last executing test programs:

6m55.078886642s ago: executing program 32 (id=230):
mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000001c40)='./file1\x00', &(0x7f0000001c80)='tmpfs\x00', 0x2, &(0x7f0000001cc0)='usrquota')
chdir(&(0x7f0000001d00)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001d40)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000001d80)={0x2, 0x5, 0x8000000000006, 0x10000000fffd, 0x2, 0x3, 0x1, 0x6, 0xe})

5m51.41885845s ago: executing program 33 (id=737):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1}, 0x5)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f0000000240)}, 0x20)

4m51.762248742s ago: executing program 34 (id=1263):
syz_mount_image$btrfs(&(0x7f00000003c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000ac0)={[{@nossd_spread}]}, 0x1, 0x559a, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000060c0)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000006100), 0x40000, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)
ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000006280)={&(0x7f0000006300)=[{&(0x7f0000006340)='\v', 0x1}], 0x1, 0x0, 0x0, 0x8000001003, 0x820000950, 0xed, 0x1, 0x4})

4m50.268499443s ago: executing program 35 (id=1271):
mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2000, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
close(r0)
umount2(&(0x7f0000004c80)='./file0\x00', 0x9)

4m2.434037676s ago: executing program 36 (id=1603):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000100)=r1, 0x4)

2m45.498921091s ago: executing program 4 (id=2241):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0)
sendmsg$rds(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4077, 0xfed}], 0x1}, 0x0)

2m45.281228953s ago: executing program 4 (id=2245):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000740)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r1)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000d00)={r2, 0x17}, 0x0, &(0x7f0000000d80)="929835e740d6a600000000000000010000000000000001", 0x0)

2m44.927236189s ago: executing program 4 (id=2248):
r0 = socket$unix(0x1, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffd9f, &(0x7f0000001340)={&(0x7f0000000080)={0x4c, 0x14, 0xd34c172462246f6b, 0x70bd25, 0x25dfdbfd, {0x1, 0x23, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0x800, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x20, 0x0, 0x0, 0x404c0c8}, 0x4040000)

2m44.745300887s ago: executing program 4 (id=2250):
syz_mount_image$udf(&(0x7f0000000800), &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000008c0)=ANY=[], 0x2, 0xc2d, &(0x7f000000b680)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000c2c0)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f000000c300)=0x6ff)
syz_mount_image$fuse(0x0, &(0x7f0000027380)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000273c0)='./file0\x00', &(0x7f0000027400), 0x10000, &(0x7f0000027440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

2m44.258312657s ago: executing program 4 (id=2253):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000280)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000600)={@link_local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2b900", 0x44, 0x2f, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x289, 0x88be, 0x4, {{}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x6, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0)

2m43.888598394s ago: executing program 4 (id=2256):
ioperm(0x4, 0x8, 0x5)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fchown(r0, 0x0, 0xee01)

2m43.343584659s ago: executing program 37 (id=2256):
ioperm(0x4, 0x8, 0x5)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fchown(r0, 0x0, 0xee01)

1m57.721798238s ago: executing program 9 (id=2592):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@loopback, 0xfe, 0x32}, @in6=@empty, {0x0, 0x6, 0xffffffffffff0001, 0x8, 0x1, 0x9, 0x571, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffe, 0xebe2}, {0x2}, 0x870bd2c, 0x3501, 0x2, 0x0, 0x0, 0x50}, [@offload={0xc, 0x1c, {r3, 0x1}}, @algo_aead={0x60}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1m57.544622396s ago: executing program 9 (id=2594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001340)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@newtfilter={0x68, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1004}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="5b8c8d1841289653"]}]}}]}]}]}}]}, 0x68}}, 0x0)

1m57.364715514s ago: executing program 9 (id=2595):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00')
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @empty}, 0x1c)
pread64(r1, &(0x7f0000000280)=""/245, 0xf5, 0x4)

1m57.180210582s ago: executing program 9 (id=2598):
syz_mount_image$hfsplus(&(0x7f0000004540), &(0x7f0000004580)='./file0\x00', 0x0, &(0x7f00000045c0)={[{}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'iso8859-6'}}]}, 0x1, 0x5f0, &(0x7f0000004600)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000100)=0x9, 0x12)
mknod(&(0x7f0000000280)='./bus\x00', 0xc000, 0x2000008)

1m56.484192783s ago: executing program 9 (id=2600):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000001c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x2, 0x80000001, 0xffffffff, 0xfffffeff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xfffffffc}, {0x1, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xe61}, {0x0, 0xffffffff}, {0x7, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
write$P9_RSTATu(r0, 0x0, 0x6e)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000440)=0xffffffff)
close(0x3)

1m56.104351241s ago: executing program 9 (id=2603):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002640)=ANY=[@ANYBLOB="3c01000010000104000000000000000000000000000000000000000000000001faff00000000000000000000000000f311341231000000000a00000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d233000000fe8000000000000000000000000000aaffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d6163287368613129"], 0x13c}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f00000028c0)={&(0x7f0000002900)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x97)

1m55.719835371s ago: executing program 38 (id=2603):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002640)=ANY=[@ANYBLOB="3c01000010000104000000000000000000000000000000000000000000000001faff00000000000000000000000000f311341231000000000a00000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d233000000fe8000000000000000000000000000aaffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d6163287368613129"], 0x13c}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f00000028c0)={&(0x7f0000002900)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x97)

1m20.654433998s ago: executing program 1 (id=2794):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x0, 0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xdb}})

1m17.983353118s ago: executing program 1 (id=2806):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='bbr', 0x3)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000540)=0xce, 0x4)
connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x14, &(0x7f0000000b00)=[{&(0x7f0000000b40)=' ', 0x100120}], 0x1}, 0x0)

1m17.745475213s ago: executing program 1 (id=2807):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f000003cf80), 0x7ff, 0x2)
preadv(r1, &(0x7f000003d000)=[{&(0x7f000003d040)=""/122, 0x7a}], 0x1, 0x6, 0xc)

1m17.254824552s ago: executing program 1 (id=2808):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000002200)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
r0 = open(&(0x7f0000001240)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000001280)=@loop={'/dev/loop', 0x0}, &(0x7f00000012c0)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000001300)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
write$P9_RREADDIR(r0, &(0x7f0000000040)={0x2a, 0x29, 0x2, {0x1, [{{0x20, 0x4, 0x2}, 0xa, 0x5, 0x7, './file1'}]}}, 0x2a)

1m16.467592022s ago: executing program 1 (id=2814):
syz_open_dev$evdev(&(0x7f0000000280), 0x8c, 0x200)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m15.233368178s ago: executing program 1 (id=2824):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4048050)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r1}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d40)={r0, 0x0, 0x0}, 0x20)

1m14.654182436s ago: executing program 39 (id=2824):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4048050)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d00)={r1}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d40)={r0, 0x0, 0x0}, 0x20)

47.589063412s ago: executing program 3 (id=2976):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x180)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000600)='7', 0x1)
fcntl$lock(r0, 0x26, &(0x7f0000000640)={0x1, 0x2, 0x2, 0xf34})

46.900330372s ago: executing program 3 (id=2979):
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
lsetxattr$security_evm(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)=@v2={0x5, 0x1, 0x3, 0x31d}, 0x9, 0x1)
linkat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0/file2\x00', 0x1000)

46.527950629s ago: executing program 3 (id=2980):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x400, &(0x7f0000000880), 0x2, 0x790, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f00000010c0)='2', 0xfdef, 0xc00)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4102, 0x1bc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r1, 0x0)
write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x21}}, 0x18)

46.03729733s ago: executing program 3 (id=2983):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000000480)="$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")
open(&(0x7f0000000a00)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000ac0)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x14b)

45.23988618s ago: executing program 3 (id=2990):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x30}}, 0x40)
close(0x3)

44.035911822s ago: executing program 3 (id=3002):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40)

43.520287485s ago: executing program 40 (id=3002):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40)

41.900199679s ago: executing program 8 (id=3018):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000100)='X', 0xfee4, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x390}], 0x1}}], 0x2, 0x0)
close(0x3)

40.783292012s ago: executing program 8 (id=3023):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ustat(0x90000000000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5})

40.50486754s ago: executing program 8 (id=3026):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20041)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000080)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xfffffffb], [0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffdf7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xfdffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x81, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x3388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x8, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000300)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000340)={0x1, 0x4, 0x6, 0xe, 0xcde300000000002, 0xfffffffffffffff9, 0x8, 0xb, 0x1, 0x400002, 0x3, 0x2})

40.299024852s ago: executing program 8 (id=3028):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x200008, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000b00)="$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")
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x804000, &(0x7f0000000080)=ANY=[], 0x2, 0xc2d, &(0x7f0000003240)="$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")
mount(&(0x7f0000003e80)=@loop={'/dev/loop', 0x0}, &(0x7f0000003ec0)='./file1\x00', 0x0, 0x41002, 0x0)
r1 = open(&(0x7f0000003f00)='./file1\x00', 0x12f840, 0xa4)
preadv2(r1, &(0x7f0000003f40)=[{&(0x7f0000003f80)=""/256, 0x100}], 0x1, 0x0, 0x4, 0x9)

40.101317582s ago: executing program 8 (id=3030):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

37.784655186s ago: executing program 8 (id=3033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

37.432676072s ago: executing program 41 (id=3033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

30.038170682s ago: executing program 7 (id=3076):
socket$inet6(0xa, 0x1, 0x0)
inotify_init()
r0 = inotify_init()
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000104000000200000000000000000000001"], 0x0, 0x3c}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="bf160000000000007962a80000000000150204000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000006c000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

29.857862511s ago: executing program 7 (id=3077):
mknod(&(0x7f0000000a80)='./file0\x00', 0x8001420, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1cc)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x2000}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file2\x00', 0x1000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2)

29.773814509s ago: executing program 7 (id=3078):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/xt_recent/syz0\x00', 0x2, 0x3)
write$P9_RREADDIR(r1, &(0x7f0000000140)={0xb, 0x29, 0x100, {0x3}}, 0xb)

29.544533192s ago: executing program 7 (id=3079):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8)

29.384627079s ago: executing program 7 (id=3080):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000000)=<r1=>0x0)
r2 = eventfd2(0x3, 0x80000)
io_getevents(r1, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])

28.897551108s ago: executing program 7 (id=3081):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000457000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x9}]})

28.362089212s ago: executing program 42 (id=3081):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000457000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x9}]})

4.947159718s ago: executing program 2 (id=3171):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x2, 0x3, 0x20000000002}, &(0x7f0000000480)={0x1f, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x200000, 0x5, 0x2000000000}, 0x0, 0x0, 0x0)

4.609989022s ago: executing program 6 (id=3174):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000380)={0x40, 0x0, 0x19, {0x19, 0x23, "28b807097dc46dc8ea340f92119397e46174f5a835c2c2"}}, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x0, 0xe, 0x42, "4ee30d4a4e0ee9cedf1d2b7af840ca149a3aef84c0ac93c7ce0c96fe4c09ec5225f9f7477f8ff6451f4347f98dd88a03d5b6c103d761ed6e6505762c8d19390c1d70"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

3.93474863s ago: executing program 2 (id=3179):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

3.594265265s ago: executing program 5 (id=3180):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000173000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.534914171s ago: executing program 2 (id=3181):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',8Zz', 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}], 0x2}], 0x1, 0x4040810)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/99, 0x63}], 0x1}, 0x0)

3.35103128s ago: executing program 2 (id=3182):
syz_usb_connect(0x0, 0x4b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001180), 0x1, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000011c0)={0x1, 0x0, 0x1, 0x2, 0x4})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001700)=[{0x6, 0x0, 0x0, 0x4}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.816455484s ago: executing program 0 (id=3184):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
r1 = epoll_create(0x3ff)
shutdown(r0, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000740)={0x20002010})
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x9, 0x4)

2.693646526s ago: executing program 5 (id=3185):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000cc0)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000e00)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000e40)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x5c2b8000}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)=""/161, 0xa1}], 0x1}, 0x6}], 0x2, 0x40000043, 0x0)

2.45804157s ago: executing program 5 (id=3186):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xdcfe]}, 0x8, 0x80800)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0])
r2 = gettid()
timer_create(0x2, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000200))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000240)={{0x77359400}, {0x0, 0xe4c}}, 0x0)

1.988202458s ago: executing program 6 (id=3187):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26f, 0x0, 0x3}]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000500)={{0x58000, 0x5000, 0xf, 0x0, 0x8, 0x4, 0x0, 0x2, 0x0, 0x8, 0x4, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0x1, 0x9, 0x0, 0x5, 0x7, 0xff, 0x1}, {0xa03a19760224864a, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x98, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x81, 0x8, 0x2, 0x5}, {0x6000, 0xffff1000, 0xf, 0x1, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x70000, 0x50000, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0xdddd0000, 0xddde1000, 0x11, 0x3, 0x4, 0x2, 0xa0, 0x20, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x3, 0x7, 0xb, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000}, {0x30000, 0x2}, 0x80010031, 0x0, 0x0, 0x23c, 0x1, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]})

1.824884474s ago: executing program 0 (id=3188):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x14011, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
io_setup(0x3fe, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0xfdfe, r0, 0x0}])
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x480a8, &(0x7f0000000280)=ANY=[], 0x1f, 0x0, 0x0)

1.751465752s ago: executing program 6 (id=3189):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000800)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='X', 0x1}], 0x1, 0x0, 0x0, 0x4004001}, 0x4c080)
recvmmsg(r1, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1002, 0x0)

1.66798922s ago: executing program 6 (id=3190):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002800)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000006c0)="b800000500000000", &(0x7f0000000700)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000740)=r3, 0x4)
sendmsg$unix(r1, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x2)

1.581814129s ago: executing program 0 (id=3191):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioperm(0x2, 0x7, 0x13)
msgsnd(0x0, 0x0, 0x17, 0x800)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
wait4(r0, 0x0, 0x2, 0x0)

1.548689312s ago: executing program 6 (id=3192):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = open(&(0x7f0000000380)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)

