805.893745][ T4469] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  805.998505][T10595] can: request_module (can-proto-0) failed.
[  806.100492][T10611] loop5: detected capacity change from 0 to 128
[  806.874699][ T5836] usb 4-1: USB disconnect, device number 12
[  806.927395][ T5836] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  807.134811][ T5836] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  807.904238][ T5836] keyspan 4-1:1.0: device disconnected
[  808.055627][T10623] loop3: detected capacity change from 0 to 512
[  808.127072][T10623] EXT4-fs (loop3): Ignoring removed orlov option
[  808.663764][T10631] input: syz1 as /devices/virtual/input/input59
[  809.672354][T10623] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  809.688830][T10638] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  809.700310][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  809.706686][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  809.802419][T10623] netlink: 'syz.3.1547': attribute type 5 has an invalid length.
[  809.813600][T10642] fuse: Bad value for 'fd'
[  812.027070][T10670] loop0: detected capacity change from 0 to 128
[  812.043969][ T5836] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  813.443807][T10671] input: syz1 as /devices/virtual/input/input60
[  814.664244][ T5836] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  815.402300][T10677] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  815.442748][ T5836] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  815.490049][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.526922][T10680] netlink: 'syz.4.1564': attribute type 5 has an invalid length.
[  815.550852][T10678] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  815.564119][ T5836] usb 6-1: can't set config #1, error -71
[  815.600881][ T5836] usb 6-1: USB disconnect, device number 9
[  815.610859][T10678] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  815.667544][T10678] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  815.691797][T10678] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  815.729768][T10678] page dumped because: unmovable page
[  815.767157][T10678] page_owner info is not present (never set?)
[  820.521865][T10717] loop3: detected capacity change from 0 to 8
[  820.609201][T10717] SQUASHFS error: Unable to read directory block [1d0:0]
[  821.675246][T10720] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  821.704871][T10723] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  822.091202][T10723] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  822.114174][T10723] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  822.154360][T10723] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  822.210327][T10723] page dumped because: unmovable page
[  822.229412][T10723] page_owner info is not present (never set?)
[  822.401669][T10735] loop0: detected capacity change from 0 to 512
[  822.451477][T10735] EXT4-fs (loop0): Ignoring removed orlov option
[  822.482102][T10732] can: request_module (can-proto-0) failed.
[  822.506337][T10735] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  822.545774][T10735] netlink: 'syz.0.1580': attribute type 5 has an invalid length.
[  825.579882][T10768] loop5: detected capacity change from 0 to 8
[  825.602245][T10770] loop0: detected capacity change from 0 to 8
[  825.663248][T10768] SQUASHFS error: lzo decompression failed, data probably corrupt
[  825.671249][T10768] SQUASHFS error: Failed to read block 0x91: -5
[  825.677579][T10768] SQUASHFS error: Unable to read metadata cache entry [8f]
[  825.684799][T10768] SQUASHFS error: Unable to read inode 0x11f
[  825.696713][T10770] SQUASHFS error: Unable to read directory block [1d0:0]
[  826.779562][T10772] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  826.829364][T10772] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  826.864156][T10772] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  827.025396][T10772] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  827.051825][T10772] page dumped because: unmovable page
[  827.058159][T10772] page_owner info is not present (never set?)
[  827.191320][T10780] loop3: detected capacity change from 0 to 512
[  827.264250][T10780] EXT4-fs (loop3): Ignoring removed orlov option
[  827.362908][T10780] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  827.456989][T10780] netlink: 'syz.3.1592': attribute type 5 has an invalid length.
[  829.194999][ T5836] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  829.644248][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  829.680578][ T5836] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  829.806431][T10811] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  829.821562][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.905610][ T5836] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  829.917185][ T5836] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81
[  829.946379][ T5836] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1
[  829.965501][ T5836] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  830.007797][ T5836] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  830.039542][ T5836] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  830.244110][ T5836] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  830.251867][ T5836] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  830.261520][ T5836] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  830.411113][T10796] can: request_module (can-proto-0) failed.
[  830.420022][ T5836] usb 4-1: USB disconnect, device number 13
[  830.530309][ T5836] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  830.578558][ T5836] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  830.631718][ T5836] keyspan 4-1:1.0: device disconnected
[  831.059008][T10841] loop5: detected capacity change from 0 to 512
[  831.084976][T10841] EXT4-fs (loop5): Ignoring removed orlov option
[  832.571796][T10841] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  835.987481][T10894] loop5: detected capacity change from 0 to 512
[  836.193361][T10894] EXT4-fs (loop5): Ignoring removed orlov option
[  836.307074][T10894] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  836.665287][T10904] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  836.704127][ T5836] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  836.959051][T10911] loop5: detected capacity change from 0 to 8
[  837.719567][T10911] SQUASHFS error: lzo decompression failed, data probably corrupt
[  837.727597][T10911] SQUASHFS error: Failed to read block 0x91: -5
[  837.734415][T10911] SQUASHFS error: Unable to read metadata cache entry [8f]
[  837.741646][T10911] SQUASHFS error: Unable to read inode 0x11f
[  837.749505][ T5836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  837.768277][ T5836] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  837.778820][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.856655][ T5836] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[  837.926143][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81
[  837.940459][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1
[  838.075824][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  838.105251][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  838.438631][ T5836] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  838.504631][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  838.525256][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[  838.555222][ T5836] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  838.614364][T10892] can: request_module (can-proto-0) failed.
[  839.585640][ T5836] usb 1-1: USB disconnect, device number 9
[  839.625204][ T5836] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  839.764758][ T5836] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  839.776067][ T5836] keyspan 1-1:1.0: device disconnected
[  839.998230][T10940] nvmet: failed to open file ./file0: (-22)
[  840.098711][T10942] loop0: detected capacity change from 0 to 512
[  840.124265][T10942] EXT4-fs (loop0): Ignoring removed orlov option
[  840.623010][T10942] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  840.834210][T10956] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[  840.984685][T10961] loop3: detected capacity change from 0 to 8
[  842.631648][T10961] SQUASHFS error: Unable to read directory block [1d0:0]
[  845.524047][ T4231] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  845.974295][ T4231] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  845.993793][ T4231] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  846.025849][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.125431][ T4231] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  846.164134][ T4231] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[  846.192687][ T4231] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[  846.245369][ T4231] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  846.407080][ T4231] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  846.416752][ T4231] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  846.427244][ T4231] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  846.435344][ T4231] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  846.471638][ T4231] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  847.131912][T10986] can: request_module (can-proto-0) failed.
[  847.167333][ T5051] usb 7-1: USB disconnect, device number 9
[  847.185705][ T5051] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  847.226862][ T5051] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  847.257795][ T5051] keyspan 7-1:1.0: device disconnected
[  850.498374][T11030] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4883] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11030]
[  854.214025][ T4620] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  854.446260][T11054] loop3: detected capacity change from 0 to 512
[  854.472690][T11054] EXT4-fs (loop3): Ignoring removed orlov option
[  854.587701][T11054] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  854.664477][ T4620] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  854.700948][ T4620] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  854.746448][ T4620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.816451][T11060] autofs4:pid:11060:autofs_fill_super: called with bogus options
[  854.836586][ T4620] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  854.849826][ T4620] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[  854.879286][ T4620] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[  854.911438][ T4620] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  854.930681][ T4620] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  854.950781][ T4620] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  854.971552][ T4620] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  854.992189][ T4620] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  855.019633][ T4620] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  856.010240][T11050] can: request_module (can-proto-0) failed.
[  856.044931][ T4469] usb 6-1: USB disconnect, device number 10
[  856.062865][ T4469] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  856.113117][ T4469] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  856.194904][ T4469] keyspan 6-1:1.0: device disconnected
[  857.112954][T11081] loop3: detected capacity change from 0 to 8
[  858.062190][T11081] SQUASHFS error: Unable to read directory block [1d0:0]
[  860.662593][T11109] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7593] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11109]
[  862.304414][T11114] binder: 11112:11114 ioctl 4018620d 0 returned -22
[  862.368287][   T26] audit: type=1800 audit(862.323:75): pid=11119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1677" name="buffered_io" dev="configfs" ino=49675 res=0 errno=0
[  862.399537][T11118] nvmet: failed to open file ./file0: (-22)
[  863.632665][T11137] loop0: detected capacity change from 0 to 8
[  865.641847][T11137] SQUASHFS error: Unable to read directory block [1d0:0]
[  869.544316][T11158] loop5: detected capacity change from 0 to 256
[  870.275483][T11158] FAT-fs (loop5): Unrecognized mount option "shortname=winn~ÓÔ@dir" or missing value
[  870.789776][T11160] loop5: detected capacity change from 0 to 512
[  870.992693][T11160] EXT4-fs (loop5): Ignoring removed orlov option
[  871.095520][T11160] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  871.147629][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  871.154468][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  872.250590][T11174] ALSA: mixer_oss: invalid OSS volume ''
[  873.200110][T11176] loop5: detected capacity change from 0 to 512
[  873.344541][T11176] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  873.490616][T11176] EXT4-fs (loop5): 1 truncate cleaned up
[  873.535612][T11176] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none.
