last executing test programs:

3m45.531372016s ago: executing program 1 (id=1):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xeb)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}})

3m44.346913896s ago: executing program 1 (id=5):
signalfd(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@noquota}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn79Nivjb4uiTidUOPlmt9rm6cu1qSifDJTaEdRmKiKy7RmrjfyyGotF5Y/Hap6U2DthQ1VyXwxerwF0sibJbAJSj+KDP7n+LbfNmH+W7+nL9BiiL+3q+1Y8MR5qXGWm7v+2niYg4dvHfr7ItNuY5BABAi++z+c+zneZ/aTzQVO6efG1oPF9L2R0R90XEnoi4P6JW9sGIeGid9bcvktw8/0mv9BTYGmXzv5fyta3W+V8x+4vxoTy3qxb/SHL8ZGXxUP6aTMbI1iw/s0odP7z62xfdjjXP/7Itq7+YC+btuDK8tfWchbmVuduJudnVTyL2DXeKP7mxEpBExN6I2NdjHSef/uZAt2O3jn8VfVhnqn4d8VS9/y9GW/yFZPX1yeltUVk8NF1cFTf75ddLb3Wr/7bi74Os/7d3vP5vxD+eNK/XLq+/jkt/fN71nmaqp+u/sWNL/vfDuZWVszMRW5I36o1u3j/bOLfIF+Wz+CcPdh7/u6PxSuyPiOwifjgiHomIR/O+eywiHo+Ig53Dy24d46dXnnivW/x3Qv8vtPX/eGuRtv5vJLZE+57OiaFTP37X+j82kmt7/ztSS03me9by/reWdvV2NQMAAMD/TxoROyNJp26kR9Opqfp3+PfE9rSytLzyzPGlD84s1H8jMB4jafGka6zpeehMfltf5Gfb8ofz58ZfDo3W8lPzS5WFsoOHAbfjpvGf1sZ/5s+hslsHbDi/14LB1TT+kzLbAWw+n/8wuIx/GFwdxv9oGe0ANl+nz/+PS2gHsPnaxr9lPxgg7v9hcBn/MLiax78vAMDAWB6NW/9IvlNiW/RylsRdk4j0jmhGfxJJj6NgrYmdZQe4/kTZ70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD///Mv57k=")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
inotify_init()
poll(&(0x7f00000000c0), 0x0, 0x5)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='mountinfo\x00')
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000240)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000280)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
read$FUSE(r0, &(0x7f00000036c0)={0x2020}, 0x2020)

3m43.651546126s ago: executing program 1 (id=15):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1ff, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r2, &(0x7f0000004a40)=""/102392, 0x18ff8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x6)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x2}, 0x10)

3m42.72395779s ago: executing program 1 (id=9):
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x2a1, 0x8}, 0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0, 0x0)
write$cgroup_devices(r1, 0x0, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, 0x0)

3m42.33275514s ago: executing program 32 (id=9):
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x2a1, 0x8}, 0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0, 0x0)
write$cgroup_devices(r1, 0x0, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, 0x0)

3m15.572937458s ago: executing program 2 (id=83):
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000008c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

3m15.096219136s ago: executing program 2 (id=86):
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}})
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

3m14.749156511s ago: executing program 2 (id=88):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$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")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0)
r2 = add_key(&(0x7f0000000640)='asymmetric\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000007c0)='enc=raw hash=streebog256\x00', &(0x7f0000000800))
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@gettclass={0x24, 0x2a, 0x129, 0x70bd26, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xffe0, 0xd}, {0xd}, {0x5, 0x7}}}, 0x24}}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0)
r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, r6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, 0xffffffffffffffff, 0x1000)

3m14.249928802s ago: executing program 2 (id=90):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r3, &(0x7f0000000200)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f00000004c0), 0x3fffffffffffe3d, 0xf5)

3m13.220991076s ago: executing program 2 (id=94):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f0000000100)=<r1=>0x0)
r2 = eventfd(0x0)
io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, 0x0, 0x0, 0x36}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0xb526, 0x0, 0x1, r2}])
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3m11.024913828s ago: executing program 2 (id=100):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000019300)='.\x00', 0x50007a2)

2m55.781618321s ago: executing program 33 (id=100):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000019300)='.\x00', 0x50007a2)

22.880517454s ago: executing program 4 (id=343):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24)
open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0)