1.431767604s ago: executing program 5 (id=3193):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x173)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000800)='100', 0x3)
r1 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000cc0)={0x3c2aab0, 0x1, 0x1})

1.359797772s ago: executing program 6 (id=3194):
r0 = syz_usb_connect(0x0, 0x17d, &(0x7f00000046c0)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c5760af21822ed33fc12b88222be6b3b70d8595ba08893f644fa53c1c55ad648952a80f17ece8bff775682c9a5167111725b5484fd0ab5d334dcfbe28eb0e02bd0fa90c776e4997388fc9442fd3e8657ac92601fd61a184cf49d513b7bf7cdcebe6423101690e5269a5b2be351ef182d84744d9664f21b1c4bd8c72c0905820240"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0)

391.39028ms ago: executing program 5 (id=3195):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044)

366.994752ms ago: executing program 0 (id=3196):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000bc0)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000c00)=0x1b32, 0x4)
sendto$inet(r0, &(0x7f0000000c40)='v', 0x1, 0x4040, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/76, 0xfffffe8e}, 0x39ca}], 0x1, 0x299eaf0600d3a4a5, 0x0)

234.680616ms ago: executing program 5 (id=3197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_marker\x00', 0x1, 0x5a)
write(r0, &(0x7f0000000200)="2d2519d01038dc3dc2547dfbde71febae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d8714bdef1c9e7253595f944123f1c9c5e4ee16a1d71f8876bd9dd39cbd283", 0x43)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r1, &(0x7f0000000340)=""/16384, 0x4000)

190.40112ms ago: executing program 2 (id=3198):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x1, @loopback, 0x80}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r2, 0xc61}}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

154.064834ms ago: executing program 0 (id=3199):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7020000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x270f, @empty}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000001c0)={0xfffffffffffffff0, 0x0, '\x00', 0x1, 0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x38, 0x0, &(0x7f0000000400)='\x00'/56, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

24.601457ms ago: executing program 2 (id=3200):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001d000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38)

0s ago: executing program 0 (id=3201):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='27', 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={0x0, &(0x7f0000001380)=""/4, 0x20, 0x4, 0x1, 0x20000000}, 0x28)

kernel console output (not intermixed with test programs):