[  873.653392][T11176] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1691: bad extra_isize 62 (inode size 256)
[  873.768061][T11176] EXT4-fs (loop5): Remounting filesystem read-only
[  873.878365][T11190] loop3: detected capacity change from 0 to 8
[  873.984224][T11190] SQUASHFS error: Unable to read directory block [1d0:0]
[  874.621362][T11176] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1691: bad extra_isize 62 (inode size 256)
[  875.736406][T11176] EXT4-fs (loop5): Remounting filesystem read-only
[  875.759191][T11187] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #15: comm syz.5.1691: bad extra_isize 62 (inode size 256)
[  875.897256][T11187] EXT4-fs (loop5): Remounting filesystem read-only
[  877.432642][   T26] audit: type=1800 audit(877.383:76): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1699" name="buffered_io" dev="configfs" ino=50702 res=0 errno=0
[  877.455317][T11201] nvmet: failed to open file ./file0: (-22)
[  878.382207][T11212] loop5: detected capacity change from 0 to 512
[  879.378843][T11215] ALSA: mixer_oss: invalid OSS volume ''
[  879.449133][T11212] EXT4-fs (loop5): Ignoring removed orlov option
[  879.900055][T11212] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[  879.913518][T11223] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7593] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11223]
[  883.353658][T11248] loop0: detected capacity change from 0 to 256
[  884.795444][T11248] FAT-fs (loop0): Unrecognized mount option "shortname=winn~ÓÔ@dir" or missing value
[  887.612466][T11272] ALSA: mixer_oss: invalid OSS volume ''
[  888.361656][T11274] input: syz1 as /devices/virtual/input/input71
[  890.490333][   T26] audit: type=1800 audit(890.443:77): pid=11291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1711" name="buffered_io" dev="configfs" ino=50835 res=0 errno=0
[  890.513521][T11286] nvmet: failed to open file ./file0: (-22)
[  895.282638][T11325] ALSA: mixer_oss: invalid OSS volume ''
[  897.894120][ T4469] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  898.087883][   T26] audit: type=1800 audit(898.043:78): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1733" name="buffered_io" dev="configfs" ino=50882 res=0 errno=0
[  898.120146][T11339] nvmet: failed to open file ./file0: (-22)
[  898.144129][ T4469] usb 6-1: Using ep0 maxpacket: 8
[  899.094377][ T4469] usb 6-1: unable to get BOS descriptor or descriptor too short
[  900.484269][ T4469] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  901.903300][ T4469] usb 6-1: string descriptor 0 read error: -71
[  901.975072][ T4469] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  902.000038][ T4469] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.229982][T11359] loop0: detected capacity change from 0 to 40427
[  902.237676][ T4469] usb 6-1: can't set config #1, error -71
[  902.245129][ T4469] usb 6-1: USB disconnect, device number 11
[  902.311918][T11359] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  902.319799][T11359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  902.401852][T11359] F2FS-fs (loop0): Found nat_bits in checkpoint
[  902.485632][T11359] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  902.493190][T11359] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  902.723149][T11359] attempt to access beyond end of device
[  902.723149][T11359] loop0: rw=10241, want=45104, limit=40427
[  903.828817][T11375] ALSA: mixer_oss: invalid OSS volume ''
[  903.865138][  T158] attempt to access beyond end of device
[  903.865138][  T158] loop0: rw=1, want=45104, limit=40427
[  910.278137][ T5836] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  911.001554][ T5836] usb 1-1: Using ep0 maxpacket: 8
[  911.312774][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short
[  912.094270][ T5836] usb 1-1: unable to read config index 0 descriptor/start: -71
[  912.101897][ T5836] usb 1-1: can't read configurations, error -71
[  913.914757][T11437] loop3: detected capacity change from 0 to 8
[  914.039481][T11437] SQUASHFS error: Unable to read directory block [1d0:0]
[  914.094259][ T5836] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  914.514553][ T5836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  914.578990][ T5836] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  914.660544][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.775808][ T5836] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[  914.834366][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81
[  914.855603][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1
[  914.868471][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  914.884638][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  916.296145][ T5836] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  916.331208][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  916.358775][ T5836] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[  916.502168][ T5836] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  916.552988][T11435] can: request_module (can-proto-0) failed.
[  917.357830][   T13] usb 1-1: USB disconnect, device number 11
[  917.374845][   T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  917.412210][   T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  917.464176][   T13] keyspan 1-1:1.0: device disconnected
[  919.016067][T11478] overlayfs: failed to clone upperpath
[  919.024657][T11478] overlayfs: failed to clone upperpath
[  919.494212][   T13] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  920.797664][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1775'.
[  920.884218][   T13] usb 1-1: unable to get BOS descriptor or descriptor too short
[  920.944284][   T13] usb 1-1: not running at top speed; connect to a high speed hub
[  921.017736][T11501] FAULT_INJECTION: forcing a failure.
[  921.017736][T11501] name failslab, interval 1, probability 0, space 0, times 0
[  921.031618][T11501] CPU: 1 PID: 11501 Comm: syz.3.1778 Not tainted syzkaller #0
[  921.033143][   T13] usb 1-1: config index 0 descriptor too short (expected 61365, got 181)
[  921.039124][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  921.039206][T11501] Call Trace:
[  921.039215][T11501]  <TASK>
[  921.039224][T11501]  dump_stack_lvl+0x188/0x250
[  921.068763][T11501]  ? show_regs_print_info+0x20/0x20
[  921.074009][   T13] usb 1-1: config 1 has an invalid interface number: 1 but max is 0
[  921.074013][T11501]  ? load_image+0x410/0x410
[  921.074043][T11501]  ? __might_sleep+0xf0/0xf0
[  921.091162][T11501]  ? __lock_acquire+0x7b50/0x7b50
[  921.096246][T11501]  should_fail+0x383/0x4b0
[  921.100711][T11501]  should_failslab+0x5/0x20
[  921.105262][T11501]  slab_pre_alloc_hook+0x51/0xc0
[  921.110253][T11501]  __kmalloc+0x6b/0x340
[  921.114453][T11501]  ? ops_init+0x8a/0x5f0
[  921.118823][T11501]  ops_init+0x8a/0x5f0
[  921.122948][T11501]  setup_net+0x39e/0xa10
[  921.127237][T11501]  ? copy_net_ns+0x5b0/0x5b0
[  921.131872][T11501]  ? copy_net_ns+0x324/0x5b0
[  921.135820][   T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  921.136493][T11501]  ? down_read_killable+0x1ce/0x340
[  921.151932][T11501]  copy_net_ns+0x33e/0x5b0
[  921.156482][T11501]  create_new_namespaces+0x3ce/0x700
[  921.161931][T11501]  unshare_nsproxy_namespaces+0x116/0x160
[  921.167789][T11501]  ksys_unshare+0x4f6/0x8e0
[  921.172404][T11501]  ? __lock_acquire+0x7b50/0x7b50
[  921.177487][T11501]  ? sighand_ctor+0x40/0x40
[  921.182035][T11501]  ? lock_chain_count+0x20/0x20
[  921.186931][T11501]  ? syscall_enter_from_user_mode+0x21/0x70
[  921.190842][   T13] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  921.192993][T11501]  __x64_sys_unshare+0x34/0x40
[  921.193023][T11501]  do_syscall_64+0x4c/0xa0
[  921.193047][T11501]  ? clear_bhb_loop+0x30/0x80
[  921.215992][T11501]  ? clear_bhb_loop+0x30/0x80
[  921.220857][T11501]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  921.226826][T11501] RIP: 0033:0x7f2acf182159
[  921.231283][T11501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  921.250926][T11501] RSP: 002b:00007f2acd3da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  921.259395][T11501] RAX: ffffffffffffffda RBX: 00007f2acf409fa0 RCX: 00007f2acf182159
[  921.267415][T11501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  921.275426][T11501] RBP: 00007f2acf21906b R08: 0000000000000000 R09: 0000000000000000
[  921.283443][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  921.291452][T11501] R13: 00007f2acf40a038 R14: 00007f2acf409fa0 R15: 00007ffd0df31318
[  921.299527][T11501]  </TASK>
[  921.374460][   T13] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  921.408682][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  921.443187][   T13] usb 1-1: Product: syz
[  921.454033][   T13] usb 1-1: Manufacturer: syz
[  921.522176][   T13] usb 1-1: Found UVC 1.00 device syz (8086:0ad2)
[  921.566367][   T13] usb 1-1: No streaming interface found for terminal 2.