22.778734505s ago: executing program 0 (id=346):
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0xa880, 0x97)
fanotify_mark(r4, 0x5, 0x4800003e, r5, 0x0)

19.96057042s ago: executing program 0 (id=350):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg$inet(r1, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0xa40}}], 0x6b}})
shutdown(r0, 0x1)

17.307990608s ago: executing program 4 (id=352):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$kcm(0x23, 0x5, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000019540)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000500)={0x3, 0x2, 0x1})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0)

17.261270713s ago: executing program 0 (id=353):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000140), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000002c0)={0x20000014})
epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x400)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000240)='n', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, 0x0, 0x0}, 0x94)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000cc0)={0x3, {{0xa, 0x4e24, 0x4, @mcast1, 0xfffffffe}}, {{0xa, 0x4e0a, 0x7, @private2={0xfc, 0x2, '\x00', 0x23}, 0x4f0}}}, 0x108)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)

15.645507087s ago: executing program 4 (id=354):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000280)='./debug\x00', 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

14.642259808s ago: executing program 3 (id=356):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6)
mount(0x0, 0x0, 0x0, 0x100018, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0)
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000640)='1\x00', 0x2)
syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000740)={[{@numtail}, {@shortname_win95}, {@utf8no}, {}, {@numtail}, {@rodir}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@smackfshat={'smackfshat', 0x3d, '-#($$:'}}]}, 0x7, 0x2b1, &(0x7f0000000880)="$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")

13.602396333s ago: executing program 3 (id=357):
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000000780)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000197c0), 0x28100, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000019800)=0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000019840)=0xe)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)

12.389540336s ago: executing program 3 (id=358):
gettid()
timer_create(0x0, 0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

9.920660666s ago: executing program 5 (id=362):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000200)='syzkaller\x00'}, 0x94)
pipe(&(0x7f0000000040))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x40241, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r0}, &(0x7f0000000fc0), &(0x7f0000001000)=r1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001040)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001080)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

9.742125344s ago: executing program 0 (id=363):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg$inet(r1, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0xa40}}], 0x6b}})
shutdown(r0, 0x1)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/sem\x00', 0x1, 0x0)

7.339851907s ago: executing program 3 (id=364):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
exit(0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8c50, &(0x7f0000000580)={[{@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_lower}, {@numtail}, {@rodir}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@errors_continue}, {@fat=@umask}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_stale_rw}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000680)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='memory.events\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0b080d04"], 0xd)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
creat(&(0x7f0000000180)='./file1\x00', 0x60)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)

7.144687956s ago: executing program 5 (id=365):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0)

7.139606727s ago: executing program 4 (id=366):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)

5.567841216s ago: executing program 0 (id=367):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.14652519s ago: executing program 4 (id=368):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
openat$dm_control(0xffffffffffffff9c, &(0x7f0000001300), 0x101002, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xfc, 0xc44, &(0x7f0000000580)="$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")
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.780801667s ago: executing program 5 (id=369):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000001600)={&(0x7f0000001640)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001700)='kF', 0x2}], 0x1}, 0x20000885)

2.390729378s ago: executing program 0 (id=370):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
read$hiddev(r3, 0x0, 0x0)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000003300)=0x8)
r5 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bc"])

2.384689078s ago: executing program 3 (id=371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000280), 0x4)
syz_usb_connect(0x5, 0xf4, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x101000)

1.633120515s ago: executing program 5 (id=372):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800037f030303ee"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000001004001300000000000000000000000000000000005a5da91db7d796659a2402d1fd3051ce8afde87a05e5dc2c394745326bf0b4e50d87da5116df63560c70751a0566a9879f6581d7607a9e5fafcb9bdd1b175cae82497c7b394dccade14f37dfbf1ca23280ea7baaa3641a82658c22d18a5adcd3f829d5c17648cb08e043ca7bcb208cdea4c2725c3b54e500a18e498b09414ac08f06533df4438fd2d1e05bba9f02000000000000e1a0b8f18b49442774a204ea68acdce5a4d2e31b579b2e315a74b71e5651748c8af1e9bd00000000"], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r4, 0x8914, &(0x7f0000000040)='dummy0\x00'/40)
ioctl(r4, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40)
ioctl(r4, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40)
ioctl(r4, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000")

1.541122304s ago: executing program 3 (id=373):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x103000, 0x800, 0x9}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000)
pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8001, 0x6, 0x0, 0x0, 0x3ff000000, 0x9c2a, 0x4}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x9}, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