ering): Port device team_slave_1 removed
[  420.221441][ T5059] team0 (unregistering): Port device team_slave_0 removed
[  420.370428][ T5059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  420.462630][ T5059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  420.775842][T13843] FAULT_INJECTION: forcing a failure.
[  420.775842][T13843] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  420.789790][T13843] CPU: 0 PID: 13843 Comm: syz.2.2640 Not tainted syzkaller #0
[  420.797299][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  420.807401][T13843] Call Trace:
[  420.810727][T13843]  <TASK>
[  420.813715][T13843]  dump_stack_lvl+0x18c/0x250
[  420.818457][T13843]  ? show_regs_print_info+0x20/0x20
[  420.823728][T13843]  ? load_image+0x420/0x420
[  420.828319][T13843]  ? __lock_acquire+0x7eb0/0x7eb0
[  420.833389][T13843]  should_fail_ex+0x394/0x4c0
[  420.838105][T13843]  prepare_alloc_pages+0x1e1/0x5b0
[  420.843237][T13843]  __alloc_pages+0x134/0x460
[  420.847831][T13843]  ? zone_statistics+0x170/0x170
[  420.852790][T13843]  ? mark_lock+0x94/0x320
[  420.857194][T13843]  pte_alloc_one+0x84/0x540
[  420.861744][T13843]  ? pfn_modify_allowed+0x560/0x560
[  420.866972][T13843]  ? hugepage_vma_check+0x6bb/0x7f0
[  420.872208][T13843]  handle_mm_fault+0x2f6c/0x4a40
[  420.877167][T13843]  ? handle_mm_fault+0xe6/0x4a40
[  420.882136][T13843]  ? numa_migrate_prep+0x350/0x350
[  420.887294][T13843]  __get_user_pages+0x604/0x1580
[  420.892299][T13843]  ? populate_vma_page_range+0x380/0x380
[  420.897987][T13843]  populate_vma_page_range+0x2c1/0x380
[  420.903447][T13843]  ? fixup_user_fault+0x750/0x750
[  420.908485][T13843]  ? down_read+0x1ac/0x2e0
[  420.912946][T13843]  __mm_populate+0x260/0x390
[  420.917610][T13843]  ? faultin_page_range+0x8a0/0x8a0
[  420.922872][T13843]  ? up_write+0x1be/0x410
[  420.927246][T13843]  vm_mmap_pgoff+0x2da/0x3f0
[  420.931894][T13843]  ? account_locked_vm+0x200/0x200
[  420.937237][T13843]  ? ksys_mmap_pgoff+0xf3/0x720
[  420.942141][T13843]  ? __x64_sys_mmap+0x7a/0x130
[  420.946963][T13843]  do_syscall_64+0x55/0xb0
[  420.951429][T13843]  ? clear_bhb_loop+0x40/0x90
[  420.956174][T13843]  ? clear_bhb_loop+0x40/0x90
[  420.960916][T13843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  420.966860][T13843] RIP: 0033:0x7fc4581a8f19
[  420.971311][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.990962][T13843] RSP: 002b:00007fc4590ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  420.999424][T13843] RAX: ffffffffffffffda RBX: 00007fc458425fa0 RCX: 00007fc4581a8f19
[  421.007524][T13843] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000
[  421.015627][T13843] RBP: 00007fc458237f6d R08: ffffffffffffffff R09: 0000000000000000
[  421.023746][T13843] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  421.031758][T13843] R13: 00007fc458426038 R14: 00007fc458425fa0 R15: 00007ffcc05ea5c8
[  421.039792][T13843]  </TASK>
[  421.612484][T13848] loop2: detected capacity change from 0 to 40427
[  421.652900][T13848] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  421.678319][T13848] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  421.712505][T13848] F2FS-fs (loop2): invalid crc value
[  421.770328][T13848] F2FS-fs (loop2): Found nat_bits in checkpoint
[  421.873726][T13848] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  421.882254][T13848] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  421.969798][ T5801] Bluetooth: hci2: command tx timeout
[  421.970144][ T5059] bond0 (unregistering): Released all slaves
[  422.389568][T13721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.432874][T13721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.620120][T13721] team0: Port device team_slave_0 added
[  422.730967][T13721] team0: Port device team_slave_1 added
[  422.902476][T13721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.921720][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.003140][T13721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.048231][T13721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.065954][T13721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.093190][T13721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.198608][T13721] hsr_slave_0: entered promiscuous mode
[  423.227857][T13721] hsr_slave_1: entered promiscuous mode
[  423.239557][T13721] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  423.257062][T13721] Cannot create hsr debugfs directory
[  423.306645][T13868] Bluetooth: ISO socket layer initialized
[  424.749734][   T27] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  424.848560][T13721] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  424.868259][T13721] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  424.898645][T13721] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  424.902109][T13906] loop2: detected capacity change from 0 to 128
[  424.959427][   T27] usb 8-1: Using ep0 maxpacket: 16
[  424.970612][T13721] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  424.997720][   T27] usb 8-1: unable to get BOS descriptor or descriptor too short
[  425.039105][   T27] usb 8-1: config 1 interface 0 has no altsetting 0
[  425.095058][   T27] usb 8-1: string descriptor 0 read error: -22
[  425.109525][   T27] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.40
[  425.118988][   T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.364210][T13721] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.436480][T13721] 8021q: adding VLAN 0 to HW filter on device team0
[  425.460937][T13894] lo: entered promiscuous mode
[  425.466251][T13894] lo: entered allmulticast mode
[  425.477134][T13894] bond0: entered promiscuous mode
[  425.491569][T13894] bond0: entered allmulticast mode
[  425.498979][T13894] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.516183][T13894] dummy0: entered promiscuous mode
[  425.522403][T13894] dummy0: entered allmulticast mode
[  425.530861][T13894] 0�X��D��: entered promiscuous mode
[  425.536984][T13894] ifb0: entered promiscuous mode
[  425.545818][T13894] ifb0: entered allmulticast mode
[  425.559004][T13894] ifb1: entered promiscuous mode
[  425.576550][T13894] ifb1: entered allmulticast mode
[  425.587042][T13894] virtio_net virtio1 eth0: entered promiscuous mode
[  425.599253][T13894] virtio_net virtio1 eth0: entered allmulticast mode
[  425.618250][T13894] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode
[  425.634163][T13894] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode
[  425.643954][T13894] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[  425.656366][T13894] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode
[  425.680297][T13894] hwsim0: entered promiscuous mode
[  425.687647][T13894] hwsim0: entered allmulticast mode
[  425.704953][T13894] ieee802154 phy0 wpan0: entered promiscuous mode
[  425.717394][T13894] ieee802154 phy0 wpan0: entered allmulticast mode
[  425.736778][T13894] ieee802154 phy1 wpan1: entered promiscuous mode
[  425.759510][ T8263] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  425.768568][T13894] ieee802154 phy1 wpan1: entered allmulticast mode
[  425.790063][T13894] teql0: entered promiscuous mode
[  425.795262][T13894] teql0: entered allmulticast mode
[  425.801018][T13894] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  425.830944][T13916] ip6gre1: entered promiscuous mode
[  425.848838][T13916] ip6gre1: entered allmulticast mode
[  425.854047][   T27] usbhid 8-1:1.0: can't add hid device: -71
[  425.869817][   T27] usbhid: probe of 8-1:1.0 failed with error -71
[  425.895944][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.899492][   T27] usb 8-1: USB disconnect, device number 13
[  425.903505][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.974776][ T8263] usb 3-1: Using ep0 maxpacket: 8
[  426.005439][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.012693][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.016174][ T8263] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  426.048642][ T8263] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  426.073906][ T8263] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  426.101503][ T8263] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  426.136068][ T8263] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  426.180108][ T8263] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  426.203775][ T8263] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  426.239382][ T8263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.491829][ T8263] usb 3-1: GET_CAPABILITIES returned 0
[  426.505591][ T8263] usbtmc 3-1:16.0: can't read capabilities
[  426.719898][T13721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.742620][T13918] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71
[  426.766585][ T5851] usb 3-1: USB disconnect, device number 29
[  426.910953][T13721] veth0_vlan: entered promiscuous mode
[  426.955430][T13721] veth1_vlan: entered promiscuous mode
[  427.069592][T13721] veth0_macvtap: entered promiscuous mode
[  427.088418][T13721] veth1_macvtap: entered promiscuous mode
[  427.177625][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.214743][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.232030][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.246848][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.257393][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.273025][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.283411][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.294188][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.324179][T13721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.370602][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.399142][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.451638][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.479824][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.516570][T13969] input: syz0 as /devices/virtual/input/input28
[  427.535902][T13721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.559716][T13721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.586334][T13721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.682821][T13721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.730030][T13721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.739033][T13721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.759228][T13721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.159039][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.193188][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.331259][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.380822][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.913578][T14006] loop2: detected capacity change from 0 to 256
[  429.090201][T14010] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  430.159189][T14026] loop8: detected capacity change from 0 to 32768
[  430.279794][T14026] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  430.298133][T14037] loop2: detected capacity change from 0 to 4096
[  430.369131][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.505289][T14047] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  430.716135][   T28] audit: type=1800 audit(1700000166.664:84): pid=14037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2685" name="bus" dev="loop2" ino=18 res=0 errno=0
[  430.762969][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.774213][T14037] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean
[  430.793432][T14026] XFS (loop8): Ending clean mount
[  430.845425][T14026] XFS (loop8): Quotacheck needed: Please wait.
[  430.970946][T14026] XFS (loop8): Quotacheck: Done.
[  431.092841][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.373280][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.422649][T10626] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  432.113982][T14079] netlink: 'syz.1.2694': attribute type 1 has an invalid length.
[  432.147974][T14082] erspan1: entered allmulticast mode
[  432.186037][T14083] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  432.364960][T14087] loop8: detected capacity change from 0 to 4096
[  432.551654][T14087] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  432.673075][T14096] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  432.813251][T14087] ntfs3: loop8: ino=1a, mi_enum_attr
[  432.822341][T14087] ntfs3: loop8: ino=1a, mi_enum_attr
[  432.827711][T14087] ntfs3: loop8: Failed to initialize $Extend/$Reparse.
[  433.337440][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2712'.
[  433.449085][T14116] loop8: detected capacity change from 0 to 4096
[  433.566986][T14118] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  433.713580][   T28] audit: type=1800 audit(1700000169.664:85): pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2704" name="bus" dev="loop8" ino=18 res=0 errno=0
[  433.743455][T14116] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean
[  434.914770][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'.
[  435.340401][   T11] hsr_slave_0: left promiscuous mode
[  435.357469][   T11] hsr_slave_1: left promiscuous mode
[  435.370740][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.379016][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.387566][   T11] bridge_slave_1: left allmulticast mode
[  435.403815][   T11] bridge_slave_1: left promiscuous mode
[  435.414180][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.439256][   T11] bridge_slave_0: left allmulticast mode
[  435.454680][   T11] bridge_slave_0: left promiscuous mode
[  435.467018][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.621696][   T11] veth1_macvtap: left promiscuous mode
[  435.627311][   T11] veth0_macvtap: left promiscuous mode
[  435.650503][   T11] veth1_vlan: left promiscuous mode
[  435.681977][   T11] veth0_vlan: left promiscuous mode
[  435.821744][T14186] loop2: detected capacity change from 0 to 128
[  435.850158][T14186] EXT4-fs: Ignoring removed i_version option
[  435.923272][T14186] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  435.990789][T14186] ext4 filesystem being mounted at /691/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  436.262642][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  436.758932][ T6633] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  436.994034][ T6633] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  437.015897][ T6633] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  437.028720][ T6633] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  437.041258][ T6633] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.562213][ T6633] lg-g15 0003:046D:C222.0016: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0
[  437.665085][ T6633] lg-g15 0003:046D:C222.0016: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[  437.858783][ T6633] usb 9-1: USB disconnect, device number 12
[  438.375570][   T11] team0 (unregistering): Port device team_slave_1 removed
[  439.523070][T14259] loop1: detected capacity change from 0 to 256
[  439.553282][T14259] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  440.430856][T14280] netlink: 'syz.1.2748': attribute type 30 has an invalid length.
[  440.459890][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  440.466277][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  440.504591][T14280] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  440.513632][T14280] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  440.522758][T14280] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  440.531683][T14280] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  440.660619][T14280] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  440.669986][T14280] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  440.679712][T14280] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  440.688966][T14280] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.011863][T14280] netlink: 'syz.1.2748': attribute type 30 has an invalid length.
[  441.042525][T14280] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  441.052095][T14280] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  441.061039][T14280] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  441.069873][T14280] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  441.161627][T14280] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.170868][T14280] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.180123][T14280] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.189868][T14280] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.355647][T14293] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  441.480966][T14295] loop8: detected capacity change from 0 to 2048
[  441.568323][T14295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.685889][   T28] audit: type=1800 audit(1700000177.634:86): pid=14295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2751" name="file1" dev="loop8" ino=15 res=0 errno=0
[  441.717650][   T28] audit: type=1800 audit(1700000177.664:87): pid=14295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2751" name="file1" dev="loop8" ino=15 res=0 errno=0
[  441.719635][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2754'.
[  441.797402][T14312] bond0: entered promiscuous mode
[  441.804482][T14312] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.876206][T14313] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.909912][T14313] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  441.938536][T10626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.954753][T14313] bond0: (slave ip6gre2): Error -95 calling set_mac_address
[  442.733673][T14340] loop2: detected capacity change from 0 to 512
[  442.739712][ T8263] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  442.755230][T14340] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  442.783441][T14340] EXT4-fs error (device loop2): ext4_init_orphan_info:623: comm syz.2.2760: orphan file block 0: bad magic
[  442.827607][T14340] EXT4-fs (loop2): mount failed
[  442.961563][ T8263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  442.989893][ T8263] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  443.037062][ T8263] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  443.054042][ T8263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.087911][ T8263] spcp8x5 2-1:1.0: SPCP8x5 converter detected
[  443.126741][ T8263] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[  443.343036][T14358] loop8: detected capacity change from 0 to 128
[  443.428467][T14358] syz.8.2764: attempt to access beyond end of device
[  443.428467][T14358] loop8: rw=2049, sector=145, nr_sectors = 79 limit=128
[  443.505451][T14357] syz.8.2764: attempt to access beyond end of device