[  921.614947][   T13] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input73
[  921.792567][T11512] can: request_module (can-proto-0) failed.
[  922.685150][ T5050] usb 1-1: USB disconnect, device number 12
[  923.848774][T11540] FAULT_INJECTION: forcing a failure.
[  923.848774][T11540] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  923.863144][T11540] CPU: 1 PID: 11540 Comm: syz.3.1791 Not tainted syzkaller #0
[  923.870653][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  923.880749][T11540] Call Trace:
[  923.884070][T11540]  <TASK>
[  923.887042][T11540]  dump_stack_lvl+0x188/0x250
[  923.891781][T11540]  ? show_regs_print_info+0x20/0x20
[  923.897022][T11540]  ? load_image+0x410/0x410
[  923.901580][T11540]  ? __lock_acquire+0x7b50/0x7b50
[  923.906654][T11540]  ? __kasan_kmalloc+0xc6/0xe0
[  923.911468][T11540]  ? __kasan_kmalloc+0xaf/0xe0
[  923.916297][T11540]  should_fail+0x383/0x4b0
[  923.920757][T11540]  prepare_alloc_pages+0x1e3/0x5b0
[  923.925947][T11540]  __alloc_pages+0x11b/0x480
[  923.930597][T11540]  ? zone_statistics+0x170/0x170
[  923.935589][T11540]  ? alloc_pages+0x452/0x560
[  923.940286][T11540]  alloc_pages_exact+0x35/0x70
[  923.945108][T11540]  snd_pcm_attach_substream+0x61b/0xac0
[  923.950790][T11540]  snd_pcm_open_substream+0xb7/0x2570
[  923.956262][T11540]  ? mutex_lock_io_nested+0x60/0x60
[  923.961596][T11540]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  923.967542][T11540]  ? snd_pcm_drop+0x250/0x250
[  923.972287][T11540]  snd_pcm_open+0x1bd/0x5e0
[  923.976849][T11540]  ? snd_pcm_mmap_control_fault+0x1b0/0x1b0
[  923.982785][T11540]  ? sched_dynamic_update+0x210/0x210
[  923.988235][T11540]  snd_pcm_playback_open+0x6b/0xd0
[  923.993397][T11540]  chrdev_open+0x585/0x5f0
[  923.997864][T11540]  ? cd_forget+0x160/0x160
[  924.002362][T11540]  ? fsnotify_perm+0x3a7/0x560
[  924.007200][T11540]  ? cd_forget+0x160/0x160
[  924.011844][T11540]  do_dentry_open+0x7f7/0xf90
[  924.016587][T11540]  ? vfs_open+0x2b/0x80
[  924.020794][T11540]  path_openat+0x2718/0x2fb0
[  924.025459][T11540]  ? __kasan_slab_alloc+0xa9/0xc0
[  924.030701][T11540]  ? do_filp_open+0x400/0x400
[  924.035480][T11540]  do_filp_open+0x1df/0x400
[  924.040035][T11540]  ? vfs_tmpfile+0x300/0x300
[  924.044719][T11540]  ? _raw_spin_unlock+0x24/0x40
[  924.049615][T11540]  ? alloc_fd+0x59e/0x650
[  924.054069][T11540]  do_sys_openat2+0x14b/0x500
[  924.058803][T11540]  ? __lock_acquire+0x7b50/0x7b50
[  924.064003][T11540]  ? do_sys_open+0xe0/0xe0
[  924.068610][T11540]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  924.074646][T11540]  ? lock_chain_count+0x20/0x20
[  924.079558][T11540]  __x64_sys_openat+0x135/0x160
[  924.084463][T11540]  do_syscall_64+0x4c/0xa0
[  924.088921][T11540]  ? clear_bhb_loop+0x30/0x80
[  924.093645][T11540]  ? clear_bhb_loop+0x30/0x80
[  924.098378][T11540]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  924.104314][T11540] RIP: 0033:0x7f2acf14298e
[  924.108766][T11540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  924.128410][T11540] RSP: 002b:00007f2acd3d9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  924.136908][T11540] RAX: ffffffffffffffda RBX: 00007f2acd3da6c0 RCX: 00007f2acf14298e
[  924.144930][T11540] RDX: 0000000000000000 RSI: 00007f2acd3d9c00 RDI: ffffffffffffff9c
[  924.152947][T11540] RBP: 00007f2acd3d9c00 R08: 0000000000000000 R09: 0000000000000000
[  924.160966][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  924.168992][T11540] R13: 00007f2acf40a038 R14: 00007f2acf409fa0 R15: 00007ffd0df31318
[  924.177031][T11540]  </TASK>
[  924.680326][T11546] loop3: detected capacity change from 0 to 32768
[  924.987805][T11555] can: request_module (can-proto-0) failed.
[  925.230348][T11546] (syz.3.1792,11546,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "01777777777777777777777˙˙˙˙0xffffffffffffffff18446744073709551615˙˙˙˙˙˙˙˙" or missing value
[  925.304793][T11546] (syz.3.1792,11546,0):ocfs2_fill_super:1177 ERROR: status = -22
[  925.369474][   T26] audit: type=1800 audit(925.323:79): pid=11546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1792" name="UDC" dev="configfs" ino=51347 res=0 errno=0
[  925.396055][T11546] Config c/1 of g1 needs at least one function.
[  925.425901][T11546] udc dummy_udc.0: failed to start g1: -22
[  926.616872][T11580] loop3: detected capacity change from 0 to 32768
[  926.885756][T11580] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1803 (11580)
[  927.429383][T11580] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  927.494735][T11580] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  927.561275][T11580] BTRFS info (device loop3): use zstd compression, level 3
[  929.044043][T11580] BTRFS info (device loop3): force clearing of disk cache
[  929.051227][T11580] BTRFS info (device loop3): enabling disk space caching
[  929.058917][T11580] BTRFS info (device loop3): disk space caching is enabled
[  929.067054][T11580] BTRFS info (device loop3): has skinny extents
[  930.136030][T11580] BTRFS error (device loop3): open_ctree failed: -12
[  932.635213][ T4614] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  932.650316][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  932.672469][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  932.835765][T11662] nvmet: failed to open file ./file0: (-22)
[  932.864104][   T26] audit: type=1800 audit(932.783:80): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1823" name="buffered_io" dev="configfs" ino=51441 res=0 errno=0
[  933.206350][T11673] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4883] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11673]
[  933.654983][ T4614] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  933.705831][ T4614] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  933.734068][ T4614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.964201][ T4614] usb 1-1: can't set config #1, error -71
[  933.979977][ T4614] usb 1-1: USB disconnect, device number 13
[  935.207376][T11699] loop0: detected capacity change from 0 to 4096
[  935.423087][T11705] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  935.503999][T11632] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  935.547411][   T26] audit: type=1800 audit(935.503:81): pid=11709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1837" name="buffered_io" dev="configfs" ino=51490 res=0 errno=0
[  935.598729][T11707] nvmet: failed to open file ./file0: (-22)
[  937.093213][T11632] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  937.324204][T11632] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  937.347068][T11632] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.403704][T11632] usb 7-1: Product: syz
[  937.444509][T11632] usb 7-1: Manufacturer: syz
[  937.467155][T11738] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11738]
[  937.515025][T11632] usb 7-1: SerialNumber: syz
[  937.751796][T11632] usb 7-1: config 0 descriptor??
[  937.916100][T11632] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  938.168778][ T4614] usb 7-1: USB disconnect, device number 10
[  938.375065][T11746] device-mapper: ioctl: unable to find target
[  942.791471][T11765] loop3: detected capacity change from 0 to 8
[  942.957724][T11765] SQUASHFS error: lzo decompression failed, data probably corrupt
[  942.965865][T11765] SQUASHFS error: Failed to read block 0x91: -5
[  942.972192][T11765] SQUASHFS error: Unable to read metadata cache entry [8f]
[  942.979836][T11765] SQUASHFS error: Unable to read inode 0x11f
[  943.235498][T11761] nvmet: failed to open file ./file0: (-22)
[  943.735975][T11771] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  943.760430][T11774] FAULT_INJECTION: forcing a failure.