982.446191ms ago: executing program 5 (id=374):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket(0x11, 0x1, 0x800)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0xfffffffffffffd61)
r1 = syz_open_dev$vim2m(0x0, 0x10002, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000006c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000900)='./config\x00', &(0x7f0000000940)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1\x00', 0x1c0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/idVendor\x00', 0x80200, 0x0)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0)
symlinkat(&(0x7f0000000a80)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000d40)='dummy_udc.0', 0xb)

593.94525ms ago: executing program 4 (id=375):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
getrlimit(0x6, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000001d80)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f000001ad80), 0x10106, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r2], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
ptrace$peekuser(0x3, 0x0, 0x1)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001adc0)={0x11, 0x13, &(0x7f000001ae80)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000010000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f000001af40)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)

0s ago: executing program 5 (id=376):
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xd2d2, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0x7c, 0xf7ffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x3e7cd172}, {0x0, 0xffffffff}, {0x9, 0xffffffff}, {0x0, 0xffffffff}, {0x4, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0x3}], '\x00', 0x2})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000940)={0x0, 0x0, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"})
syz_open_pts(0xffffffffffffffff, 0x2000)
io_setup(0x200007, 0x0)
eventfd(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000980)={0x7, 0xfe}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000009c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000a80)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000b00), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000b40), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
msgget(0x1, 0x240)
msgctl$IPC_RMID(0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts.
[   67.196293][ T5771] cgroup: Unknown subsys name 'net'
[   67.331165][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.697244][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.629091][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.641265][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.650151][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.658001][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.666558][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.675739][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.685455][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.692936][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.701466][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.710125][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.718029][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.727189][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   70.744722][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.751329][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.767097][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.776775][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.784453][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   70.787594][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.791768][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.799287][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   70.807129][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   70.813122][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.819519][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.834409][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.900435][ T5785] (null): rxe_set_mtu: Set mtu to 1024
[   70.907758][ T5786] (null): rxe_set_mtu: Set mtu to 1024
[   70.914522][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   70.923277][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   70.944109][ T5783] (null): rxe_set_mtu: Set mtu to 1024
[   70.950880][ T5784] (null): rxe_set_mtu: Set mtu to 1024
[   70.962693][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   70.969524][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   70.979727][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   70.981350][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   71.216060][ T5786] infiniband rxe0: set active
[   71.221662][  T790] rxe_eth0 speed is unknown, defaulting to 1000
[   71.228303][ T5786] infiniband rxe0: added rxe_eth0
[   71.306884][ T5786] RDS/IB: rxe0: added
[   71.326560][ T5786] smc: adding ib device rxe0 with port count 1
[   71.332990][ T5786] smc:    ib device rxe0 port 1 has pnetid 
[   71.370291][  T972] rxe_eth0 speed is unknown, defaulting to 1000
[   71.402273][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   71.488206][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[   71.494778][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[   71.561828][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   71.644286][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   71.690847][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   71.703050][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   71.999568][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   72.014735][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.021908][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.034139][ T5785] bridge_slave_0: entered allmulticast mode
[   72.045776][ T5785] bridge_slave_0: entered promiscuous mode
[   72.062646][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.069910][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.080346][ T5783] bridge_slave_0: entered allmulticast mode
[   72.087739][ T5783] bridge_slave_0: entered promiscuous mode
[   72.096390][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.103504][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.110761][ T5783] bridge_slave_1: entered allmulticast mode
[   72.118162][ T5783] bridge_slave_1: entered promiscuous mode
[   72.135627][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.142789][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.150384][ T5785] bridge_slave_1: entered allmulticast mode
[   72.157825][ T5785] bridge_slave_1: entered promiscuous mode
[   72.164715][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.171847][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.182608][ T5784] bridge_slave_0: entered allmulticast mode
[   72.190215][ T5784] bridge_slave_0: entered promiscuous mode