[  443.505451][T14357] loop8: rw=524288, sector=145, nr_sectors = 79 limit=128
[  443.548137][T14358] syz.8.2764: attempt to access beyond end of device
[  443.548137][T14358] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  443.570674][T14358] syz.8.2764: attempt to access beyond end of device
[  443.570674][T14358] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  443.571922][T14335] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  443.597316][T14358] syz.8.2764: attempt to access beyond end of device
[  443.597316][T14358] loop8: rw=0, sector=151, nr_sectors = 1 limit=128
[  443.614443][T14335] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  443.633139][T14335] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  443.808378][T14334] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  443.836007][ T5852] usb 2-1: USB disconnect, device number 2
[  443.863682][ T5852] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  443.887811][ T5852] spcp8x5 2-1:1.0: device disconnected
[  444.527279][T14394] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.2771'.
[  445.158872][ T5854] kernel write not supported for file /619/setgroups (pid: 5854 comm: kworker/1:4)
[  445.576442][ T1148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  446.091034][ T5851] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  446.278721][T14452] overlayfs: failed to resolve './file0': -2
[  446.341754][ T5851] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.394731][ T5851] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  446.464846][ T5851] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  446.529663][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.648251][ T5851] idmouse 9-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  446.735873][T14464] device-mapper: ioctl: Target spec extends beyond end of parameters
[  446.759396][T14464] device-mapper: ioctl: unable to find target
[  448.144797][T14492] jffs2: notice: (14492) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  448.259452][ T8263] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  448.452757][ T8263] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  448.475812][ T8263] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  448.518815][ T8263] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  448.543742][ T8263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.568196][ T8263] usb 2-1: Product: syz
[  448.575321][ T8263] usb 2-1: Manufacturer: syz
[  448.580586][ T8263] usb 2-1: SerialNumber: syz
[  448.593781][ T8263] usb 2-1: config 0 descriptor??
[  448.619869][ T8263] gspca_main: sunplus-2.14.0 probing 055f:c630
[  448.696263][ T5854] usb 9-1: USB disconnect, device number 13
[  448.710494][ T5854] idmouse 9-1:1.0: disconnected
[  448.911581][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2801'.
[  448.927450][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2801'.
[  449.856619][ T8263] gspca_sunplus: reg_r err -71
[  449.867414][ T8263] sunplus: probe of 2-1:0.0 failed with error -71
[  449.886882][ T8263] usb 2-1: USB disconnect, device number 3
[  449.912575][ T5786] udevd[5786]: setting mode of /dev/bus/usb/002/003 to 020664 failed: No such file or directory
[  449.947385][ T5786] udevd[5786]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory
[  450.689667][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  451.390781][T14567] loop1: detected capacity change from 0 to 1024
[  451.404375][T14567] EXT4-fs: Ignoring removed mblk_io_submit option
[  451.450661][T14567] EXT4-fs (loop1): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  451.512348][T14567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.721321][T14567] loop1: detected capacity change from 1024 to 64
[  451.751525][T14577] syz.1.2808: attempt to access beyond end of device
[  451.751525][T14577] loop1: rw=2049, sector=224, nr_sectors = 2 limit=64
[  451.820008][T14577] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 112)
[  451.848387][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2812'.
[  451.859245][T14580] loop8: detected capacity change from 0 to 4096
[  451.876711][T14577] Buffer I/O error on device loop1, logical block 112
[  451.980993][T14583] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  452.045904][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  452.085150][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  452.118969][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  452.152283][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  452.200789][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  452.245460][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  452.261455][T14580] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean
[  452.301271][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  452.343924][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  452.387619][T13721] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  453.081215][T13721] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.133698][T14612] 9p: Unknown uid 00000000004294967295
[  453.143126][T14572] kmmpd-loop1: attempt to access beyond end of device
[  453.143126][T14572] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64
[  453.196565][T14572] Buffer I/O error on dev loop1, logical block 64, lost sync page write
[  453.284287][T14614] use of bytesused == 0 is deprecated and will be removed in the future,
[  453.304366][T14614] use the actual size instead.
[  453.328587][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.479569][ T1148] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa
[  453.618901][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.793009][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.015084][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.638967][T14634] loop8: detected capacity change from 0 to 40427
[  454.721285][T14634] F2FS-fs (loop8): invalid crc value
[  454.775990][T14634] F2FS-fs (loop8): Found nat_bits in checkpoint
[  454.974096][T14655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  454.996279][T14655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  455.022281][T14634] F2FS-fs (loop8): Start checkpoint disabled!
[  455.048299][T14655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  455.089628][T14655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  455.102749][T14655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  455.117342][T14655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  455.189651][T14634] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  455.394034][T14660] clocksource: Switched to clocksource acpi_pm
[  455.395453][T14653] rxe_eth0 speed is unknown, defaulting to 1000
[  455.416367][T14660] clocksource: Switched to clocksource tsc
[  455.582042][T14634] syz.8.2834: attempt to access beyond end of device
[  455.582042][T14634] loop8: rw=0, sector=49152, nr_sectors = 8 limit=40427
[  455.875892][T14667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  456.060177][ T4703] kworker/u4:9: attempt to access beyond end of device
[  456.060177][ T4703] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  456.106583][ T4703] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  456.144510][ T4703] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  457.169597][ T5801] Bluetooth: hci2: command tx timeout
[  457.299655][T14680] loop2: detected capacity change from 0 to 4096
[  457.419522][ T5775] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  457.614559][T14653] chnl_net:caif_netlink_parms(): no params data found
[  457.634005][   T28] audit: type=1800 audit(1700000193.580:88): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2836" name="file1" dev="loop2" ino=33 res=0 errno=0
[  457.648709][ T5775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.717626][ T5775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.749687][ T5775] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  457.758960][ T5775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.817596][ T5775] usb 9-1: config 0 descriptor??
[  457.963423][   T11] hsr_slave_0: left promiscuous mode
[  457.997456][   T11] hsr_slave_1: left promiscuous mode
[  458.007791][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  458.038160][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  458.080545][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  458.088456][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  458.126457][   T11] bridge_slave_1: left allmulticast mode
[  458.139466][   T11] bridge_slave_1: left promiscuous mode
[  458.145481][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.182569][   T11] bridge_slave_0: left allmulticast mode
[  458.199533][   T11] bridge_slave_0: left promiscuous mode
[  458.205531][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.270367][ T5775] savu 0003:1E7D:2D5A.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  458.455978][   T11] veth1_macvtap: left promiscuous mode
[  458.491800][   T11] veth0_macvtap: left promiscuous mode
[  458.498129][   T11] veth1_vlan: left promiscuous mode
[  458.519994][   T11] veth0_vlan: left promiscuous mode
[  458.568640][ T5775] usb 9-1: USB disconnect, device number 14
[  459.249625][ T5801] Bluetooth: hci2: command tx timeout
[  459.321193][   T27] IPVS: starting estimator thread 0...
[  459.442697][T14717] IPVS: using max 16 ests per chain, 38400 per kthread
[  460.256265][T14746] loop8: detected capacity change from 0 to 128
[  460.288671][T14746] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  460.329481][T14746] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.843914][T10626] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  461.048470][   T11] team0 (unregistering): Port device team_slave_1 removed
[  461.127229][   T11] team0 (unregistering): Port device team_slave_0 removed
[  461.197027][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.275445][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.337454][ T5801] Bluetooth: hci2: command tx timeout
[  461.884212][T14759] ALSA: seq fatal error: cannot create timer (-22)
[  461.974095][   T11] bond0 (unregistering): Released all slaves
[  462.347236][T14653] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.371669][T14653] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.378979][T14653] bridge_slave_0: entered allmulticast mode
[  462.410982][T14653] bridge_slave_0: entered promiscuous mode
[  462.449207][T14653] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.468553][T14653] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.509669][T14653] bridge_slave_1: entered allmulticast mode
[  462.530595][T14653] bridge_slave_1: entered promiscuous mode
[  462.746009][T14653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.762385][T14653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.044505][T14653] team0: Port device team_slave_0 added
[  463.075487][T14653] team0: Port device team_slave_1 added
[  463.170518][T14653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.177894][T14653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.218813][T14653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.305981][T14653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.324400][T14653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.410081][ T5801] Bluetooth: hci2: command tx timeout
[  463.420163][T14653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.651117][T14653] hsr_slave_0: entered promiscuous mode
[  463.678611][T14653] hsr_slave_1: entered promiscuous mode
[  463.699758][T14653] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  463.715225][T14653] Cannot create hsr debugfs directory
[  465.085544][T14653] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  465.120043][T14653] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  465.155372][T14653] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  465.209069][T14653] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  465.411763][T14854] FAULT_INJECTION: forcing a failure.
[  465.411763][T14854] name failslab, interval 1, probability 0, space 0, times 0
[  465.451803][T14854] CPU: 0 PID: 14854 Comm: syz.7.2876 Not tainted syzkaller #0
[  465.459351][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  465.469453][T14854] Call Trace:
[  465.472772][T14854]  <TASK>
[  465.475745][T14854]  dump_stack_lvl+0x18c/0x250
[  465.480488][T14854]  ? show_regs_print_info+0x20/0x20
[  465.485748][T14854]  ? load_image+0x420/0x420
[  465.490313][T14854]  ? __lock_acquire+0x7eb0/0x7eb0
[  465.495413][T14854]  should_fail_ex+0x394/0x4c0
[  465.500154][T14854]  should_failslab+0x9/0x20
[  465.504775][T14854]  slab_pre_alloc_hook+0x59/0x300
[  465.509825][T14854]  kmem_cache_alloc+0x5a/0x2d0
[  465.514603][T14854]  ? security_inode_alloc+0x34/0x110
[  465.519915][T14854]  security_inode_alloc+0x34/0x110
[  465.525044][T14854]  inode_init_always+0x914/0xc90
[  465.530009][T14854]  new_inode_pseudo+0x95/0x1d0
[  465.534791][T14854]  __ns_get_path+0x249/0x5f0
[  465.539497][T14854]  ns_get_path+0x54/0x90
[  465.543764][T14854]  proc_ns_get_link+0x16c/0x2d0
[  465.548631][T14854]  ? proc_ns_instantiate+0xf0/0xf0
[  465.553761][T14854]  ? bpf_lsm_inode_follow_link+0x9/0x10
[  465.559353][T14854]  ? security_inode_follow_link+0xb7/0x100
[  465.565206][T14854]  ? proc_ns_instantiate+0xf0/0xf0
[  465.570334][T14854]  pick_link+0x666/0xdd0
[  465.574719][T14854]  step_into+0xc18/0xee0
[  465.578996][T14854]  ? rcu_read_lock_any_held+0xb4/0x140
[  465.584515][T14854]  ? rcu_read_lock_bh_held+0x100/0x100
[  465.590082][T14854]  ? set_root+0x3a0/0x3a0
[  465.594430][T14854]  ? d_splice_alias+0x114/0x330
[  465.599318][T14854]  path_openat+0x1656/0x3270
[  465.603985][T14854]  ? do_filp_open+0x430/0x430
[  465.608708][T14854]  do_filp_open+0x1f2/0x430
[  465.613239][T14854]  ? vfs_tmpfile+0x620/0x620
[  465.617883][T14854]  ? _raw_spin_unlock+0x28/0x40
[  465.622755][T14854]  ? alloc_fd+0x590/0x640
[  465.627111][T14854]  do_sys_openat2+0x134/0x1d0
[  465.631833][T14854]  ? do_sys_open+0xe0/0xe0
[  465.636268][T14854]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  465.642275][T14854]  ? lock_chain_count+0x20/0x20
[  465.647144][T14854]  __x64_sys_openat+0x139/0x160
[  465.652104][T14854]  do_syscall_64+0x55/0xb0
[  465.656539][T14854]  ? clear_bhb_loop+0x40/0x90
[  465.661238][T14854]  ? clear_bhb_loop+0x40/0x90
[  465.665936][T14854]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  465.671863][T14854] RIP: 0033:0x7f2c1276974e
[  465.676290][T14854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  465.695940][T14854] RSP: 002b:00007f2c13610ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  465.704373][T14854] RAX: ffffffffffffffda RBX: 00007f2c136116c0 RCX: 00007f2c1276974e
[  465.712364][T14854] RDX: 0000000000000002 RSI: 00007f2c13610f90 RDI: ffffffffffffff9c
[  465.720436][T14854] RBP: 00007f2c12837f6d R08: 0000000000000000 R09: 0000000000000000
[  465.728509][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  465.736602][T14854] R13: 00007f2c12a26038 R14: 00007f2c12a25fa0 R15: 00007ffeeb312128
[  465.744606][T14854]  </TASK>
[  465.905228][T14653] 8021q: adding VLAN 0 to HW filter on device bond0
[  465.967301][T14653] 8021q: adding VLAN 0 to HW filter on device team0
[  466.040773][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.048058][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.147650][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.154921][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.875115][T14890] tipc: Started in network mode
[  466.886746][T14890] tipc: Node identity ac1414aa, cluster identity 4711
[  466.905582][T14890] tipc: New replicast peer: 172.20.20.187
[  466.919262][T14890] tipc: Enabled bearer <udp:syz0>, priority 10
[  466.965673][T14653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.970174][ T6633] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  467.132239][T14653] veth0_vlan: entered promiscuous mode
[  467.170791][ T6633] usb 3-1: Using ep0 maxpacket: 16
[  467.173536][T14653] veth1_vlan: entered promiscuous mode
[  467.197214][ T6633] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.239647][ T6633] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.260428][ T6633] usb 3-1: config 0 interface 0 has no altsetting 0
[  467.267123][ T6633] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  467.300662][ T6633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.316435][T14653] veth0_macvtap: entered promiscuous mode
[  467.343417][T14653] veth1_macvtap: entered promiscuous mode
[  467.358630][ T6633] usb 3-1: config 0 descriptor??
[  467.398479][T14653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.440101][T14653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.475157][T14653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.500371][T14653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.519615][T14653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  467.540009][T14653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.568203][T14653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.609069][T14653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.639432][T14653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.660856][T14653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.687986][T14653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.698851][T14653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  467.710241][T14653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  467.731865][T14653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.767023][T14653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.786991][T14653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.804024][T14653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.813373][ T5851] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  467.815290][ T6633] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[  467.828768][ T6633] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[  467.833594][T14653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.840882][ T6633] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[  467.856279][ T6633] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[  467.865058][ T6633] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[  467.876743][ T6633] mcp2221 0003:04D8:00DD.0018: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  468.023416][ T5851] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  468.037638][ T5851] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  468.048764][ T5852] tipc: Node number set to 2886997162
[  468.091474][ T5851] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  468.128184][ T5851] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  468.144741][ T5851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.147137][ T6633] usb 3-1: USB disconnect, device number 30