[  943.760430][T11774] name fail_futex, interval 1, probability 0, space 0, times 0
[  943.773392][T11774] CPU: 0 PID: 11774 Comm: syz.3.1853 Not tainted syzkaller #0
[  943.780891][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  943.790982][T11774] Call Trace:
[  943.794390][T11774]  <TASK>
[  943.797356][T11774]  dump_stack_lvl+0x188/0x250
[  943.802079][T11774]  ? stack_trace_snprint+0xe0/0xe0
[  943.807236][T11774]  ? show_regs_print_info+0x20/0x20
[  943.812472][T11774]  ? load_image+0x410/0x410
[  943.817022][T11774]  ? __kasan_slab_alloc+0xa9/0xc0
[  943.822094][T11774]  ? slab_post_alloc_hook+0x4c/0x380
[  943.827436][T11774]  ? kmem_cache_alloc+0x15d/0x280
[  943.832484][T11774]  ? security_file_alloc+0x30/0x110
[  943.837709][T11774]  ? __alloc_file+0xc2/0x240
[  943.842317][T11774]  ? alloc_empty_file+0x90/0x180
[  943.847282][T11774]  ? alloc_file+0x5c/0x510
[  943.851723][T11774]  should_fail+0x383/0x4b0
[  943.856166][T11774]  get_futex_key+0x1a1/0x12d0
[  943.860880][T11774]  ? futex_wait_restart+0x250/0x250
[  943.866100][T11774]  ? __lock_acquire+0x13dc/0x7b50
[  943.871190][T11774]  futex_wake+0x101/0x540
[  943.875549][T11774]  ? futex_wait+0x680/0x680
[  943.880077][T11774]  ? verify_lock_unused+0x140/0x140
[  943.885297][T11774]  ? verify_lock_unused+0x140/0x140
[  943.890526][T11774]  do_futex+0xd83/0x12b0
[  943.894789][T11774]  ? __raw_spin_lock_init+0x41/0x100
[  943.900115][T11774]  ? futex_exit_release+0x1c0/0x1c0
[  943.905335][T11774]  ? __context_tracking_exit+0x4c/0x80
[  943.910821][T11774]  __se_sys_futex+0x389/0x420
[  943.915526][T11774]  ? __x64_sys_futex+0xf0/0xf0
[  943.920317][T11774]  ? __x64_sys_futex+0x1d/0xf0
[  943.925101][T11774]  do_syscall_64+0x4c/0xa0
[  943.929540][T11774]  ? clear_bhb_loop+0x30/0x80
[  943.934237][T11774]  ? clear_bhb_loop+0x30/0x80
[  943.938937][T11774]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  943.944853][T11774] RIP: 0033:0x7f2acf182159
[  943.949292][T11774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  943.968930][T11774] RSP: 002b:00007f2acd3da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  943.977368][T11774] RAX: ffffffffffffffda RBX: 00007f2acf409fa8 RCX: 00007f2acf182159
[  943.985361][T11774] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2acf409fac
[  943.993354][T11774] RBP: 00007f2acf409fa0 R08: 002a01cdd3e44f76 R09: 0000000000000000
[  944.001352][T11774] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  944.009342][T11774] R13: 00007f2acf40a038 R14: 00007ffd0df31230 R15: 00007ffd0df31318
[  944.017350][T11774]  </TASK>
[  944.619553][T11781] loop0: detected capacity change from 0 to 512
[  944.776166][T11786] loop3: detected capacity change from 0 to 512
[  944.786659][T11781] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  944.848903][T11786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  944.988160][T11781] EXT4-fs (loop0): 1 truncate cleaned up
[  945.001764][T11786] EXT4-fs (loop3): 1 truncate cleaned up
[  945.007710][T11786] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none.
[  945.016039][T11781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  948.276143][T11632] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  949.403981][T11632] usb 4-1: Using ep0 maxpacket: 32
[  949.564184][T11632] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  949.583191][T11632] usb 4-1: config 0 has no interface number 0
[  949.774513][T11632] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  949.794197][T11632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.802681][T11632] usb 4-1: Product: syz
[  949.851814][T11632] usb 4-1: Manufacturer: syz
[  949.872052][T11632] usb 4-1: SerialNumber: syz
[  949.926904][T11632] usb 4-1: config 0 descriptor??
[  949.989654][T11632] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  950.569553][T11632] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  950.636553][T11632] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  950.683868][ T5836] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  951.068085][ T4614] usb 4-1: USB disconnect, device number 14
[  951.191563][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108
[  951.197018][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short
[  951.229562][ T4614] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  951.246729][ T5836] usb 1-1: no configurations
[  951.270164][ T5836] usb 1-1: can't read configurations, error -22
[  951.285813][ T4614] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  951.307919][ T4614] quatech2 4-1:0.51: device disconnected
[  951.326834][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'.
[  951.387679][T11857] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  953.488363][T11874] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  953.579891][T11874] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  953.620546][T11874] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  955.157154][T11874] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  955.172097][T11874] page dumped because: unmovable page
[  955.178113][T11874] page_owner info is not present (never set?)
[  955.720756][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'.
[  955.861890][T11900] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1891'.
[  956.922212][T11904] loop3: detected capacity change from 0 to 32768
[  957.099422][T11904] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1894 (11904)
[  957.876005][T11920] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  957.887013][T11904] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  957.904107][T11904] BTRFS info (device loop3): allowing degraded mounts
[  957.954106][T11920] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  957.962248][T11920] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  957.971130][T11904] BTRFS info (device loop3): metadata ratio 4
[  957.989496][T11904] BTRFS info (device loop3): turning on sync discard
[  957.997354][T11920] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  958.032773][T11920] page dumped because: unmovable page
[  958.038710][T11904] BTRFS info (device loop3): turning off discard
[  958.054989][T11920] page_owner info is not present (never set?)
[  958.067881][T11904] BTRFS warning (device loop3): excessive commit interval 3911
[  958.120426][T11904] BTRFS info (device loop3): turning on sync discard
[  958.165261][T11904] BTRFS info (device loop3): disabling tree log
[  958.256191][T11904] BTRFS info (device loop3): using free space tree
[  958.269308][T11904] BTRFS info (device loop3): has skinny extents
[  960.479010][T11904] BTRFS error (device loop3): open_ctree failed: -12
[  961.754911][T11971] fuse: Bad value for 'fd'
[  961.829212][T11789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (11789)
[  963.794719][T11997] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  963.863227][T11997] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  963.887251][T11997] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  964.130371][T11997] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  964.140160][T11997] page dumped because: unmovable page
[  964.199036][T11997] page_owner info is not present (never set?)
[  965.935244][T12024] fuse: Bad value for 'fd'
[  966.354141][T11632] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  966.446126][T12033] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4883] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12033]
[  968.181030][T11632] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  968.261290][T11632] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  969.032054][T11632] usb 4-1: config 0 interface 0 has no altsetting 0
[  969.062631][T11632] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  969.104762][T11632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.150492][T11632] usb 4-1: config 0 descriptor??
[  969.221397][T12049] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  969.244049][T11632] usb 4-1: can't set config #0, error -71
[  969.279431][T11632] usb 4-1: USB disconnect, device number 15
[  969.943902][T12049] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  970.137040][T12049] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  970.165103][T12049] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  970.706799][T12049] page dumped because: unmovable page
[  970.743147][T12049] page_owner info is not present (never set?)
[  971.205790][ T7692] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.261751][ T7692] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.446104][ T7692] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.602803][ T7692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.943305][T12091] chnl_net:caif_netlink_parms(): no params data found
[  974.338903][T12091] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.364111][T12091] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.441974][T12091] device bridge_slave_0 entered promiscuous mode
[  974.463489][T12091] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.471659][T12091] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.489567][T12091] device bridge_slave_1 entered promiscuous mode
[  975.699514][T11519] Bluetooth: hci1: command 0x0409 tx timeout
[  975.927218][T12123] tmpfs: Bad value for 'mpol'
[  976.026047][T12091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  976.351522][T12091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  976.822203][T12127] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  976.922491][T12131] fuse: Bad value for 'fd'
[  976.941525][T12127] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  976.977997][T12091] team0: Port device team_slave_0 added
[  976.995364][T12127] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  977.008609][T12127] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  977.031449][T12127] page dumped because: unmovable page
[  977.039577][T12091] team0: Port device team_slave_1 added
[  977.045696][T12127] page_owner info is not present (never set?)