[   72.202311][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.209667][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.220336][ T5784] bridge_slave_1: entered allmulticast mode
[   72.230164][ T5784] bridge_slave_1: entered promiscuous mode
[   72.268556][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.307410][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.342305][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.353836][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.367304][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.376608][ T5786] rxe_eth0 speed is unknown, defaulting to 1000
[   72.404738][ T5783] team0: Port device team_slave_0 added
[   72.413810][ T5783] team0: Port device team_slave_1 added
[   72.421806][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.469963][ T5785] team0: Port device team_slave_0 added
[   72.511217][ T5785] team0: Port device team_slave_1 added
[   72.543866][ T5784] team0: Port device team_slave_0 added
[   72.568840][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.575926][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.601933][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.617326][ T5784] team0: Port device team_slave_1 added
[   72.623787][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.631030][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.657032][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.668826][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.675927][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.702158][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.717296][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.724260][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.750228][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.797500][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.804479][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.830761][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.898851][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.905962][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.916015][ T5796] Bluetooth: hci2: command tx timeout
[   72.932629][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.938307][ T5101] Bluetooth: hci0: command tx timeout
[   72.948252][ T5788] Bluetooth: hci3: command tx timeout
[   72.948441][ T5788] Bluetooth: hci1: command tx timeout
[   72.992054][ T5785] hsr_slave_0: entered promiscuous mode
[   73.001594][ T5785] hsr_slave_1: entered promiscuous mode
[   73.042385][ T5783] hsr_slave_0: entered promiscuous mode
[   73.051295][ T5783] hsr_slave_1: entered promiscuous mode
[   73.058983][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.067571][ T5783] Cannot create hsr debugfs directory
[   73.193039][ T5784] hsr_slave_0: entered promiscuous mode
[   73.201420][ T5784] hsr_slave_1: entered promiscuous mode
[   73.210956][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.220076][ T5784] Cannot create hsr debugfs directory
[   73.426296][  T972] rxe_eth0 speed is unknown, defaulting to 1000
[   73.622880][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   73.804545][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.841184][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.848549][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.860862][ T5786] bridge_slave_0: entered allmulticast mode
[   73.868365][ T5786] bridge_slave_0: entered promiscuous mode
[   73.886069][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.897552][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.918204][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.925575][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.932762][ T5786] bridge_slave_1: entered allmulticast mode
[   73.940020][ T5786] bridge_slave_1: entered promiscuous mode
[   73.947851][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.996367][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.009726][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.055963][ T5449] infiniband rxe0: set active
[   74.075316][ T5786] team0: Port device team_slave_0 added
[   74.085451][ T5786] team0: Port device team_slave_1 added
[   74.091460][  T790] rxe_eth0 speed is unknown, defaulting to 1000
[   74.105851][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.117088][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.148440][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.159784][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.200043][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.207724][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.234160][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.246605][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.253562][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.280130][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.347640][ T5786] hsr_slave_0: entered promiscuous mode
[   74.353830][ T5786] hsr_slave_1: entered promiscuous mode
[   74.361198][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.368968][ T5786] Cannot create hsr debugfs directory
[   74.388875][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.424530][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.436528][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.450443][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.659775][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.673110][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.682953][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.696326][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.761390][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.796172][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.828198][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   74.861379][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.868759][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.881077][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.888213][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.910113][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   74.958573][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.972336][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.979549][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.995927][ T5101] Bluetooth: hci0: command tx timeout
[   74.995974][ T5796] Bluetooth: hci2: command tx timeout
[   75.006770][ T5101] Bluetooth: hci1: command tx timeout
[   75.006799][ T5101] Bluetooth: hci3: command tx timeout