[  468.176281][ T5059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.225517][ T5059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.367643][ T5059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.387167][ T5059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.547978][T14925] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.653037][ T5851] cxacru 8-1:1.0: send of cm 0x91 failed (-71)
[  468.669728][ T5851] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  468.695115][ T5851] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  468.745001][ T5851] cxacru: probe of 8-1:1.0 failed with error -71
[  468.817639][ T5851] usb 8-1: USB disconnect, device number 14
[  469.334044][T14951] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  469.592012][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2907'.
[  469.605334][T14960] loop2: detected capacity change from 0 to 128
[  469.779272][ T5790] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  469.819264][ T5790] FAT-fs (loop2): Filesystem has been set read-only
[  470.223672][T14977] io-wq is not configured for unbound workers
[  470.530879][T14972] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.545826][T14972] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.699645][ T6633] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  470.894729][ T6633] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  470.944588][ T6633] usb 9-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  470.954295][ T6633] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.966434][T14972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.969613][ T6633] usb 9-1: config 0 descriptor??
[  471.027143][T14972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.405844][ T6633] uclogic 0003:5543:0003.0019: unknown main item tag 0x0
[  471.416797][ T6633] uclogic 0003:5543:0003.0019: unknown main item tag 0x0
[  471.434092][ T6633] uclogic 0003:5543:0003.0019: unknown main item tag 0x0
[  471.444098][ T6633] uclogic 0003:5543:0003.0019: unknown main item tag 0x0
[  471.452008][ T6633] uclogic 0003:5543:0003.0019: unknown main item tag 0x0
[  471.461168][ T6633] uclogic 0003:5543:0003.0019: No inputs registered, leaving
[  471.479694][ T6633] uclogic 0003:5543:0003.0019: hidraw0: USB HID v0.02 Device [HID 5543:0003] on usb-dummy_hcd.8-1/input0
[  471.605215][ T6633] usb 9-1: USB disconnect, device number 15
[  471.655424][T14972] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.666048][T14972] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.679173][T14972] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.690586][T14972] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.971263][ T5851] kernel write not supported for file bpf-prog (pid: 5851 comm: kworker/0:5)
[  472.029723][   T27] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  472.193012][T14996] fido_id[14996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  472.384705][T15008] loop3: detected capacity change from 0 to 512
[  472.412628][T15008] EXT4-fs: Ignoring removed mblk_io_submit option
[  472.455664][T15008] EXT4-fs (loop3): orphan cleanup on readonly fs
[  472.482941][T15008] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  472.566421][T15008] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2927: attempt to clear invalid blocks 2 len 1
[  472.663324][T15008] EXT4-fs (loop3): Remounting filesystem read-only
[  472.695484][T15008] EXT4-fs (loop3): 1 truncate cleaned up
[  472.724408][T15008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  472.840500][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2932'.
[  472.851358][T14653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.895562][T15020] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  472.923495][T15020] gretap0: entered promiscuous mode
[  472.945917][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2932'.
[  473.170066][ T5852] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  473.361599][ T5852] usb 8-1: config 1 interface 0 has no altsetting 0
[  473.397366][ T5852] usb 8-1: string descriptor 0 read error: -22
[  473.412690][ T5852] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[  473.431916][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.679684][ T5851] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  473.890866][ T5851] usb 4-1: Using ep0 maxpacket: 32
[  473.904523][ T5852] hid_parser_main: 34 callbacks suppressed
[  473.904547][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.931319][ T5851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  473.945325][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.955451][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.965318][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.976091][ T5851] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  473.986080][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  473.988554][T15057] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  473.994467][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.994502][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.994529][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.994556][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.994583][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  473.994610][ T5852] steelseries 0003:1038:1410.001B: unknown main item tag 0x0
[  474.005725][ T5851] usb 4-1: Product: syz
[  474.108465][ T5852] steelseries 0003:1038:1410.001B: missing HID_OUTPUT_REPORT 0
[  474.156452][ T5852] usb 8-1: USB disconnect, device number 15
[  474.183830][ T5851] usb 4-1: Manufacturer: syz
[  474.203641][ T5851] usb 4-1: SerialNumber: syz
[  474.247885][ T5851] usb 4-1: config 0 descriptor??
[  474.258448][T15040] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  474.280591][ T5851] hub 4-1:0.0: bad descriptor, ignoring hub
[  474.286581][ T5851] hub: probe of 4-1:0.0 failed with error -5
[  474.736603][T15078] loop8: detected capacity change from 0 to 4096
[  474.753477][T15078] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512).
[  474.888658][T15078] ntfs3: loop8: ino=19, mi_enum_attr
[  474.929543][T15078] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  474.959561][T15078] ntfs3: loop8: ino=1a, mi_enum_attr
[  474.969760][T15078] ntfs3: loop8: ino=1a, mi_enum_attr
[  474.995798][T15078] ntfs3: loop8: Failed to initialize $Extend/$Reparse.
[  475.280716][ T6633] usb 4-1: USB disconnect, device number 4
[  475.470318][T15093] loop8: detected capacity change from 0 to 2048
[  475.535159][T15096] loop2: detected capacity change from 0 to 512
[  475.577984][T15098] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  475.591704][T15096] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  475.629250][T15096] EXT4-fs (loop2): 1 truncate cleaned up
[  475.651210][T15096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.879134][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.156029][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2957'.
[  476.238083][T15114] gretap0: entered promiscuous mode
[  476.280161][T15114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.330329][T15114] Cannot create hsr debugfs directory
[  476.337834][T15114] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  476.370597][T15114] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  476.399904][T15114] hsr0: entered promiscuous mode
[  476.570130][T15098] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  476.589043][T15098] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  476.655890][T15098] Remounting filesystem read-only
[  476.668423][   T50] NILFS (loop8): discard dirty page: offset=4096, ino=6
[  476.681610][   T50] NILFS (loop8): discard dirty page: offset=0, ino=2
[  476.688460][   T50] NILFS (loop8): discard dirty block: blocknr=18, size=1024
[  476.722494][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  476.750078][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  476.769549][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  476.778516][   T50] NILFS (loop8): discard dirty page: offset=16777216, ino=18
[  476.801898][   T50] NILFS (loop8): discard dirty block: blocknr=0, size=1024
[  476.809195][   T50] NILFS (loop8): discard dirty block: blocknr=0, size=1024
[  476.829611][   T50] NILFS (loop8): discard dirty block: blocknr=0, size=1024
[  476.836986][   T50] NILFS (loop8): discard dirty block: blocknr=0, size=1024
[  476.854291][   T50] NILFS (loop8): discard dirty page: offset=0, ino=3
[  476.869905][   T50] NILFS (loop8): discard dirty page: offset=65536, ino=3
[  476.877291][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  476.900636][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  476.934701][   T50] NILFS (loop8): discard dirty block: blocknr=0, size=1024
[  476.953014][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  476.974815][   T50] NILFS (loop8): discard dirty page: offset=196608, ino=3
[  476.979796][ T6633] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  476.982121][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  476.998407][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  477.007747][   T50] NILFS (loop8): discard dirty block: blocknr=49, size=1024
[  477.015210][   T50] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  477.051294][T10626] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  477.124086][T10626] NILFS (loop8): discard dirty page: offset=0, ino=6
[  477.151134][T10626] NILFS (loop8): discard dirty page: offset=0, ino=5
[  477.168880][T10626] NILFS (loop8): discard dirty block: blocknr=41, size=1024
[  477.180283][T10626] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  477.192113][ T6633] usb 4-1: Using ep0 maxpacket: 32
[  477.209419][ T6633] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  477.220877][T10626] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  477.231484][ T6633] usb 4-1: config 0 has no interface number 0
[  477.239710][T15137] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2964'.
[  477.250507][ T6633] usb 4-1: config 0 interface 12 has no altsetting 0
[  477.257464][T10626] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  477.271323][ T6633] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  477.287353][T10626] NILFS (loop8): discard dirty page: offset=0, ino=4
[  477.294324][ T6633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.316058][T10626] NILFS (loop8): discard dirty block: blocknr=40, size=1024
[  477.330209][ T6633] usb 4-1: Product: syz
[  477.334437][ T6633] usb 4-1: Manufacturer: syz
[  477.340064][T10626] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  477.349051][T10626] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  477.358753][ T6633] usb 4-1: SerialNumber: syz
[  477.371142][T10626] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024
[  477.397019][ T6633] usb 4-1: config 0 descriptor??
[  477.809677][   T27] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  478.002568][   T27] usb 9-1: Using ep0 maxpacket: 8
[  478.022365][   T27] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  478.042377][   T27] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  478.073868][   T27] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  478.089082][   T27] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  478.099875][   T27] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  478.113504][   T27] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  478.129548][   T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.422756][   T27] usb 9-1: GET_CAPABILITIES returned 0
[  478.435720][   T27] usbtmc 9-1:16.0: can't read capabilities
[  478.469507][ T5775] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  478.669478][ T5775] usb 3-1: Using ep0 maxpacket: 8
[  478.678447][   T27] usb 9-1: USB disconnect, device number 16
[  478.697165][ T5775] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  478.700817][ T6633] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71
[  478.741642][ T5775] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  478.754810][ T6633] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  478.760188][ T5775] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  478.773929][ T5775] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  478.786643][ T5775] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  478.791870][ T6633] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  478.796135][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.834824][ T6633] f81534: probe of 4-1:0.12 failed with error -71
[  478.850251][ T5775] hub 3-1:1.0: bad descriptor, ignoring hub
[  478.856258][ T5775] hub: probe of 3-1:1.0 failed with error -5
[  478.867495][ T6633] usb 4-1: USB disconnect, device number 5
[  478.890621][ T5775] cdc_wdm 3-1:1.0: skipping garbage
[  478.901825][ T5775] cdc_wdm 3-1:1.0: skipping garbage
[  478.918454][ T5775] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  478.956733][ T5775] cdc_wdm 3-1:1.0: Unknown control protocol
[  479.090190][   T27] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  479.291929][   T27] usb 9-1: Using ep0 maxpacket: 8
[  479.316581][   T27] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  479.319493][ T5775] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  479.329075][   T27] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  479.365783][   T27] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  479.397056][   T27] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  479.417677][   T27] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  479.431245][ T6633] usb 3-1: USB disconnect, device number 31
[  479.450299][   T27] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  479.469449][   T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.560230][ T5775] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[  479.581532][ T5775] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.726232][   T27] usb 9-1: usb_control_msg returned -71
[  479.738122][   T27] usbtmc 9-1:16.0: can't read capabilities
[  479.776930][   T27] usb 9-1: USB disconnect, device number 17
[  479.837783][T15191] loop3: detected capacity change from 0 to 32768
[  479.904956][T15191]  loop3: p1 p3 < >
[  480.078889][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/666.tmp-b7:3' failed: Read-only file system
[  480.153831][T15202] loop3: detected capacity change from 0 to 256
[  480.228061][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/666.tmp-b7:3' failed: Read-only file system
[  480.266871][T15202] FAT-fs (loop3): Directory bread(block 64) failed
[  480.287684][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  480.297667][T15202] FAT-fs (loop3): Directory bread(block 65) failed
[  480.301673][T12566] udevd[12566]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  480.305058][T15202] FAT-fs (loop3): Directory bread(block 66) failed
[  480.368670][T15202] FAT-fs (loop3): Directory bread(block 67) failed
[  480.400679][T15202] FAT-fs (loop3): Directory bread(block 68) failed
[  480.407294][T15202] FAT-fs (loop3): Directory bread(block 69) failed
[  480.436991][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/666.tmp-b7:3' failed: Read-only file system
[  480.460650][T15202] FAT-fs (loop3): Directory bread(block 70) failed
[  480.467267][T15202] FAT-fs (loop3): Directory bread(block 71) failed
[  480.510101][T15202] FAT-fs (loop3): Directory bread(block 72) failed
[  480.516719][T15202] FAT-fs (loop3): Directory bread(block 73) failed
[  480.581863][T15199] loop2: detected capacity change from 0 to 32768
[  480.592757][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/666.tmp-b7:3' failed: Read-only file system
[  480.656360][T15199] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  480.666638][ T5775] usb 8-1: ATUSB: AT86RF231 version 1
[  480.773365][ T5786] udevd[5786]: symlink '../../loop3' '/dev/disk/by-diskseq/668.tmp-b7:3' failed: Read-only file system
[  480.864133][T12566] udevd[12566]: symlink '../../loop2' '/dev/disk/by-diskseq/669.tmp-b7:2' failed: Read-only file system
[  480.881468][T15199] XFS (loop2): Ending clean mount
[  480.888472][ T5775] usb 8-1: Firmware version (0.0) predates our first public release.
[  480.902477][T12566] udevd[12566]: symlink '../../loop2' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:2' failed: Read-only file system
[  480.919720][ T5775] usb 8-1: Please update to version 0.2 or newer
[  480.976605][T12566] udevd[12566]: symlink '../../loop3' '/dev/disk/by-diskseq/668.tmp-b7:3' failed: Read-only file system
[  481.041313][   T28] audit: type=1804 audit(1700000216.990:89): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2973" name="/newroot/759/file1/file1" dev="loop2" ino=4422 res=1 errno=0
[  481.109043][ T5775] usb 8-1: USB disconnect, device number 16
[  481.162407][T15223] FAULT_INJECTION: forcing a failure.
[  481.162407][T15223] name fail_futex, interval 1, probability 0, space 0, times 1
[  481.180318][T15223] CPU: 1 PID: 15223 Comm: syz.3.2976 Not tainted syzkaller #0
[  481.187864][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  481.188921][ T5790] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  481.197934][T15223] Call Trace:
[  481.197947][T15223]  <TASK>
[  481.197957][T15223]  dump_stack_lvl+0x18c/0x250
[  481.197994][T15223]  ? show_regs_print_info+0x20/0x20
[  481.198022][T15223]  ? load_image+0x420/0x420
[  481.227185][T15223]  ? kasan_quarantine_put+0xd8/0x220
[  481.232506][T15223]  should_fail_ex+0x394/0x4c0
[  481.237206][T15223]  get_futex_key+0x134/0xf40
[  481.241845][T15223]  ? fcntl_setlk+0xc05/0x1070
[  481.246541][T15223]  ? futex_setup_timer+0xc0/0xc0
[  481.251670][T15223]  futex_wake+0x127/0x4f0
[  481.256014][T15223]  ? futex_wake_mark+0x150/0x150
[  481.260968][T15223]  ? vfs_lock_file+0x110/0x110
[  481.265754][T15223]  ? __might_fault+0xaa/0x120
[  481.270447][T15223]  do_futex+0x35d/0x3e0
[  481.274618][T15223]  ? __ia32_sys_get_robust_list+0x110/0x110
[  481.280536][T15223]  __se_sys_futex+0x3a9/0x440
[  481.285230][T15223]  ? __x64_sys_futex+0xf0/0xf0
[  481.290009][T15223]  ? __x64_sys_futex+0x21/0xf0
[  481.294787][T15223]  do_syscall_64+0x55/0xb0
[  481.299213][T15223]  ? clear_bhb_loop+0x40/0x90
[  481.303905][T15223]  ? clear_bhb_loop+0x40/0x90
[  481.308602][T15223]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  481.314508][T15223] RIP: 0033:0x7fe3727a8f19
[  481.318937][T15223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.338558][T15223] RSP: 002b:00007fe3735800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  481.346990][T15223] RAX: ffffffffffffffda RBX: 00007fe372a25fa8 RCX: 00007fe3727a8f19