[  977.163857][T12091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  977.171104][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  977.420188][T12091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  977.446709][T12091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  977.454192][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  977.589606][T12091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  978.489551][T11632] Bluetooth: hci1: command 0x041b tx timeout
[  978.740091][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079dc4800: rx timeout, send abort
[  978.805191][ T7692] device hsr_slave_0 left promiscuous mode
[  978.812298][ T7692] device hsr_slave_1 left promiscuous mode
[  978.844399][ T7692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  978.851977][ T7692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  978.945386][ T7692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  978.952952][ T7692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.051125][ T7692] device bridge_slave_1 left promiscuous mode
[  979.084600][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.095793][ T7692] device bridge_slave_0 left promiscuous mode
[  979.102062][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.174707][ T7692] device veth1_macvtap left promiscuous mode
[  979.180810][ T7692] device veth0_macvtap left promiscuous mode
[  979.204115][ T7692] device veth1_vlan left promiscuous mode
[  979.217114][ T7692] device veth0_vlan left promiscuous mode
[  979.240456][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee60c00: rx timeout, send abort
[  979.250304][    C1] vcan0: j1939_tp_rxtimer: 0xffff888079dc4800: abort rx timeout. Force session deactivation
[  979.288826][T12166] ALSA: mixer_oss: invalid OSS volume ''
[  980.024572][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee60c00: abort rx timeout. Force session deactivation
[  980.190617][T12172] nvmet: failed to open file ./file0: (-22)
[  980.369125][T12177] binder: 12176:12177 ioctl 4018620d 0 returned -22
[  980.445852][T12180] binder: 12176:12180 ioctl c0306201 0 returned -14
[  980.574096][ T4266] Bluetooth: hci1: command 0x040f tx timeout
[  980.885171][ T7692] team0 (unregistering): Port device team_slave_1 removed
[  980.903465][ T7692] team0 (unregistering): Port device team_slave_0 removed
[  980.921225][ T7692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  981.000956][ T7692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  981.997706][T12201] overlayfs: failed to clone upperpath
[  983.622357][ T4266] Bluetooth: hci1: command 0x0419 tx timeout
[  983.675514][ T7692] bond0 (unregistering): Released all slaves
[  983.829909][T12177] netlink: 'syz.6.1958': attribute type 5 has an invalid length.
[  983.851779][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'.
[  984.024882][T12091] device hsr_slave_0 entered promiscuous mode
[  984.069320][T12091] device hsr_slave_1 entered promiscuous mode
[  984.093097][T12091] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  984.305901][T12091] Cannot create hsr debugfs directory
[  985.216055][T12091] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  986.117467][T12091] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  986.152036][T12091] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  986.172689][T12091] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  986.599374][   T26] audit: type=1800 audit(986.553:82): pid=12238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1973" name="buffered_io" dev="configfs" ino=53327 res=0 errno=0
[  986.652408][T12238] nvmet: failed to open file ./file0: (-22)
[  986.775651][T12091] 8021q: adding VLAN 0 to HW filter on device bond0
[  986.821010][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  986.835316][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  986.898665][T12091] 8021q: adding VLAN 0 to HW filter on device team0
[  986.957986][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  987.040013][T12251] overlayfs: failed to clone upperpath
[  987.754226][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  987.765730][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.772831][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  987.783061][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  987.815575][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  987.892693][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  988.029680][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  988.036942][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  988.086344][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  988.115940][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  989.485598][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  989.496280][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  989.510945][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1977'.
[  989.538549][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  989.556542][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  989.601949][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  989.701877][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  989.787903][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  989.824645][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  989.894420][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  989.936340][T12091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  990.884051][T12279] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  990.896514][T12279] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  990.905167][T12279] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  990.914563][T12279] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  990.923335][T12279] page dumped because: unmovable page
[  990.929127][T12279] page_owner info is not present (never set?)
[  992.183380][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  992.195856][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  992.330957][T12091] 8021q: adding VLAN 0 to HW filter on device batadv0
[  994.165214][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  994.180002][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  996.233541][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1987'.
[  997.288069][   T26] audit: type=1107 audit(996.513:83): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1ľO'
[  997.528832][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  997.552778][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  998.490743][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  998.500627][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  998.511705][T12091] device veth0_vlan entered promiscuous mode
[  998.519832][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  998.528541][  T158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  998.540341][T12360] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  998.576742][T12091] device veth1_vlan entered promiscuous mode
[  998.663520][T12360] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  998.676186][T12360] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  998.685191][T12360] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  998.714852][T12360] page dumped because: unmovable page
[  998.720428][T12360] page_owner info is not present (never set?)
[  998.761802][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  998.784868][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  998.812553][T12091] device veth0_macvtap entered promiscuous mode
[  998.842873][T12091] device veth1_macvtap entered promiscuous mode
[  998.900579][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  999.220357][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  999.279948][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  999.742445][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  999.839046][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  999.850220][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  999.862304][T12091] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1000.019488][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1000.086477][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1000.106649][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1001.221630][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.231861][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1001.242661][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1001.255997][T12091] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1001.267595][T12091] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.276806][T12091] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.286450][T12091] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.295678][T12091] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.309472][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1001.381717][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1001.642408][T12397] loop0: detected capacity change from 0 to 8
[ 1003.675412][T12397] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1003.683333][T12397] SQUASHFS error: Failed to read block 0x91: -5
[ 1003.689832][T12397] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1003.697136][T12397] SQUASHFS error: Unable to read inode 0x11f
[ 1003.713885][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1003.768052][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1003.878000][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1003.904542][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1004.596930][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2001'.
[ 1005.297771][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.369547][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.424746][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1006.804450][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.812371][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.533374][ T7692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1014.202699][T12482] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1014.240474][T12482] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1014.282672][T12482] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1014.310594][T12482] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1014.328630][T12482] page dumped because: unmovable page
[ 1014.339356][T12482] page_owner info is not present (never set?)
[ 1016.243764][   T26] audit: type=1800 audit(1016.193:84): pid=12509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2029" name="buffered_io" dev="configfs" ino=54697 res=0 errno=0
[ 1016.444596][T12509] nvmet: failed to open file ./file0: (-22)
[ 1028.603816][    C1] hrtimer: interrupt took 47311 ns
[ 1028.822848][T12626] syz.7.2057 sent an empty control message without MSG_MORE.
[ 1029.868915][T12626] loop7: detected capacity change from 0 to 1024
[ 1030.011953][T12626] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1032.548589][   T26] audit: type=1800 audit(1032.503:85): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2064" name="buffered_io" dev="configfs" ino=54856 res=0 errno=0
[ 1032.609648][T12659] nvmet: failed to open block device ./file0: (-2)
[ 1034.711523][ T5836] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1034.749162][ T5836] Bluetooth: hci1: Injecting HCI hardware error event
[ 1034.771150][ T4202] Bluetooth: hci1: hardware error 0x00
[ 1035.501137][   T26] audit: type=1800 audit(1035.453:86): pid=12711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2078" name="buffered_io" dev="configfs" ino=53961 res=0 errno=0
[ 1036.959644][T12735] loop0: detected capacity change from 0 to 8
[ 1037.938134][T12735] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1037.946238][T12735] SQUASHFS error: Failed to read block 0x91: -5
[ 1037.952529][T12735] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1037.959830][T12735] SQUASHFS error: Unable to read inode 0x11f
[ 1040.421345][T12755] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1040.431937][T12755] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1040.476414][T12755] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1040.587681][T12755] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1040.794079][T12755] page dumped because: unmovable page
[ 1040.799757][T12755] page_owner info is not present (never set?)
[ 1041.838268][T12767] input: syz1 as /devices/virtual/input/input74
[ 1043.076888][T12799] loop0: detected capacity change from 0 to 512
[ 1045.677780][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'.
[ 1046.438102][T12814] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1046.459540][T12814] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1046.768570][T12814] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1046.797407][T12814] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1046.968701][T12814] page dumped because: unmovable page
[ 1046.975538][T12814] page_owner info is not present (never set?)
[ 1051.456081][T12868] nvmet: failed to open file ./file0: (-22)
[ 1054.244182][T12887] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1054.319767][T12887] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1054.350646][T12887] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1054.392081][T12887] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1054.401087][T12887] page dumped because: unmovable page
[ 1054.406841][T12887] page_owner info is not present (never set?)