[   75.023991][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.031164][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.051194][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   75.081352][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.100033][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.107217][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.130099][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.137280][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.158546][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   75.170878][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.178063][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.237636][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.244841][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.282737][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.622161][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.690032][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.764350][ T5783] veth0_vlan: entered promiscuous mode
[   75.792835][ T5783] veth1_vlan: entered promiscuous mode
[   75.853170][ T5785] veth0_vlan: entered promiscuous mode
[   75.881970][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.889702][ T5785] veth1_vlan: entered promiscuous mode
[   75.902075][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.927533][ T5783] veth0_macvtap: entered promiscuous mode
[   75.951213][ T5783] veth1_macvtap: entered promiscuous mode
[   75.980801][ T5785] veth0_macvtap: entered promiscuous mode
[   75.991452][ T5785] veth1_macvtap: entered promiscuous mode
[   76.044519][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.077358][ T5784] veth0_vlan: entered promiscuous mode
[   76.083525][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.094425][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.107622][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.122625][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.140322][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.150331][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.160015][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.169528][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.182652][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.198023][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.209529][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.220808][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.229998][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.238981][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.249183][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.278682][ T5784] veth1_vlan: entered promiscuous mode
[   76.294478][ T5786] veth0_vlan: entered promiscuous mode
[   76.351051][ T5786] veth1_vlan: entered promiscuous mode
[   76.404084][ T4473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.428818][ T4473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.479674][ T5784] veth0_macvtap: entered promiscuous mode
[   76.489977][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.490470][ T5784] veth1_macvtap: entered promiscuous mode
[   76.509903][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.562402][ T5786] veth0_macvtap: entered promiscuous mode
[   76.580676][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.592685][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.603682][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.614446][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.627313][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.651959][ T5786] veth1_macvtap: entered promiscuous mode
[   76.659669][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.661483][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.691076][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.701975][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.713716][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.728174][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.741475][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.764896][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.789407][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.799174][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.812604][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.822832][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.863547][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.875601][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.885707][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.896184][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.906154][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.919006][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.932949][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.953813][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.963338][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.981984][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.993799][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.014143][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.028171][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.039351][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.050912][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.075201][ T5795] Bluetooth: hci3: command tx timeout
[   77.075409][ T5101] Bluetooth: hci1: command tx timeout
[   77.083549][ T5788] Bluetooth: hci0: command tx timeout
[   77.093907][ T5796] Bluetooth: hci2: command tx timeout
[   77.143795][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.247605][ T5901] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   77.257008][ T5901] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   77.481652][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.578617][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.625596][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.641477][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.981738][ T5013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.010751][ T5013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.040857][ T5905] syz.1.5[5905]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   78.061106][ T5905] loop1: detected capacity change from 0 to 512
[   78.078281][ T5905] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.103195][ T5905] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.142641][ T5907] loop0: detected capacity change from 0 to 4096
[   78.186500][ T5905] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.5: invalid indirect mapped block 83886080 (level 1)
[   78.212996][ T5907] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[   78.229183][ T4473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.239966][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.245240][ T5907] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[   78.256400][ T5905] EXT4-fs (loop1): Remounting filesystem read-only
[   78.264027][ T5905] EXT4-fs (loop1): 1 orphan inode deleted
[   78.270221][ T5907] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   78.277963][ T5907]  loop0:
[   78.280988][ T4473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.288461][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.298698][ T5905] EXT4-fs (loop1): 1 truncate cleaned up