[  481.354972][T15223] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe372a25fac
[  481.362956][T15223] RBP: 00007fe372a25fa0 R08: 0000000000745d1e R09: 0000000000000000
[  481.370947][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  481.378927][T15223] R13: 00007fe372a26038 R14: 00007ffeed05de10 R15: 00007ffeed05def8
[  481.386921][T15223]  </TASK>
[  482.097400][T15245] loop3: detected capacity change from 0 to 2048
[  482.177782][T15245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.231877][T15245] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  482.253310][T15245] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  482.266649][T15245] EXT4-fs (loop3): This should not happen!! Data will be lost
[  482.266649][T15245] 
[  482.276647][T15245] EXT4-fs (loop3): Total free blocks count 0
[  482.284163][T15245] EXT4-fs (loop3): Free/Dirty block details
[  482.290366][T15245] EXT4-fs (loop3): free_blocks=4096
[  482.295870][T15245] EXT4-fs (loop3): dirty_blocks=48
[  482.301244][T15245] EXT4-fs (loop3): Block reservation details
[  482.307343][T15245] EXT4-fs (loop3): i_reserved_data_blocks=3
[  482.360648][T15245] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  482.674866][T15260] loop3: detected capacity change from 0 to 1024
[  482.710871][T15260] EXT4-fs: Ignoring removed mblk_io_submit option
[  482.756987][T15260] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  482.806264][T15260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.059933][T15260] loop3: detected capacity change from 1024 to 64
[  483.198666][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.241419][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2987'.
[  483.251796][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.286496][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.335187][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.378961][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.404794][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.448268][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.467407][T15291] loop2: detected capacity change from 0 to 512
[  483.533769][T15291] EXT4-fs (loop2): Test dummy encryption mode enabled
[  483.541444][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.560142][T15291] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  483.587957][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.620738][T15291] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.2992: bad orphan inode 131083
[  483.633274][T14653] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  483.710959][T15291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.018462][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.294680][T14653] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.373129][T15266] kmmpd-loop3: attempt to access beyond end of device
[  484.373129][T15266] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64
[  484.426390][T15266] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  484.551537][T15317] netlink: 'syz.8.3000': attribute type 12 has an invalid length.
[  485.843767][T14655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  485.859263][T14655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  485.876125][T14655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  485.885353][T14655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  485.894788][T14655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  485.902359][T14655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  486.066542][T15351] rxe_eth0 speed is unknown, defaulting to 1000
[  486.219646][    T8] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  486.440030][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  486.468791][    T8] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  486.490514][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.530615][    T8] usb 3-1: config 0 descriptor??
[  487.024063][    T8] hid_parser_main: 3993 callbacks suppressed
[  487.024087][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.065194][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.099839][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.124649][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.175751][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.189915][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.228022][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.250964][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.265942][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.300677][    T8] uclogic 0003:5543:0003.001C: unknown main item tag 0x0
[  487.310649][    T8] uclogic 0003:5543:0003.001C: No inputs registered, leaving
[  487.367357][    T8] uclogic 0003:5543:0003.001C: hidraw0: USB HID v0.02 Device [HID 5543:0003] on usb-dummy_hcd.2-1/input0
[  487.394059][    T8] usb 3-1: USB disconnect, device number 32
[  487.621077][T15387] fido_id[15387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  487.709217][   T50] hsr_slave_0: left promiscuous mode
[  487.715497][   T50] hsr_slave_1: left promiscuous mode
[  487.735189][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.748933][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.768770][   T50] bridge_slave_1: left allmulticast mode
[  487.782952][   T50] bridge_slave_1: left promiscuous mode
[  487.795432][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.816528][   T50] bridge_slave_0: left allmulticast mode
[  487.829625][   T50] bridge_slave_0: left promiscuous mode
[  487.835365][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.064939][T14655] Bluetooth: hci2: command tx timeout
[  488.281264][T15409] loop8: detected capacity change from 0 to 512
[  488.357745][ T5786] udevd[5786]: symlink '../../loop8' '/dev/disk/by-diskseq/678.tmp-b7:8' failed: Read-only file system
[  488.381252][ T5786] udevd[5786]: symlink '../../loop8' '/dev/disk/by-label/SYZKALLER.tmp-b7:8' failed: Read-only file system
[  488.417486][ T5786] udevd[5786]: symlink '../../loop8' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:8' failed: Read-only file system
[  488.419522][T10626] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  488.456748][T10626] FAT-fs (loop8): Filesystem has been set read-only
[  488.473754][T10626] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  488.508234][ T5786] udevd[5786]: symlink '../../loop8' '/dev/disk/by-diskseq/678.tmp-b7:8' failed: Read-only file system
[  488.561573][ T5786] udevd[5786]: symlink '../../loop8' '/dev/disk/by-label/SYZKALLER.tmp-b7:8' failed: Read-only file system
[  488.600335][ T5786] udevd[5786]: symlink '../../loop8' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:8' failed: Read-only file system
[  489.308786][   T50] team0 (unregistering): Port device team_slave_1 removed
[  489.396022][   T50] team0 (unregistering): Port device team_slave_0 removed
[  489.478087][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  489.558121][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.129532][T14655] Bluetooth: hci2: command tx timeout
[  490.218327][   T50] bond0 (unregistering): Released all slaves
[  490.369922][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  490.447520][T15351] chnl_net:caif_netlink_parms(): no params data found
[  490.745342][T12566] udevd[12566]: symlink '../../loop8' '/dev/disk/by-diskseq/678.tmp-b7:8' failed: Read-only file system
[  490.824612][ T5786] udevd[5786]: symlink '../../loop8' '/dev/disk/by-diskseq/678.tmp-b7:8' failed: Read-only file system
[  490.934218][T15351] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.001180][T15351] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.008518][T15351] bridge_slave_0: entered allmulticast mode
[  491.037717][T15351] bridge_slave_0: entered promiscuous mode
[  491.088431][T15351] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.109710][T15351] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.117017][T15351] bridge_slave_1: entered allmulticast mode
[  491.161179][T15351] bridge_slave_1: entered promiscuous mode
[  491.311902][T15351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  491.364902][T15351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  491.459799][T15351] team0: Port device team_slave_0 added
[  491.476690][T15351] team0: Port device team_slave_1 added
[  491.590193][T15351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.606978][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.656076][T15351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.700497][T15351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.714351][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.784544][T15351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.893191][T15351] hsr_slave_0: entered promiscuous mode
[  491.901765][T15351] hsr_slave_1: entered promiscuous mode
[  491.915077][T15351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  491.933195][T15351] Cannot create hsr debugfs directory
[  491.938937][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  491.962788][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  491.972408][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  491.997202][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  492.005335][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  492.021058][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  492.218977][T14655] Bluetooth: hci2: command tx timeout
[  492.237030][   T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.436026][   T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.850241][   T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.885169][T15450] rxe_eth0 speed is unknown, defaulting to 1000
[  493.116670][   T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.530327][   T28] audit: type=1326 audit(1700000229.490:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15496 comm="syz.2.3049" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4581a8f19 code=0x0
[  494.130422][T14655] Bluetooth: hci0: command tx timeout
[  494.215878][T15450] chnl_net:caif_netlink_parms(): no params data found
[  494.289805][T14655] Bluetooth: hci2: command tx timeout
[  494.413866][T15450] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.422642][T15450] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.431653][T15450] bridge_slave_0: entered allmulticast mode
[  494.439839][T15450] bridge_slave_0: entered promiscuous mode
[  494.449129][T15450] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.456814][T15450] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.469667][T15450] bridge_slave_1: entered allmulticast mode
[  494.477262][T15450] bridge_slave_1: entered promiscuous mode
[  494.564274][T15450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  494.604940][T15450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.737815][T15450] team0: Port device team_slave_0 added
[  494.765442][T15450] team0: Port device team_slave_1 added
[  494.891683][T15450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.898725][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.940948][T15450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.990951][T15450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  495.006553][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.051397][T15450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  495.226868][T15450] hsr_slave_0: entered promiscuous mode
[  495.275580][T15450] hsr_slave_1: entered promiscuous mode
[  495.306842][T15450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  495.327107][T15450] Cannot create hsr debugfs directory
[  496.209826][T14655] Bluetooth: hci0: command tx timeout
[  496.467701][   T60] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.482542][   T60] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.622641][   T60] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.649423][   T60] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.964895][   T60] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.975530][   T60] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.080583][   T60] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode
[  497.094433][   T60] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.106689][   T60] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.471793][   T60] tipc: Disabling bearer <udp:s>
[  497.484607][   T60] tipc: Left network mode
[  497.830157][T15504] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  498.049771][T15504] usb 3-1: Using ep0 maxpacket: 32
[  498.064353][T15504] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  498.079564][T15504] usb 3-1: config 0 has no interface number 0
[  498.090434][T15504] usb 3-1: config 0 interface 12 has no altsetting 0
[  498.134890][T15504] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  498.145473][T15504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.154010][T15504] usb 3-1: Product: syz
[  498.158311][T15504] usb 3-1: Manufacturer: syz
[  498.171811][T15504] usb 3-1: SerialNumber: syz
[  498.181726][T15504] usb 3-1: config 0 descriptor??
[  498.300539][T14655] Bluetooth: hci0: command tx timeout
[  498.874347][T15630] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  498.894536][T15630] xt_recent: Need "+ip", "-ip" or "/"
[  499.126175][ T9476] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.163671][   T60] gretap0 (unregistering): left promiscuous mode
[  499.446271][T15504] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  499.490152][T15504] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  499.497551][T15504] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  499.513147][T15504] f81534: probe of 3-1:0.12 failed with error -71
[  499.548571][T15504] usb 3-1: USB disconnect, device number 33
[  500.369544][T14655] Bluetooth: hci0: command tx timeout
[  500.467747][T15351] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  500.738297][T15351] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  500.836055][T15351] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  500.978083][T15351] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  501.069515][   T60] hsr_slave_0: left promiscuous mode
[  501.081809][   T60] hsr_slave_1: left promiscuous mode
[  501.110809][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.118311][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.160732][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.168238][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.200378][   T60] bridge_slave_1: left allmulticast mode
[  501.206106][   T60] bridge_slave_1: left promiscuous mode
[  501.229659][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.244905][   T60] bridge_slave_0: left allmulticast mode
[  501.260323][   T60] bridge_slave_0: left promiscuous mode
[  501.266222][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.296300][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  501.309293][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  501.338904][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  501.352853][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  501.377719][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  501.391499][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  501.400485][   T60] hsr_slave_0: left promiscuous mode
[  501.453820][   T60] hsr_slave_1: left promiscuous mode
[  501.475311][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.483245][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.498546][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.506630][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.515819][   T60] bridge_slave_1: left allmulticast mode
[  501.521905][   T60] bridge_slave_1: left promiscuous mode
[  501.527707][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.538193][   T60] bridge_slave_0: left allmulticast mode
[  501.544791][   T60] bridge_slave_0: left promiscuous mode
[  501.551490][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.665214][   T60] veth1_macvtap: left promiscuous mode
[  501.680379][   T60] veth0_macvtap: left promiscuous mode
[  501.686137][   T60] veth1_vlan: left promiscuous mode
[  501.700769][   T60] veth0_vlan: left promiscuous mode
[  501.715324][   T60] veth1_macvtap: left promiscuous mode
[  501.724671][   T60] veth0_macvtap: left promiscuous mode
[  501.732012][   T60] veth1_vlan: left promiscuous mode
[  501.737449][   T60] veth0_vlan: left promiscuous mode
[  501.896453][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.909863][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  503.064089][   T60] team0 (unregistering): Port device team_slave_1 removed
[  503.144952][   T60] team0 (unregistering): Port device team_slave_0 removed
[  503.221699][   T60] . (unregistering): (slave bond_slave_1): Releasing backup interface
[  503.298592][   T60] . (unregistering): (slave bond_slave_0): Releasing backup interface
[  503.492912][T14655] Bluetooth: hci1: command tx timeout
[  503.926759][   T60] . (unregistering): Released all slaves
[  504.867388][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'.
[  505.301262][   T60] team0 (unregistering): Port device team_slave_1 removed
[  505.395280][   T60] team0 (unregistering): Port device team_slave_0 removed
[  505.473325][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  505.558850][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  505.597190][T14655] Bluetooth: hci1: command tx timeout
[  506.233242][   T60] bond0 (unregistering): Released all slaves
[  506.349073][T15688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3092'.
[  506.373599][T15685] netlink: 'syz.2.3092': attribute type 9 has an invalid length.
[  506.389429][T15685] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3092'.
[  506.535615][T15670] rxe_eth0 speed is unknown, defaulting to 1000
[  506.877832][T15351] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.083282][T15450] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  507.174659][T15450] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  507.244103][T15450] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  507.275718][T15450] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  507.305881][T15351] 8021q: adding VLAN 0 to HW filter on device team0
[  507.382941][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.390201][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.514737][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.521960][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.659705][T14655] Bluetooth: hci1: command tx timeout
[  507.897104][   T60] IPVS: stop unused estimator thread 0...
[  507.913861][T15670] chnl_net:caif_netlink_parms(): no params data found