[ 1055.456654][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.463320][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.289019][T12913] loop0: detected capacity change from 0 to 64
[ 1058.382013][   T26] audit: type=1800 audit(1058.333:87): pid=12927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2128" name="buffered_io" dev="configfs" ino=54188 res=0 errno=0
[ 1058.425947][T12926] nvmet: failed to open file ./file0: (-22)
[ 1061.184333][T12980] nvmet: failed to open file ./file0: (-22)
[ 1062.291892][   T26] audit: type=1800 audit(1062.243:88): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2141" name="buffered_io" dev="configfs" ino=55250 res=0 errno=0
[ 1062.479722][T12993] nvmet: failed to open file ./file0: (-22)
[ 1064.686846][T12991] input: syz1 as /devices/virtual/input/input75
[ 1066.235286][T13047] loop7: detected capacity change from 0 to 128
[ 1066.677982][T13047] hpfs: Bad version 183,140. Mount readonly to go around
[ 1066.738754][T13047] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[ 1066.947239][T13069] nvmet: failed to open file ./file0: (-22)
[ 1068.262406][T13082] input: syz1 as /devices/virtual/input/input76
[ 1071.936221][T13114] tmpfs: Too small a size for current use
[ 1072.967575][T13119] netlink: 'syz.4.2173': attribute type 5 has an invalid length.
[ 1073.000772][T13122] nvmet: failed to open file ./file0: (-22)
[ 1076.032316][T13161] loop7: detected capacity change from 0 to 64
[ 1077.765449][T13167] netlink: 'syz.4.2184': attribute type 5 has an invalid length.
[ 1078.695229][T13177] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1078.770887][T13177] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1078.793983][T13177] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1078.823247][T13177] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1078.878257][T13177] page dumped because: unmovable page
[ 1078.896690][T13177] page_owner info is not present (never set?)
[ 1080.606922][   T26] audit: type=1800 audit(1080.563:89): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2191" name="buffered_io" dev="configfs" ino=55543 res=0 errno=0
[ 1080.725717][T13207] nvmet: failed to open file ./file0: (-22)
[ 1082.984492][T13245] loop0: detected capacity change from 0 to 512
[ 1083.118625][T13245] EXT4-fs (loop0): Ignoring removed orlov option
[ 1083.335133][T13245] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[ 1084.334547][T13245] netlink: 'syz.0.2198': attribute type 5 has an invalid length.
[ 1084.343200][T13260] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1084.354890][T13260] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1084.365311][T13260] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1084.381186][T13260] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1084.391523][T13260] page dumped because: unmovable page
[ 1084.443967][T13260] page_owner info is not present (never set?)
[ 1085.685027][T13282] nvmet: failed to open block device ./file0: (-2)
[ 1086.018240][T13294] ip_tables: iptables: counters copy to user failed while replacing table
[ 1088.243946][ T4620] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1089.129672][T13316] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1089.200040][T13316] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1089.235675][T13316] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1089.268626][T13316] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1089.299474][T13316] page dumped because: unmovable page
[ 1089.319403][T13316] page_owner info is not present (never set?)
[ 1089.326890][ T4620] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[ 1089.359442][ T4620] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.234281][ T4620] usb 7-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -61
[ 1090.343574][ T4620] usb 7-1: Firmware version (0.0) predates our first public release.
[ 1090.583919][ T4620] usb 7-1: Please update to version 0.2 or newer
[ 1090.654450][ T4620] usb 7-1: atusb_probe: initialization failed, error = -61
[ 1090.682972][ T4620] atusb: probe of 7-1:1.0 failed with error -61
[ 1090.723198][ T4620] usb 7-1: USB disconnect, device number 11
[ 1090.934124][ T4614] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1091.225554][ T4614] usb 1-1: no configurations
[ 1091.230430][ T4614] usb 1-1: can't read configurations, error -22
[ 1092.267424][ T4614] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1092.746041][T13373] loop7: detected capacity change from 0 to 8
[ 1093.486405][T13373] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1093.494488][T13373] SQUASHFS error: Failed to read block 0x91: -5
[ 1093.500785][T13373] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1093.508245][T13373] SQUASHFS error: Unable to read inode 0x11f
[ 1093.597743][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'.
[ 1093.604380][ T4614] usb 1-1: device descriptor read/all, error -71
[ 1093.623990][ T4614] usb usb1-port1: attempt power cycle
[ 1096.301456][T13409] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1096.335872][T13409] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1097.066293][T13409] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1097.108636][T13409] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1097.143955][T13409] page dumped because: unmovable page
[ 1097.163853][T13409] page_owner info is not present (never set?)
[ 1099.557433][T13449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1100.494449][T13459] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1100.505910][T13459] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1100.514041][T13459] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1100.522653][T13459] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1100.531919][T13459] page dumped because: unmovable page
[ 1100.537351][T13459] page_owner info is not present (never set?)
[ 1100.644728][   T26] audit: type=1800 audit(1100.603:90): pid=13464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2260" name="buffered_io" dev="configfs" ino=56695 res=0 errno=0
[ 1100.648071][T13464] nvmet: failed to open file ./file0: (-22)
[ 1101.567928][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'.
[ 1103.591695][T13498] loop0: detected capacity change from 0 to 256
[ 1103.642686][T13498] exfat: Deprecated parameter 'utf8'
[ 1103.688832][T13498] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[ 1104.727812][T13506] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1104.738432][T13506] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1104.746529][T13506] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1104.755378][T13506] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1104.764036][T13506] page dumped because: unmovable page
[ 1104.769466][T13506] page_owner info is not present (never set?)
[ 1105.679129][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2273'.
[ 1106.003457][T13518] netlink: 'syz.5.2275': attribute type 5 has an invalid length.
[ 1108.106460][   T26] audit: type=1800 audit(1108.063:91): pid=13545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2285" name="buffered_io" dev="configfs" ino=56764 res=0 errno=0
[ 1108.128421][T13545] nvmet: failed to open file ./file0: (-22)
[ 1109.214039][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'.
[ 1110.298267][T13568] overlayfs: failed to clone upperpath
[ 1112.470623][T13592] loop0: detected capacity change from 0 to 512
[ 1113.410947][T13592] EXT4-fs (loop0): Ignoring removed orlov option
[ 1113.486557][T13592] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[ 1113.525996][T13592] netlink: 'syz.0.2289': attribute type 5 has an invalid length.
[ 1115.460889][T13618] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1115.471680][T13618] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1115.480104][T13618] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1115.488841][T13618] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1115.497531][T13618] page dumped because: unmovable page
[ 1115.502923][T13618] page_owner info is not present (never set?)
[ 1116.185959][T13628] tmpfs: Too small a size for current use
[ 1116.898040][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.905041][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.986445][T13632] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1117.078229][T13634] loop0: detected capacity change from 0 to 128
[ 1117.682004][T13646] loop0: detected capacity change from 0 to 512
[ 1117.703118][T13646] EXT4-fs (loop0): Ignoring removed orlov option
[ 1117.767228][T13646] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback.
[ 1117.803501][T13646] netlink: 'syz.0.2321': attribute type 5 has an invalid length.
[ 1118.117971][T13657] FAULT_INJECTION: forcing a failure.