[   78.324499][ T5905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.397145][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.440069][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.693623][ T5914] loop0: detected capacity change from 0 to 256
[   78.748857][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.752217][ T5914] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   78.827815][ T5916] bridge_slave_0: left allmulticast mode
[   78.833514][ T5916] bridge_slave_0: left promiscuous mode
[   78.873394][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.939196][ T5916] bridge_slave_1: left allmulticast mode
[   78.954806][ T5916] bridge_slave_1: left promiscuous mode
[   78.961349][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.988009][ T5916] bond0: (slave bond_slave_0): Releasing backup interface
[   79.013755][ T5916] bond0: (slave bond_slave_1): Releasing backup interface
[   79.069412][ T5916] team0: Failed to send options change via netlink (err -105)
[   79.080064][ T5916] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   79.092152][ T5916] team0: Port device team_slave_0 removed
[   79.122351][ T5916] team0: Failed to send options change via netlink (err -105)
[   79.145420][ T5916] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   79.165004][ T5101] Bluetooth: hci1: command tx timeout
[   79.166445][ T5795] Bluetooth: hci0: command tx timeout
[   79.176217][ T5796] Bluetooth: hci2: command tx timeout
[   79.187361][ T5916] team0: Port device team_slave_1 removed
[   79.194209][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.201936][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.211306][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.219571][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.324343][ T5920] team0: Failed to send options change via netlink (err -105)
[   79.336852][ T5920] team0: Mode changed to "activebackup"
[   79.660654][ T4473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.333834][ T5937] binder: 5936:5937 ioctl c0306201 2000000000c0 returned -14
[   80.571637][ T5937] binder: 5936:5937 ioctl c0306201 200000000480 returned -14
[   80.588686][ T4473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.873766][ T5940] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[   80.883379][ T5940] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[   81.373792][ T4473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.526150][ T5948] loop3: detected capacity change from 0 to 128
[   81.534439][ T5948] FAT-fs (loop3): Unrecognized mount option "d
" or missing value
[   81.545044][ T4473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.608979][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.625481][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.636378][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.805119][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.820594][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   81.830017][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.537367][ T5949] rxe_eth0 speed is unknown, defaulting to 1000
[   82.915838][ T5903] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   83.154231][ T5903] usb 1-1: not running at top speed; connect to a high speed hub
[   83.173312][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.212346][ T5903] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[   83.230605][ T5903] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[   83.302583][ T5903] usb 1-1: Product: syz
[   83.328751][ T5903] usb 1-1: Manufacturer: syz
[   83.399063][ T5903] usb 1-1: Found UVC 1.00 device syz (225a:e1d4)
[   83.608790][ T5903] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   83.619138][ T5903] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[   83.629208][ T5903] uvcvideo 1-1:1.1: Failed to initialize the device (-71).
[   83.663662][ T5903] usb 1-1: USB disconnect, device number 2
[   83.704891][    T9] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[   83.849540][ T5949] chnl_net:caif_netlink_parms(): no params data found
[   83.875937][ T5795] Bluetooth: hci3: command tx timeout
[   83.910641][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[   83.930408][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   83.944428][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00
[   83.962585][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.992548][    T9] usb 3-1: config 0 descriptor??
[   84.010615][ T5974] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   84.102729][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.121688][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.131135][ T5949] bridge_slave_0: entered allmulticast mode
[   84.144543][ T5949] bridge_slave_0: entered promiscuous mode
[   84.156067][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.163294][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.177560][ T5949] bridge_slave_1: entered allmulticast mode
[   84.188171][ T5949] bridge_slave_1: entered promiscuous mode
[   84.333598][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.348431][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.483888][ T5949] team0: Port device team_slave_0 added
[   84.512652][ T5996] Zero length message leads to an empty skb
[   84.516294][    T9] apple 0003:05AC:0242.0001: unknown main item tag 0x0
[   84.529121][ T5949] team0: Port device team_slave_1 added
[   84.557075][    T9] apple 0003:05AC:0242.0001: unbalanced collection at end of report description
[   84.580226][    T9] apple 0003:05AC:0242.0001: parse failed
[   84.631876][    T9] apple: probe of 0003:05AC:0242.0001 failed with error -22
[   84.752015][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.781966][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.824880][    T9] usb 3-1: USB disconnect, device number 2
[   84.860508][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.893185][ T6007] ip_tables: iptables: counters copy to user failed while replacing table
[   84.907939][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.927628][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.973231][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.001699][ T4473] hsr_slave_0: left promiscuous mode
[   85.013599][ T4473] hsr_slave_1: left promiscuous mode
[   85.027966][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.052878][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.076654][ T4473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.084198][ T4473] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.105186][ T4473] bridge_slave_1: left allmulticast mode
[   85.110882][ T4473] bridge_slave_1: left promiscuous mode
[   85.118455][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.132946][ T4473] bridge_slave_0: left allmulticast mode
[   85.145850][ T4473] bridge_slave_0: left promiscuous mode
[   85.152381][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.208882][ T4473] veth1_macvtap: left promiscuous mode