[  508.176208][T15450] 8021q: adding VLAN 0 to HW filter on device bond0
[  508.256547][T15450] 8021q: adding VLAN 0 to HW filter on device team0
[  508.282043][T15732] loop2: detected capacity change from 0 to 8192
[  508.295338][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.302542][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.328952][T15732] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  508.387703][T15732] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  508.436995][T15732] REISERFS (device loop2): using ordered data mode
[  508.466072][T15732] reiserfs: using flush barriers
[  508.476874][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.484384][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.510354][T15732] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  508.537930][T15732] REISERFS (device loop2): checking transaction log (loop2)
[  508.566030][T15732] REISERFS (device loop2): Using r5 hash to sort names
[  508.578015][T15732] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  508.632550][   T60] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.686427][T15670] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.715465][T15670] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.728611][T15670] bridge_slave_0: entered allmulticast mode
[  508.736809][T15670] bridge_slave_0: entered promiscuous mode
[  508.765930][T15739] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2381, free_space(entry_count) 2
[  508.792984][T15739] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 556. Fsck?
[  508.803805][T15739] REISERFS (device loop2): Remounting filesystem read-only
[  508.817695][T15739] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data
[  508.823148][   T60] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.858606][T15670] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.870741][T15670] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.878128][T15670] bridge_slave_1: entered allmulticast mode
[  508.886467][T15670] bridge_slave_1: entered promiscuous mode
[  508.939102][T15670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.035333][   T60] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.058994][T15670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.072444][T15742] FAULT_INJECTION: forcing a failure.
[  509.072444][T15742] name failslab, interval 1, probability 0, space 0, times 0
[  509.086037][T15742] CPU: 1 PID: 15742 Comm: syz.2.3101 Not tainted syzkaller #0
[  509.093561][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  509.102783][T15351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.103637][T15742] Call Trace:
[  509.113755][T15742]  <TASK>
[  509.116726][T15742]  dump_stack_lvl+0x18c/0x250
[  509.121472][T15742]  ? show_regs_print_info+0x20/0x20
[  509.126828][T15742]  ? load_image+0x420/0x420
[  509.131401][T15742]  should_fail_ex+0x394/0x4c0
[  509.136139][T15742]  should_failslab+0x9/0x20
[  509.140687][T15742]  slab_pre_alloc_hook+0x59/0x300
[  509.145760][T15742]  ? skb_orphan_partial+0x1e3/0x4e0
[  509.151050][T15742]  kmem_cache_alloc+0x5a/0x2d0
[  509.155857][T15742]  ? skb_clone+0x1eb/0x370
[  509.160332][T15742]  skb_clone+0x1eb/0x370
[  509.164634][T15742]  ? netem_enqueue+0x1243/0x3990
[  509.169738][T15742]  netem_enqueue+0x1250/0x3990
[  509.174586][T15742]  ? sch_tree_unlock+0x1b0/0x1b0
[  509.179585][T15742]  ? do_raw_spin_lock+0x11f/0x2b0
[  509.184685][T15742]  ? __rwlock_init+0x150/0x150
[  509.189513][T15742]  dev_qdisc_enqueue+0x48/0x220
[  509.194470][T15742]  __dev_queue_xmit+0xf06/0x3a30
[  509.199492][T15742]  ? __dev_queue_xmit+0x6d1/0x3a30
[  509.204687][T15742]  ? netdev_core_pick_tx+0x370/0x370
[  509.210030][T15742]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  509.216245][T15742]  ? __lock_acquire+0x7eb0/0x7eb0
[  509.221326][T15742]  ? lock_chain_count+0x20/0x20
[  509.226240][T15742]  ? ip_finish_output2+0xb6d/0x1260
[  509.231601][T15742]  ? ip_finish_output2+0x45a/0x1260
[  509.236859][T15742]  ip_finish_output2+0xd4f/0x1260
[  509.241946][T15742]  ? ip_finish_output2+0x45a/0x1260
[  509.247222][T15742]  ? ip_fragment+0x210/0x210
[  509.251869][T15742]  ? ip_skb_dst_mtu+0x18d/0xb70
[  509.256772][T15742]  ? ip_skb_dst_mtu+0x922/0xb70
[  509.261680][T15742]  ? ip_finish_output+0x3ec/0x4c0
[  509.266775][T15742]  ip_output+0x29f/0x440
[  509.271071][T15742]  ? ip_output+0x5a/0x440
[  509.275461][T15742]  iptunnel_xmit+0x58a/0xae0
[  509.280159][T15742]  ? tnl_update_pmtu+0x907/0x1040
[  509.285332][T15742]  ip_tunnel_xmit+0x1cf7/0x2560
[  509.290272][T15742]  ? ip4_dst_hoplimit+0x380/0x380
[  509.295425][T15742]  ? netif_skb_features+0xa51/0x1330
[  509.300761][T15742]  ? validate_xmit_xfrm+0xbb/0x1380
[  509.306089][T15742]  ? skb_push+0x8e/0xe0
[  509.310312][T15742]  ipgre_xmit+0x7eb/0xb70
[  509.314803][T15742]  dev_hard_start_xmit+0x269/0x790
[  509.319989][T15742]  __dev_queue_xmit+0x1d1e/0x3a30
[  509.325070][T15742]  ? __dev_queue_xmit+0x6d1/0x3a30
[  509.330262][T15742]  ? pskb_expand_head+0x17a/0x1150
[  509.335426][T15742]  ? pskb_expand_head+0x17a/0x1150
[  509.340590][T15742]  ? netdev_core_pick_tx+0x370/0x370
[  509.345922][T15742]  ? skb_release_data+0x1de/0x7f0
[  509.351007][T15742]  ? __bpf_redirect+0x4d1/0xdf0
[  509.355996][T15742]  __bpf_tx_skb+0x181/0x260
[  509.360634][T15742]  bpf_clone_redirect+0x315/0x4a0
[  509.365722][T15742]  bpf_prog_c08ef512837047f4+0x61/0x66
[  509.371238][T15742]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  509.377281][T15742]  ? preempt_schedule+0xc0/0xd0
[  509.382234][T15742]  ? bpf_test_run+0x174/0x870
[  509.387050][T15742]  ? preempt_schedule_common+0x82/0xc0
[  509.392768][T15742]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  509.398902][T15742]  ? lockdep_softirqs_on+0x5b0/0x5b0
[  509.404246][T15742]  ? lock_chain_count+0x20/0x20
[  509.405785][T15351] veth0_vlan: entered promiscuous mode
[  509.409133][T15742]  ? __local_bh_disable_ip+0x108/0x1a0
[  509.409166][T15742]  ? __cant_sleep+0x220/0x220
[  509.424819][T15742]  ? __local_bh_enable_ip+0x13a/0x1c0
[  509.430242][T15742]  ? _local_bh_enable+0xa0/0xa0
[  509.430478][T15351] veth1_vlan: entered promiscuous mode
[  509.435116][T15742]  ? bpf_test_timer_continue+0x137/0x3f0
[  509.435148][T15742]  ? bpf_test_run+0x174/0x870
[  509.450971][T15742]  bpf_test_run+0x2df/0x870
[  509.455634][T15742]  ? bpf_test_run+0x174/0x870
[  509.460371][T15742]  ? dst_hold+0x70/0x70
[  509.464593][T15742]  ? eth_get_headlen+0x210/0x210
[  509.469639][T15742]  bpf_prog_test_run_skb+0xdbb/0x18f0
[  509.475103][T15742]  ? cpu_online+0x60/0x60
[  509.479575][T15742]  bpf_prog_test_run+0x31f/0x390
[  509.484570][T15742]  __sys_bpf+0x49d/0x890
[  509.488871][T15742]  ? bpf_link_show_fdinfo+0x560/0x560
[  509.494323][T15742]  ? lock_chain_count+0x20/0x20
[  509.499245][T15742]  __x64_sys_bpf+0x7c/0x90
[  509.503713][T15742]  do_syscall_64+0x55/0xb0
[  509.508176][T15742]  ? clear_bhb_loop+0x40/0x90
[  509.512912][T15742]  ? clear_bhb_loop+0x40/0x90
[  509.517646][T15742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  509.519187][T15351] veth0_macvtap: entered promiscuous mode
[  509.523570][T15742] RIP: 0033:0x7fc4581a8f19
[  509.523598][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.523617][T15742] RSP: 002b:00007fc4590ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  509.523643][T15742] RAX: ffffffffffffffda RBX: 00007fc458425fa0 RCX: 00007fc4581a8f19
[  509.534447][T15351] veth1_macvtap: entered promiscuous mode
[  509.553564][T15742] RDX: 0000000000000028 RSI: 0000200000000bc0 RDI: 000000000000000a
[  509.553585][T15742] RBP: 00007fc458237f6d R08: 0000000000000000 R09: 0000000000000000
[  509.553599][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.553612][T15742] R13: 00007fc458426038 R14: 00007fc458425fa0 R15: 00007ffcc05ea5c8
[  509.553648][T15742]  </TASK>
[  509.749208][T14655] Bluetooth: hci1: command tx timeout
[  509.880165][   T60] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.905289][T15670] team0: Port device team_slave_0 added
[  509.965390][T15670] team0: Port device team_slave_1 added
[  510.082298][T15351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  510.105072][T15351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.142042][T15351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.180224][T15670] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.189726][T15670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.249274][T15670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.269215][T15670] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.277304][T15670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.313068][T15670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.344141][T15351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  510.379843][T15351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  510.393489][T15765] loop2: detected capacity change from 0 to 128
[  510.423652][T15351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.496582][T15351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.539399][T15351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.548199][T15351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.572494][T15351] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.792825][ T1148] kworker/u4:7: attempt to access beyond end of device
[  510.792825][ T1148] loop2: rw=1, sector=145, nr_sectors = 896 limit=128
[  510.817079][T15670] hsr_slave_0: entered promiscuous mode
[  510.854334][T15670] hsr_slave_1: entered promiscuous mode
[  511.112655][   T60] tipc: Disabling bearer <udp:syz0>
[  511.135019][   T60] tipc: Left network mode
[  511.567309][T15789] FAULT_INJECTION: forcing a failure.
[  511.567309][T15789] name failslab, interval 1, probability 0, space 0, times 0
[  511.585185][T15789] CPU: 0 PID: 15789 Comm: syz.2.3108 Not tainted syzkaller #0
[  511.592999][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  511.603302][T15789] Call Trace:
[  511.606675][T15789]  <TASK>
[  511.609655][T15789]  dump_stack_lvl+0x18c/0x250
[  511.614401][T15789]  ? show_regs_print_info+0x20/0x20
[  511.619673][T15789]  ? load_image+0x420/0x420
[  511.624309][T15789]  ? __might_sleep+0xe0/0xe0
[  511.628969][T15789]  ? __lock_acquire+0x7eb0/0x7eb0
[  511.634071][T15789]  should_fail_ex+0x394/0x4c0
[  511.638824][T15789]  should_failslab+0x9/0x20
[  511.643377][T15789]  slab_pre_alloc_hook+0x59/0x300
[  511.648448][T15789]  ? d_instantiate+0x6f/0x90
[  511.653093][T15789]  kmem_cache_alloc+0x5a/0x2d0
[  511.657906][T15789]  ? alloc_empty_file+0x9e/0x1d0
[  511.662902][T15789]  alloc_empty_file+0x9e/0x1d0
[  511.667719][T15789]  alloc_file+0x5b/0x600
[  511.672021][T15789]  alloc_file_pseudo+0x184/0x210
[  511.677012][T15789]  ? fput+0x1a0/0x1a0
[  511.681045][T15789]  ? alloc_fd+0x590/0x640
[  511.685478][T15789]  anon_inode_getfd+0xca/0x1c0
[  511.690292][T15789]  map_create+0xf13/0x12f0
[  511.694758][T15789]  __sys_bpf+0x651/0x890
[  511.699051][T15789]  ? bpf_link_show_fdinfo+0x560/0x560
[  511.704489][T15789]  ? lock_chain_count+0x20/0x20
[  511.709399][T15789]  __x64_sys_bpf+0x7c/0x90
[  511.713862][T15789]  do_syscall_64+0x55/0xb0
[  511.718328][T15789]  ? clear_bhb_loop+0x40/0x90
[  511.723059][T15789]  ? clear_bhb_loop+0x40/0x90
[  511.727798][T15789]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  511.733743][T15789] RIP: 0033:0x7fc4581a8f19
[  511.738198][T15789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.757984][T15789] RSP: 002b:00007fc4590ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  511.766471][T15789] RAX: ffffffffffffffda RBX: 00007fc458425fa0 RCX: 00007fc4581a8f19
[  511.774592][T15789] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000000
[  511.782596][T15789] RBP: 00007fc458237f6d R08: 0000000000000000 R09: 0000000000000000
[  511.790619][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  511.798638][T15789] R13: 00007fc458426038 R14: 00007fc458425fa0 R15: 00007ffcc05ea5c8
[  511.806637][T15789]  </TASK>
[  511.913833][T15450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.091100][T15634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.112308][T15634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.542836][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.573295][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.579981][T15450] veth0_vlan: entered promiscuous mode
[  512.690333][T15450] veth1_vlan: entered promiscuous mode
[  512.775133][T15814] loop5: detected capacity change from 0 to 512
[  512.898757][T15814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.935749][T15814] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.096888][T15351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.116713][T15450] veth0_macvtap: entered promiscuous mode
[  513.371655][T15450] veth1_macvtap: entered promiscuous mode
[  513.692384][T15450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.718029][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3115'.
[  513.728388][T15450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.747972][T15450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  513.762802][T15450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.781460][T15450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.856752][T15450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.883044][T15450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.909440][T15450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  513.930574][T15450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  513.961049][T15450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.016856][T15450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.040425][T15450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.059432][T15450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.084690][T15450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.665967][   T60] hsr_slave_0: left promiscuous mode
[  514.683204][   T60] hsr_slave_1: left promiscuous mode
[  514.708045][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  514.721697][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.743659][   T60] bridge_slave_1: left allmulticast mode
[  514.752441][   T60] bridge_slave_1: left promiscuous mode
[  514.758345][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.774473][   T60] bridge_slave_0: left allmulticast mode
[  514.781457][   T60] bridge_slave_0: left promiscuous mode
[  514.787245][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.822532][   T60] veth1_macvtap: left promiscuous mode
[  514.828152][   T60] veth0_macvtap: left promiscuous mode
[  514.834343][   T60] veth1_vlan: left promiscuous mode
[  514.839894][   T60] veth0_vlan: left promiscuous mode
[  515.788188][   T60] team0 (unregistering): Port device team_slave_1 removed
[  515.868395][   T60] team0 (unregistering): Port device team_slave_0 removed
[  515.954910][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.037135][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.622493][   T60] bond0 (unregistering): Released all slaves
[  516.920407][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.928367][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.977092][T15670] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  517.033916][T15670] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  517.089643][T15670] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  517.141070][T15670] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  517.188337][ T5059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.206257][ T5059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.249645][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  517.660969][T15885] loop7: detected capacity change from 0 to 7
[  517.698993][T15885] Dev loop7: unable to read RDB block 7
[  517.707960][   T60] IPVS: stop unused estimator thread 0...
[  517.730011][T15885]  loop7: unable to read partition table
[  517.751171][T15885] loop7: partition table beyond EOD, truncated
[  517.782887][T15885] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  517.833782][T15670] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.005721][ T5152] Dev loop7: unable to read RDB block 7
[  518.015682][ T5152]  loop7: unable to read partition table
[  518.025525][ T5152] loop7: partition table beyond EOD, truncated
[  518.168813][T15670] 8021q: adding VLAN 0 to HW filter on device team0
[  518.227386][T15634] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.234817][T15634] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.286008][T15634] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.293293][T15634] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.566821][T15670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  519.557148][T15670] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.434259][T15948] loop2: detected capacity change from 0 to 40427
[  520.509525][T15948] F2FS-fs (loop2): invalid crc value
[  520.530355][T15948] F2FS-fs (loop2): Found nat_bits in checkpoint
[  520.538872][T15670] veth0_vlan: entered promiscuous mode
[  520.607632][T15670] veth1_vlan: entered promiscuous mode
[  520.812870][T15948] F2FS-fs (loop2): Start checkpoint disabled!
[  520.824184][T15670] veth0_macvtap: entered promiscuous mode
[  520.863358][T15670] veth1_macvtap: entered promiscuous mode
[  520.905053][T15670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.919189][T15948] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  520.932648][T15670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.945416][T15670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.956846][T15670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.968509][T15670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.989917][T15670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.021630][T15670] batman_adv: batadv0: Interface activated: batadv_slave_0
[  521.045927][T15670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.126435][T15670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.133309][T15948] syz.2.3143: attempt to access beyond end of device
[  521.133309][T15948] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  521.143947][T15670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  521.236906][T15670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.261357][T15670] batman_adv: batadv0: Interface activated: batadv_slave_1
[  521.330775][T15670] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.366882][T15670] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.409260][   T60] kworker/u4:4: attempt to access beyond end of device
[  521.409260][   T60] loop2: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  521.409397][T15670] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.409432][T15670] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.451461][   T60] kworker/u4:4: attempt to access beyond end of device