[ 1118.117971][T13657] name failslab, interval 1, probability 0, space 0, times 0
[ 1118.190243][T13657] CPU: 0 PID: 13657 Comm: syz.7.2315 Not tainted syzkaller #0
[ 1118.197793][T13657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1118.207899][T13657] Call Trace:
[ 1118.211216][T13657]  <TASK>
[ 1118.214329][T13657]  dump_stack_lvl+0x188/0x250
[ 1118.219231][T13657]  ? show_regs_print_info+0x20/0x20
[ 1118.224485][T13657]  ? load_image+0x410/0x410
[ 1118.229122][T13657]  ? __lock_acquire+0x7b50/0x7b50
[ 1118.234319][T13657]  should_fail+0x383/0x4b0
[ 1118.238799][T13657]  should_failslab+0x5/0x20
[ 1118.243363][T13657]  slab_pre_alloc_hook+0x51/0xc0
[ 1118.248365][T13657]  __kmalloc_node+0x6d/0x3a0
[ 1118.252996][T13657]  ? kvmalloc_node+0x84/0x130
[ 1118.257750][T13657]  kvmalloc_node+0x84/0x130
[ 1118.262302][T13657]  nf_hook_entries_grow+0x31a/0x760
[ 1118.267660][T13657]  __nf_register_net_hook+0x234/0x850
[ 1118.273100][T13657]  nf_register_net_hook+0xd6/0x190
[ 1118.278265][T13657]  nf_tables_newchain+0x1e3c/0x2ad0
[ 1118.283624][T13657]  ? nf_tables_deltable+0xd90/0xd90
[ 1118.288906][T13657]  ? __lock_acquire+0x7b50/0x7b50
[ 1118.294259][T13657]  ? __nla_parse+0x3c/0x50
[ 1118.299041][T13657]  nfnetlink_rcv+0x1117/0x2450
[ 1118.304018][T13657]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 1118.309652][T13657]  ? skb_clone+0x1f1/0x350
[ 1118.314111][T13657]  ? rcu_lock_release+0x5/0x20
[ 1118.319015][T13657]  ? __lock_acquire+0x7b50/0x7b50
[ 1118.324099][T13657]  netlink_unicast+0x78f/0x940
[ 1118.328931][T13657]  netlink_sendmsg+0x8ba/0xbe0
[ 1118.333746][T13657]  ? netlink_getsockopt+0x570/0x570
[ 1118.338977][T13657]  ? aa_sock_msg_perm+0x94/0x150
[ 1118.344046][T13657]  ? apparmor_socket_sendmsg+0x88/0x230
[ 1118.349629][T13657]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1118.355153][T13657]  ? security_socket_sendmsg+0x7c/0xa0
[ 1118.360667][T13657]  ? netlink_getsockopt+0x570/0x570
[ 1118.365905][T13657]  ____sys_sendmsg+0x5be/0x8f0
[ 1118.370784][T13657]  ? __sys_sendmsg_sock+0x30/0x30
[ 1118.375889][T13657]  ? import_iovec+0x6f/0xa0
[ 1118.380455][T13657]  ___sys_sendmsg+0x236/0x2e0
[ 1118.385300][T13657]  ? __sys_sendmsg+0x290/0x290
[ 1118.390165][T13657]  __se_sys_sendmsg+0x1b7/0x2a0
[ 1118.395067][T13657]  ? __x64_sys_sendmsg+0x80/0x80
[ 1118.400073][T13657]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1118.406119][T13657]  ? lockdep_hardirqs_on+0x94/0x140
[ 1118.411428][T13657]  do_syscall_64+0x4c/0xa0
[ 1118.415879][T13657]  ? clear_bhb_loop+0x30/0x80
[ 1118.420785][T13657]  ? clear_bhb_loop+0x30/0x80
[ 1118.425508][T13657]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1118.431450][T13657] RIP: 0033:0x7feaf6294159
[ 1118.435902][T13657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1118.455549][T13657] RSP: 002b:00007feaf44ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1118.464017][T13657] RAX: ffffffffffffffda RBX: 00007feaf651bfa0 RCX: 00007feaf6294159
[ 1118.472031][T13657] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1118.480074][T13657] RBP: 00007feaf632b06b R08: 0000000000000000 R09: 0000000000000000
[ 1118.488090][T13657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1118.496112][T13657] R13: 00007feaf651c038 R14: 00007feaf651bfa0 R15: 00007fff4ac36a98
[ 1118.504159][T13657]  </TASK>
[ 1119.838635][T13679] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1120.825689][T13679] loop7: detected capacity change from 0 to 128
[ 1120.991740][T13678] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[ 1121.002068][T13678] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[ 1121.010241][T13678] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[ 1121.018902][T13678] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1121.027519][T13678] page dumped because: unmovable page
[ 1121.033096][T13678] page_owner info is not present (never set?)
[ 1121.104671][T13687] fuse: Bad value for 'fd'
[ 1121.564875][T13700] loop7: detected capacity change from 0 to 8
[ 1121.692406][T13700] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1121.700655][T13700] SQUASHFS error: Failed to read block 0x91: -5
[ 1121.707225][T13700] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1121.714741][T13700] SQUASHFS error: Unable to read inode 0x11f
[ 1122.377254][T13697] device syzkaller0 entered promiscuous mode
[ 1123.643520][T13723] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1123.931894][T13727] fuse: Bad value for 'fd'
[ 1124.526553][T13744] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13744]
[ 1124.692704][T13743] FAULT_INJECTION: forcing a failure.
[ 1124.692704][T13743] name failslab, interval 1, probability 0, space 0, times 0
[ 1124.974021][T13743] CPU: 0 PID: 13743 Comm: syz.6.2354 Not tainted syzkaller #0
[ 1124.981548][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1124.991652][T13743] Call Trace:
[ 1124.994970][T13743]  <TASK>
[ 1124.997999][T13743]  dump_stack_lvl+0x188/0x250
[ 1125.002726][T13743]  ? show_regs_print_info+0x20/0x20
[ 1125.007973][T13743]  ? load_image+0x410/0x410
[ 1125.012560][T13743]  ? __might_sleep+0xf0/0xf0
[ 1125.017196][T13743]  ? __lock_acquire+0x7b50/0x7b50
[ 1125.022347][T13743]  should_fail+0x383/0x4b0
[ 1125.026832][T13743]  should_failslab+0x5/0x20
[ 1125.031402][T13743]  slab_pre_alloc_hook+0x51/0xc0
[ 1125.036500][T13743]  ? __kernfs_new_node+0xe3/0x6b0
[ 1125.041833][T13743]  kmem_cache_alloc+0x3d/0x280
[ 1125.046668][T13743]  __kernfs_new_node+0xe3/0x6b0
[ 1125.051580][T13743]  ? __lock_acquire+0x7b50/0x7b50
[ 1125.056686][T13743]  ? kernfs_new_node+0x250/0x250
[ 1125.061691][T13743]  ? kernfs_activate+0x1eb/0x210
[ 1125.066694][T13743]  kernfs_new_node+0x148/0x250
[ 1125.071520][T13743]  __kernfs_create_file+0x47/0x2e0
[ 1125.076686][T13743]  sysfs_add_file_mode_ns+0x2d2/0x390
[ 1125.082155][T13743]  sysfs_merge_group+0x182/0x320
[ 1125.087148][T13743]  ? sysfs_remove_groups+0xa0/0xa0
[ 1125.092322][T13743]  ? sysfs_create_groups+0x9c/0x120
[ 1125.097578][T13743]  dpm_sysfs_add+0xce/0x270
[ 1125.102244][T13743]  device_add+0x745/0x1050
[ 1125.106794][T13743]  device_create+0x266/0x300
[ 1125.111443][T13743]  ? root_device_unregister+0xf0/0xf0
[ 1125.116891][T13743]  bdi_register_va+0x93/0x6c0
[ 1125.121626][T13743]  bdi_register+0xdf/0x130
[ 1125.126089][T13743]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1125.132068][T13743]  ? bdi_register_va+0x6c0/0x6c0
[ 1125.137072][T13743]  ? blk_register_queue+0x37d/0x3a0
[ 1125.142417][T13743]  device_add_disk+0x710/0xde0
[ 1125.147314][T13743]  md_alloc+0x80e/0xc10
[ 1125.151645][T13743]  add_named_array+0x1bd/0x290
[ 1125.156467][T13743]  ? get_ro+0x20/0x20
[ 1125.160548][T13743]  ? read_lock_is_recursive+0x10/0x10
[ 1125.165979][T13743]  param_attr_store+0x20a/0x300
[ 1125.170875][T13743]  ? param_attr_show+0x170/0x170
[ 1125.175868][T13743]  ? sysfs_kf_read+0x350/0x350
[ 1125.180681][T13743]  module_attr_store+0x5b/0x80
[ 1125.185533][T13743]  kernfs_fop_write_iter+0x3a8/0x500
[ 1125.190879][T13743]  vfs_write+0x748/0xd70
[ 1125.195182][T13743]  ? file_end_write+0x250/0x250
[ 1125.200106][T13743]  ? mutex_lock_nested+0x17/0x20
[ 1125.205122][T13743]  ? __fdget_pos+0x2bf/0x370
[ 1125.209785][T13743]  ? ksys_write+0x70/0x260
[ 1125.214256][T13743]  ksys_write+0x153/0x260
[ 1125.218636][T13743]  ? __ia32_sys_read+0x80/0x80
[ 1125.223460][T13743]  ? lockdep_hardirqs_on+0x94/0x140
[ 1125.228717][T13743]  do_syscall_64+0x4c/0xa0
[ 1125.233280][T13743]  ? clear_bhb_loop+0x30/0x80
[ 1125.238007][T13743]  ? clear_bhb_loop+0x30/0x80
[ 1125.242738][T13743]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1125.248780][T13743] RIP: 0033:0x7ff6b074e159
[ 1125.253238][T13743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1125.272891][T13743] RSP: 002b:00007ff6ae9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1125.281358][T13743] RAX: ffffffffffffffda RBX: 00007ff6b09d5fa0 RCX: 00007ff6b074e159
[ 1125.289466][T13743] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000006
[ 1125.297495][T13743] RBP: 00007ff6b07e506b R08: 0000000000000000 R09: 0000000000000000
[ 1125.305527][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1125.313814][T13743] R13: 00007ff6b09d6038 R14: 00007ff6b09d5fa0 R15: 00007ffd66d84d78
[ 1125.321845][T13743]  </TASK>
[ 1126.145642][T13761] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1126.172488][T13743] ------------[ cut here ]------------
[ 1126.395499][T13743] WARNING: CPU: 0 PID: 13743 at block/genhd.c:554 device_add_disk+0x8d6/0xde0
[ 1126.404683][T13743] Modules linked in:
[ 1126.408617][T13743] CPU: 0 PID: 13743 Comm: syz.6.2354 Not tainted syzkaller #0
[ 1126.417224][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1126.427424][T13743] RIP: 0010:device_add_disk+0x8d6/0xde0
[ 1126.433052][T13743] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 80 f5 90 8c e8 f1 3d 37 00 eb 05 e8 ca 3f a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e
[ 1126.454280][T13743] RSP: 0018:ffffc90002377a00 EFLAGS: 00010246
[ 1126.460434][T13743] RAX: ffffffff83d2d4d6 RBX: ffff88805fa8f000 RCX: 0000000000080000
[ 1126.478881][T13743] RDX: ffffc90016713000 RSI: 000000000007ffff RDI: 0000000000080000
[ 1126.517398][T13743] RBP: 0000000000000009 R08: ffffc90002377887 R09: 1ffff9200046ef10
[ 1126.544510][T13743] R10: dffffc0000000000 R11: fffff5200046ef11 R12: ffff888043102380
[ 1126.563906][T13743] R13: ffff88805fa8f150 R14: dffffc0000000000 R15: ffff888043102380
[ 1126.592409][T13743] FS:  00007ff6ae9a66c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 1126.614242][T13743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1126.621123][T13743] CR2: 00007f279e43f8cb CR3: 0000000064651000 CR4: 00000000003506f0
[ 1126.650253][T13743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1126.668210][T13743] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1126.677950][T13743] Call Trace:
[ 1126.681524][T13743]  <TASK>
[ 1126.686408][T13743]  md_alloc+0x80e/0xc10
[ 1126.691176][T13743]  add_named_array+0x1bd/0x290
[ 1126.698351][T13743]  ? get_ro+0x20/0x20
[ 1126.702903][T13743]  ? read_lock_is_recursive+0x10/0x10
[ 1126.710620][T13743]  param_attr_store+0x20a/0x300
[ 1126.720341][T13743]  ? param_attr_show+0x170/0x170
[ 1126.727345][T13743]  ? sysfs_kf_read+0x350/0x350
[ 1126.732518][T13743]  module_attr_store+0x5b/0x80
[ 1126.747505][T13743]  kernfs_fop_write_iter+0x3a8/0x500
[ 1126.753501][T13743]  vfs_write+0x748/0xd70
[ 1126.760526][T13743]  ? file_end_write+0x250/0x250
[ 1126.774077][T13743]  ? mutex_lock_nested+0x17/0x20
[ 1126.780188][T13743]  ? __fdget_pos+0x2bf/0x370
[ 1126.790157][T13743]  ? ksys_write+0x70/0x260
[ 1126.796345][T13743]  ksys_write+0x153/0x260
[ 1126.809946][T13743]  ? __ia32_sys_read+0x80/0x80
[ 1126.814878][T13743]  ? lockdep_hardirqs_on+0x94/0x140
[ 1126.820135][T13743]  do_syscall_64+0x4c/0xa0
[ 1126.824651][T13743]  ? clear_bhb_loop+0x30/0x80
[ 1126.829487][T13743]  ? clear_bhb_loop+0x30/0x80
[ 1126.834249][T13743]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1126.840185][T13743] RIP: 0033:0x7ff6b074e159
[ 1126.845147][T13743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1126.864865][T13743] RSP: 002b:00007ff6ae9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1126.873329][T13743] RAX: ffffffffffffffda RBX: 00007ff6b09d5fa0 RCX: 00007ff6b074e159
[ 1126.901426][T13743] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000006
[ 1126.933345][T13743] RBP: 00007ff6b07e506b R08: 0000000000000000 R09: 0000000000000000
[ 1126.970809][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1127.002893][T13743] R13: 00007ff6b09d6038 R14: 00007ff6b09d5fa0 R15: 00007ffd66d84d78
[ 1127.043659][T13743]  </TASK>
[ 1127.058576][T13743] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1127.065934][T13743] CPU: 1 PID: 13743 Comm: syz.6.2354 Not tainted syzkaller #0
[ 1127.073439][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1127.083541][T13743] Call Trace:
[ 1127.086847][T13743]  <TASK>
[ 1127.089803][T13743]  dump_stack_lvl+0x188/0x250
[ 1127.094540][T13743]  ? show_regs_print_info+0x20/0x20
[ 1127.099771][T13743]  ? load_image+0x410/0x410
[ 1127.104318][T13743]  panic+0x2f8/0x850
[ 1127.108353][T13743]  ? bpf_jit_dump+0xd0/0xd0
[ 1127.112909][T13743]  ? device_add_disk+0x8d6/0xde0
[ 1127.117886][T13743]  __warn+0x248/0x2b0
[ 1127.121902][T13743]  ? device_add_disk+0x8d6/0xde0
[ 1127.126876][T13743]  report_bug+0x1b9/0x2e0
[ 1127.131328][T13743]  handle_bug+0x3a/0x70
[ 1127.135541][T13743]  exc_invalid_op+0x16/0x40
[ 1127.140086][T13743]  asm_exc_invalid_op+0x16/0x20
[ 1127.144970][T13743] RIP: 0010:device_add_disk+0x8d6/0xde0
[ 1127.150555][T13743] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 80 f5 90 8c e8 f1 3d 37 00 eb 05 e8 ca 3f a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e
[ 1127.170194][T13743] RSP: 0018:ffffc90002377a00 EFLAGS: 00010246
[ 1127.176302][T13743] RAX: ffffffff83d2d4d6 RBX: ffff88805fa8f000 RCX: 0000000000080000
[ 1127.184366][T13743] RDX: ffffc90016713000 RSI: 000000000007ffff RDI: 0000000000080000
[ 1127.192601][T13743] RBP: 0000000000000009 R08: ffffc90002377887 R09: 1ffff9200046ef10
[ 1127.200705][T13743] R10: dffffc0000000000 R11: fffff5200046ef11 R12: ffff888043102380
[ 1127.208712][T13743] R13: ffff88805fa8f150 R14: dffffc0000000000 R15: ffff888043102380
[ 1127.216727][T13743]  ? device_add_disk+0x8d6/0xde0
[ 1127.221736][T13743]  md_alloc+0x80e/0xc10
[ 1127.225937][T13743]  add_named_array+0x1bd/0x290
[ 1127.230735][T13743]  ? get_ro+0x20/0x20
[ 1127.234755][T13743]  ? read_lock_is_recursive+0x10/0x10
[ 1127.240177][T13743]  param_attr_store+0x20a/0x300
[ 1127.245065][T13743]  ? param_attr_show+0x170/0x170
[ 1127.250400][T13743]  ? sysfs_kf_read+0x350/0x350
[ 1127.255198][T13743]  module_attr_store+0x5b/0x80
[ 1127.259995][T13743]  kernfs_fop_write_iter+0x3a8/0x500
[ 1127.265359][T13743]  vfs_write+0x748/0xd70
[ 1127.269674][T13743]  ? file_end_write+0x250/0x250
[ 1127.274580][T13743]  ? mutex_lock_nested+0x17/0x20
[ 1127.279553][T13743]  ? __fdget_pos+0x2bf/0x370
[ 1127.284200][T13743]  ? ksys_write+0x70/0x260
[ 1127.288659][T13743]  ksys_write+0x153/0x260
[ 1127.293024][T13743]  ? __ia32_sys_read+0x80/0x80
[ 1127.297852][T13743]  ? lockdep_hardirqs_on+0x94/0x140
[ 1127.303097][T13743]  do_syscall_64+0x4c/0xa0
[ 1127.307549][T13743]  ? clear_bhb_loop+0x30/0x80
[ 1127.312261][T13743]  ? clear_bhb_loop+0x30/0x80
[ 1127.316984][T13743]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1127.322950][T13743] RIP: 0033:0x7ff6b074e159
[ 1127.327403][T13743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1127.347047][T13743] RSP: 002b:00007ff6ae9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1127.355591][T13743] RAX: ffffffffffffffda RBX: 00007ff6b09d5fa0 RCX: 00007ff6b074e159
[ 1127.363828][T13743] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000006
[ 1127.371839][T13743] RBP: 00007ff6b07e506b R08: 0000000000000000 R09: 0000000000000000
[ 1127.379845][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1127.387849][T13743] R13: 00007ff6b09d6038 R14: 00007ff6b09d5fa0 R15: 00007ffd66d84d78
[ 1127.395874][T13743]  </TASK>
[ 1127.399187][T13743] Kernel Offset: disabled
[ 1127.403868][T13743] Rebooting in 86400 seconds..