[  521.451461][   T60] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  521.465899][   T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  521.473814][   T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  521.660965][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.706023][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.798284][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.823790][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.970831][T15995] FAULT_INJECTION: forcing a failure.
[  521.970831][T15995] name failslab, interval 1, probability 0, space 0, times 0
[  522.000968][T15995] CPU: 0 PID: 15995 Comm: syz.0.3157 Not tainted syzkaller #0
[  522.008521][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  522.018626][T15995] Call Trace:
[  522.021937][T15995]  <TASK>
[  522.024885][T15995]  dump_stack_lvl+0x18c/0x250
[  522.029602][T15995]  ? show_regs_print_info+0x20/0x20
[  522.034819][T15995]  ? load_image+0x420/0x420
[  522.039341][T15995]  ? __might_sleep+0xe0/0xe0
[  522.043960][T15995]  ? __lock_acquire+0x7eb0/0x7eb0
[  522.049008][T15995]  should_fail_ex+0x394/0x4c0
[  522.053705][T15995]  should_failslab+0x9/0x20
[  522.058307][T15995]  slab_pre_alloc_hook+0x59/0x300
[  522.063344][T15995]  ? __list_lru_init+0xb4/0x600
[  522.068217][T15995]  ? __list_lru_init+0xb4/0x600
[  522.073081][T15995]  __kmem_cache_alloc_node+0x53/0x260
[  522.078463][T15995]  ? up_write+0x1be/0x410
[  522.082808][T15995]  ? __list_lru_init+0xb4/0x600
[  522.087675][T15995]  __kmalloc+0xa7/0x240
[  522.091858][T15995]  __list_lru_init+0xb4/0x600
[  522.096565][T15995]  alloc_super+0x74c/0x910
[  522.100997][T15995]  ? afs_get_tree+0x1090/0x1090
[  522.105899][T15995]  sget_fc+0x2ee/0x930
[  522.109981][T15995]  ? afs_test_super+0x1d0/0x1d0
[  522.114850][T15995]  afs_get_tree+0x5fc/0x1090
[  522.119457][T15995]  ? apparmor_capable+0x137/0x1a0
[  522.124517][T15995]  ? bpf_lsm_capable+0x9/0x10
[  522.129217][T15995]  vfs_get_tree+0x8c/0x280
[  522.133648][T15995]  do_new_mount+0x24a/0xa60
[  522.138170][T15995]  __se_sys_mount+0x2e7/0x3d0
[  522.142865][T15995]  ? __x64_sys_mount+0xc0/0xc0
[  522.147658][T15995]  ? lockdep_hardirqs_on+0x98/0x150
[  522.152873][T15995]  ? __x64_sys_mount+0x20/0xc0
[  522.157650][T15995]  do_syscall_64+0x55/0xb0
[  522.162081][T15995]  ? clear_bhb_loop+0x40/0x90
[  522.166772][T15995]  ? clear_bhb_loop+0x40/0x90
[  522.171470][T15995]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  522.177384][T15995] RIP: 0033:0x7f4541fa8f19
[  522.181813][T15995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  522.201438][T15995] RSP: 002b:00007f4542db6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  522.209868][T15995] RAX: ffffffffffffffda RBX: 00007f4542225fa0 RCX: 00007f4541fa8f19
[  522.217850][T15995] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000
[  522.225851][T15995] RBP: 00007f4542037f6d R08: 0000200000000180 R09: 0000000000000000
[  522.233868][T15995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  522.241870][T15995] R13: 00007f4542226038 R14: 00007f4542225fa0 R15: 00007ffd3f1f0238
[  522.249879][T15995]  </TASK>
[  522.359592][  T789] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  522.570687][  T789] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  522.604927][  T789] usb 6-1: config 0 interface 0 has no altsetting 0
[  522.635924][  T789] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  522.664313][  T789] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  522.672910][  T789] usb 6-1: Product: syz
[  522.677123][  T789] usb 6-1: Manufacturer: syz
[  522.681875][  T789] usb 6-1: SerialNumber: syz
[  522.703515][  T789] usb 6-1: config 0 descriptor??
[  522.734375][  T789] usb 6-1: selecting invalid altsetting 0
[  523.194713][  T789] usb 6-1: USB disconnect, device number 10
[  523.194704][    C1] usb 6-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs
[  523.559234][T16030] tipc: Started in network mode
[  523.590112][T16030] tipc: Node identity 4, cluster identity 4711
[  523.596362][T16030] tipc: Node number set to 4
[  524.249810][  T789] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  524.461878][  T789] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  524.479738][  T789] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  524.539632][  T789] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  524.569530][  T789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.598089][  T789] usb 7-1: Product: syz
[  524.608226][  T789] usb 7-1: Manufacturer: syz
[  524.617166][  T789] usb 7-1: SerialNumber: syz
[  524.665487][  T789] ums-sddr09 7-1:1.0: USB Mass Storage device detected
[  524.706788][  T789] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  524.706788][  T789]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  525.539785][ T6633] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  525.734418][ T6633] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  525.786776][ T6633] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  525.787718][  T789] scsi host1: usb-storage 7-1:1.0
[  525.826824][ T6633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  525.838490][ T6633] usb 3-1: Product: syz
[  525.846571][  T789] usb 7-1: USB disconnect, device number 4
[  525.854422][ T6633] usb 3-1: Manufacturer: syz
[  525.917077][ T6633] usb 3-1: selecting invalid altsetting 1
[  525.936406][ T6633] dvb_ttusb_budget: ttusb_init_controller: error
[  525.943512][ T6633] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  526.098586][T16073] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  526.118676][   T28] audit: type=1326 audit(1700000262.070:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16072 comm="syz.2.3182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4581a8f19 code=0x0
[  526.169074][ T6633] DVB: Unable to find symbol cx22700_attach()
[  526.255493][ T6633] DVB: Unable to find symbol tda10046_attach()
[  526.265196][ T6633] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  526.283796][ T6633] usb 3-1: USB disconnect, device number 34
[  527.167806][T16132] syz.5.3193: vmalloc error: size 204800, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  527.199136][T16132] CPU: 1 PID: 16132 Comm: syz.5.3193 Not tainted syzkaller #0
[  527.206683][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  527.216788][T16132] Call Trace:
[  527.220109][T16132]  <TASK>
[  527.223060][T16132]  dump_stack_lvl+0x18c/0x250
[  527.228021][T16132]  ? show_regs_print_info+0x20/0x20
[  527.233297][T16132]  ? load_image+0x420/0x420
[  527.237862][T16132]  ? __rcu_read_unlock+0x7c/0xd0
[  527.242847][T16132]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  527.249566][T16132]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  527.256088][T16132]  warn_alloc+0x246/0x340
[  527.260436][T16132]  ? zone_watermark_ok_safe+0x230/0x230
[  527.266010][T16132]  __vmalloc_node_range+0x1055/0x1320
[  527.271425][T16132]  ? free_vm_area+0x50/0x50
[  527.275955][T16132]  vmalloc_user+0x74/0x80
[  527.280309][T16132]  ? vb2_vmalloc_alloc+0xef/0x330
[  527.285437][T16132]  vb2_vmalloc_alloc+0xef/0x330
[  527.290341][T16132]  ? __copy_timestamp+0x1f0/0x1f0
[  527.295377][T16132]  __vb2_queue_alloc+0x78f/0x1410
[  527.300529][T16132]  vb2_core_reqbufs+0x9e8/0x10d0
[  527.305757][T16132]  ? vb2_verify_memory_type+0x570/0x570
[  527.311403][T16132]  ? __mutex_lock+0x30d/0xce0
[  527.316098][T16132]  ? do_vfs_ioctl+0x156c/0x1cc0
[  527.321143][T16132]  ? vb2_verify_memory_type+0x1fc/0x570
[  527.326705][T16132]  vb2_ioctl_reqbufs+0x474/0x790
[  527.331838][T16132]  __video_do_ioctl+0xa34/0xde0
[  527.336767][T16132]  ? video_ioctl2+0x30/0x30
[  527.341289][T16132]  ? __might_fault+0xc6/0x120
[  527.345979][T16132]  ? __might_fault+0xaa/0x120
[  527.350672][T16132]  video_usercopy+0x889/0x1360
[  527.355455][T16132]  ? video_ioctl2+0x30/0x30
[  527.359972][T16132]  ? v4l_printk_ioctl+0x160/0x160
[  527.365031][T16132]  v4l2_ioctl+0x18a/0x1e0
[  527.369375][T16132]  ? v4l2_poll+0x2b0/0x2b0
[  527.373800][T16132]  __se_sys_ioctl+0xfd/0x170
[  527.378410][T16132]  do_syscall_64+0x55/0xb0
[  527.382839][T16132]  ? clear_bhb_loop+0x40/0x90
[  527.387533][T16132]  ? clear_bhb_loop+0x40/0x90
[  527.392241][T16132]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  527.398148][T16132] RIP: 0033:0x7f8f055a8f19
[  527.402834][T16132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  527.422474][T16132] RSP: 002b:00007f8f0649f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  527.430928][T16132] RAX: ffffffffffffffda RBX: 00007f8f05825fa0 RCX: 00007f8f055a8f19
[  527.438928][T16132] RDX: 0000200000000cc0 RSI: 00000000c0145608 RDI: 0000000000000004
[  527.446923][T16132] RBP: 00007f8f05637f6d R08: 0000000000000000 R09: 0000000000000000
[  527.454997][T16132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  527.462974][T16132] R13: 00007f8f05826038 R14: 00007f8f05825fa0 R15: 00007ffe7f9e5cb8
[  527.471058][T16132]  </TASK>
[  527.521791][T16132] Mem-Info:
[  527.525153][T16132] active_anon:8454 inactive_anon:9219 isolated_anon:0
[  527.525153][T16132]  active_file:13593 inactive_file:40577 isolated_file:0
[  527.525153][T16132]  unevictable:768 dirty:254 writeback:0
[  527.525153][T16132]  slab_reclaimable:12011 slab_unreclaimable:101291
[  527.525153][T16132]  mapped:24716 shmem:11148 pagetables:932
[  527.525153][T16132]  sec_pagetables:0 bounce:0
[  527.525153][T16132]  kernel_misc_reclaimable:0
[  527.525153][T16132]  free:1311276 free_pcp:14643 free_cma:0
[  527.572079][T16132] Node 0 active_anon:34016kB inactive_anon:36876kB active_file:54372kB inactive_file:162104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98964kB dirty:1012kB writeback:0kB shmem:43056kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11920kB pagetables:3728kB sec_pagetables:0kB all_unreclaimable? no
[  527.618158][T16132] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  527.653971][T16132] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  527.681518][    T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  527.690044][T16132] lowmem_reserve[]: 0 2503 2504 2504 2504
[  527.696484][T16132] Node 0 DMA32 free:1336584kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:34080kB inactive_anon:36876kB active_file:54372kB inactive_file:161276kB unevictable:1536kB writepending:1004kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:22676kB local_pcp:3836kB free_cma:0kB
[  527.740245][T16132] lowmem_reserve[]: 0 0 0 0 0
[  527.746126][T16132] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:8kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  527.774133][T16132] lowmem_reserve[]: 0 0 0 0 0
[  527.779066][T16132] Node 1 Normal free:3893152kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:35264kB local_pcp:6144kB free_cma:0kB
[  527.810718][T16132] lowmem_reserve[]: 0 0 0 0 0
[  527.815637][T16132] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  527.836951][T16132] Node 0 DMA32: 1378*4kB (UME) 892*8kB (UME) 328*16kB (UME) 251*32kB (UME) 195*64kB (UME) 182*128kB (UME) 78*256kB (UME) 23*512kB (UME) 26*1024kB (UME) 6*2048kB (UME) 294*4096kB (UM) = 1336584kB
[  527.865803][T16132] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  527.878337][T16132] Node 1 Normal: 204*4kB (UME) 52*8kB (UME) 29*16kB (UME) 170*32kB (UME) 55*64kB (UME) 12*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3893152kB
[  527.898182][T16132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  527.899522][    T8] usb 7-1: Using ep0 maxpacket: 16
[  527.908158][T16132] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  527.924331][T16132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  527.925998][    T8] usb 7-1: config 0 has an invalid interface number: 98 but max is 0
[  527.934251][T16132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  527.955018][T16132] 65250 total pagecache pages
[  527.959364][    T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.959883][T16132] 5 pages in swap cache
[  527.974775][T16132] Free swap  = 118420kB
[  527.979083][T16132] Total swap = 124996kB
[  527.987813][    T8] usb 7-1: config 0 has no interface number 0
[  528.005074][    T8] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  528.007503][T16132] 2097051 pages RAM
[  528.027632][    T8] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  528.033926][T16132] 0 pages HighMem/MovableOnly
[  528.046398][T16132] 421729 pages reserved
[  528.050856][T16132] 0 pages cma reserved
[  528.052600][    T8] usb 7-1: config 0 interface 98 has no altsetting 0
[  528.097099][    T8] usb 7-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  528.106860][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.127895][    T8] usb 7-1: Product: syz
[  528.134320][    T8] usb 7-1: Manufacturer: syz
[  528.139281][    T8] usb 7-1: SerialNumber: syz
[  528.147580][    T8] usb 7-1: config 0 descriptor??
[  528.170573][T16134] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  528.187653][T16134] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  528.505562][T16134] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  528.544046][T16134] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  528.559957][ T3239] ------------[ cut here ]------------
[  528.566530][ T3239] WARNING: CPU: 1 PID: 3239 at io_uring/io_uring.c:3292 io_ring_exit_work+0x3c1/0x860
[  528.576254][ T3239] Modules linked in:
[  528.580235][ T3239] CPU: 1 PID: 3239 Comm: kworker/u4:8 Not tainted syzkaller #0
[  528.587815][ T3239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  528.598023][ T3239] Workqueue: iou_exit io_ring_exit_work
[  528.603958][ T3239] RIP: 0010:io_ring_exit_work+0x3c1/0x860
[  528.610078][ T3239] Code: 89 e5 48 8b 7c 24 28 48 8b 34 24 e8 19 2a 11 00 48 85 c0 41 bc 00 20 00 00 75 1c e8 69 ab f8 f6 e9 b3 fd ff ff e8 5f ab f8 f6 <0f> 0b b8 70 17 00 00 48 89 04 24 eb c3 c7 84 24 90 00 00 00 00 00
[  528.629923][ T3239] RSP: 0018:ffffc9000ca7fa40 EFLAGS: 00010293
[  528.636050][ T3239] RAX: ffffffff8a8f3341 RBX: ffff88804329e000 RCX: ffff88802f11bc00
[  528.645395][ T3239] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000
[  528.653978][ T3239] RBP: ffffc9000ca7fbb0 R08: ffffc9000ca7f9c7 R09: 1ffff9200194ff38
[  528.662067][ T3239] R10: dffffc0000000000 R11: fffff5200194ff39 R12: ffff88804329e510
[  528.670148][ T3239] R13: 0000000100005866 R14: 000000010000586b R15: dffffc0000000000
[  528.678257][ T3239] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  528.687723][ T3239] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  528.694849][ T3239] CR2: 00007f4542d556c8 CR3: 000000005bbec000 CR4: 00000000003506e0
[  528.702936][ T3239] Call Trace:
[  528.706435][ T3239]  <TASK>
[  528.709478][ T3239]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  528.715355][ T3239]  ? _raw_spin_unlock_irq+0x23/0x50
[  528.720742][ T3239]  ? process_scheduled_works+0x975/0x1600
[  528.726688][ T3239]  ? process_scheduled_works+0x975/0x1600
[  528.732791][ T3239]  process_scheduled_works+0xa60/0x1600
[  528.738423][ T3239]  ? worker_attach_to_pool+0x370/0x370
[  528.744917][ T3239]  ? assign_work+0x3cc/0x5d0
[  528.749976][ T3239]  worker_thread+0xa5e/0xfe0
[  528.754641][ T3239]  ? _raw_spin_unlock+0x40/0x40
[  528.759590][ T3239]  ? __kthread_parkme+0x71/0x1c0
[  528.764603][ T3239]  kthread+0x2fa/0x390
[  528.768809][ T3239]  ? pr_cont_work+0x550/0x550
[  528.774347][ T3239]  ? kthread_blkcg+0xd0/0xd0
[  528.778991][ T3239]  ret_from_fork+0x48/0x80
[  528.783523][ T3239]  ? kthread_blkcg+0xd0/0xd0
[  528.788173][ T3239]  ret_from_fork_asm+0x11/0x20
[  528.793138][ T3239]  </TASK>
[  528.796193][ T3239] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  528.803508][ T3239] CPU: 1 PID: 3239 Comm: kworker/u4:8 Not tainted syzkaller #0
[  528.811073][ T3239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  528.821139][ T3239] Workqueue: iou_exit io_ring_exit_work
[  528.826702][ T3239] Call Trace:
[  528.829989][ T3239]  <TASK>
[  528.832928][ T3239]  dump_stack_lvl+0x18c/0x250
[  528.837629][ T3239]  ? show_regs_print_info+0x20/0x20
[  528.842842][ T3239]  ? load_image+0x420/0x420
[  528.847537][ T3239]  panic+0x2ca/0x720
[  528.851447][ T3239]  ? bpf_jit_dump+0xd0/0xd0
[  528.855968][ T3239]  ? ret_from_fork_asm+0x11/0x20
[  528.860925][ T3239]  __warn+0x2e0/0x470
[  528.864919][ T3239]  ? io_ring_exit_work+0x3c1/0x860
[  528.870217][ T3239]  ? io_ring_exit_work+0x3c1/0x860
[  528.875425][ T3239]  report_bug+0x2be/0x4f0
[  528.879830][ T3239]  ? io_ring_exit_work+0x3c1/0x860
[  528.884962][ T3239]  ? io_ring_exit_work+0x3c1/0x860
[  528.890085][ T3239]  ? io_ring_exit_work+0x3c3/0x860
[  528.895211][ T3239]  handle_bug+0xcf/0x120
[  528.899481][ T3239]  exc_invalid_op+0x1a/0x50
[  528.904009][ T3239]  asm_exc_invalid_op+0x1a/0x20
[  528.908876][ T3239] RIP: 0010:io_ring_exit_work+0x3c1/0x860
[  528.914616][ T3239] Code: 89 e5 48 8b 7c 24 28 48 8b 34 24 e8 19 2a 11 00 48 85 c0 41 bc 00 20 00 00 75 1c e8 69 ab f8 f6 e9 b3 fd ff ff e8 5f ab f8 f6 <0f> 0b b8 70 17 00 00 48 89 04 24 eb c3 c7 84 24 90 00 00 00 00 00
[  528.934232][ T3239] RSP: 0018:ffffc9000ca7fa40 EFLAGS: 00010293
[  528.940312][ T3239] RAX: ffffffff8a8f3341 RBX: ffff88804329e000 RCX: ffff88802f11bc00
[  528.948292][ T3239] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000
[  528.956274][ T3239] RBP: ffffc9000ca7fbb0 R08: ffffc9000ca7f9c7 R09: 1ffff9200194ff38
[  528.964263][ T3239] R10: dffffc0000000000 R11: fffff5200194ff39 R12: ffff88804329e510
[  528.972259][ T3239] R13: 0000000100005866 R14: 000000010000586b R15: dffffc0000000000
[  528.980257][ T3239]  ? io_ring_exit_work+0x3c1/0x860
[  528.985399][ T3239]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  528.991236][ T3239]  ? _raw_spin_unlock_irq+0x23/0x50
[  528.996472][ T3239]  ? process_scheduled_works+0x975/0x1600
[  529.002227][ T3239]  ? process_scheduled_works+0x975/0x1600
[  529.007959][ T3239]  process_scheduled_works+0xa60/0x1600
[  529.013540][ T3239]  ? worker_attach_to_pool+0x370/0x370
[  529.019022][ T3239]  ? assign_work+0x3cc/0x5d0
[  529.023638][ T3239]  worker_thread+0xa5e/0xfe0
[  529.028249][ T3239]  ? _raw_spin_unlock+0x40/0x40
[  529.033110][ T3239]  ? __kthread_parkme+0x71/0x1c0
[  529.038072][ T3239]  kthread+0x2fa/0x390
[  529.042151][ T3239]  ? pr_cont_work+0x550/0x550
[  529.046843][ T3239]  ? kthread_blkcg+0xd0/0xd0
[  529.051449][ T3239]  ret_from_fork+0x48/0x80
[  529.055882][ T3239]  ? kthread_blkcg+0xd0/0xd0
[  529.060481][ T3239]  ret_from_fork_asm+0x11/0x20
[  529.065276][ T3239]  </TASK>
[  529.068429][ T3239] Kernel Offset: disabled
[  529.072870][ T3239] Rebooting in 86400 seconds..