[   85.215055][ T4473] veth0_macvtap: left promiscuous mode
[   85.220710][ T4473] veth1_vlan: left promiscuous mode
[   85.235170][ T4473] veth0_vlan: left promiscuous mode
[   85.305901][ T6010] capability: warning: `syz.0.25' uses deprecated v2 capabilities in a way that may be insecure
[   86.004845][ T5795] Bluetooth: hci3: command tx timeout
[   86.457490][ T6020] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   86.844354][   T23] cfg80211: failed to load regulatory.db
[   87.143362][ T4473] team0 (unregistering): Port device team_slave_1 removed
[   87.247618][ T4473] team0 (unregistering): Port device team_slave_0 removed
[   87.356056][ T4473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.463838][ T4473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.125224][ T5795] Bluetooth: hci3: command tx timeout
[   89.376120][ T4473] bond0 (unregistering): Released all slaves
[   89.628754][ T5949] hsr_slave_0: entered promiscuous mode
[   89.659240][ T5949] hsr_slave_1: entered promiscuous mode
[   90.067173][ T5949] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.087089][ T6055] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   90.102898][ T5949] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.118731][ T5949] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.139963][ T5949] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.261324][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.290672][ T5949] 8021q: adding VLAN 0 to HW filter on device team0
[   90.311986][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.319221][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.353677][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.360899][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.412184][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.633920][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.011794][ T5949] veth0_vlan: entered promiscuous mode
[   91.052331][ T5949] veth1_vlan: entered promiscuous mode
[   91.154948][ T5795] Bluetooth: hci3: command tx timeout
[   91.166637][ T5949] veth0_macvtap: entered promiscuous mode
[   91.211582][ T5949] veth1_macvtap: entered promiscuous mode
[   91.308736][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.351288][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.385689][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.407974][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.430521][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.469861][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.503764][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.524642][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.547370][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.572508][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.601601][ T5949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.623444][ T5949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.633136][ T5949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.648144][ T5949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.842165][ T4473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.876040][ T4473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.942111][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.971956][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.218452][ T6110] syzkaller0: entered promiscuous mode
[   92.223997][ T6110] syzkaller0: entered allmulticast mode
[   92.379626][ T6122] Bluetooth: MGMT ver 1.22
[   93.752069][  T972] rxe_eth0 speed is unknown, defaulting to 1000
[   95.000251][ T5795] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   95.007960][ T5795] Bluetooth: hci2: command 0x0401 tx timeout
[   95.420729][ T6158] loop3: detected capacity change from 0 to 4096
[   95.446346][ T6158] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.751774][ T6158] EXT4-fs (loop3): Test dummy encryption mode enabled
[   95.820668][ T6158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.177272][ T6158] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   96.228615][ T6175] syz.4.48 uses obsolete (PF_INET,SOCK_PACKET)
[   96.297017][ T6173] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[   96.462991][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.418940][ T6197] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[   97.437967][   T28] audit: type=1326 audit(1793929882.438:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   97.841798][   T28] audit: type=1326 audit(1793929882.438:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   97.896281][ T6205] loop3: detected capacity change from 0 to 8
[   98.123638][   T28] audit: type=1326 audit(1793929882.448:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   98.158275][ T6205] SQUASHFS error: lzo decompression failed, data probably corrupt
[   98.174780][   T28] audit: type=1326 audit(1793929882.448:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   98.201212][ T6205] SQUASHFS error: Failed to read block 0x144: -5
[   98.244754][ T6205] SQUASHFS error: Unable to read metadata cache entry [142]
[   98.267436][ T6205] SQUASHFS error: Unable to read inode 0x11f
[   98.304741][   T28] audit: type=1326 audit(1793929882.448:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   98.351203][ T6201] syz.2.52 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000
[   98.361962][   T28] audit: type=1326 audit(1793929882.448:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   98.408718][ T6201] CPU: 0 PID: 6201 Comm: syz.2.52 Not tainted syzkaller #0
[   98.415981][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   98.426070][ T6201] Call Trace:
[   98.429369][ T6201]  <TASK>
[   98.430143][   T28] audit: type=1326 audit(1793929882.448:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   98.432299][ T6201]  dump_stack_lvl+0x18c/0x250
[   98.460803][ T6201]  ? show_regs_print_info+0x20/0x20
[   98.466034][ T6201]  ? load_image+0x420/0x420
[   98.470564][ T6201]  ? ___ratelimit+0x478/0x610
[   98.475279][ T6201]  ? radix_tree_cpu_dead+0x160/0x160
[   98.480644][ T6201]  dump_header+0xd8/0x820
[   98.485042][ T6201]  oom_kill_process+0x390/0x580
[   98.489917][ T6201]  out_of_memory+0xe0e/0x1200
[   98.494611][ T6201]  ? mem_cgroup_out_of_memory+0xc1/0x390
[   98.500247][ T6201]  ? mutex_lock_nested+0x20/0x20
[   98.505186][ T6201]  ? unregister_oom_notifier+0x20/0x20
[   98.510649][ T6201]  mem_cgroup_out_of_memory+0x2c2/0x390
[   98.516190][ T6201]  ? try_charge_memcg+0xc8c/0x17c0
[   98.521298][ T6201]  ? drain_local_stock+0x630/0x630
[   98.526416][ T6201]  ? do_raw_spin_unlock+0x121/0x230
[   98.531613][ T6201]  try_charge_memcg+0xc9c/0x17c0
[   98.536547][ T6201]  ? __lock_acquire+0x7eb0/0x7eb0
[   98.541582][ T6201]  ? folio_flags+0x120/0x120
[   98.546170][ T6201]  ? percpu_ref_tryget+0x15/0x180
[   98.551190][ T6201]  ? get_mem_cgroup_from_objcg+0x19/0x150
[   98.556906][ T6201]  ? __memcg_kmem_charge_page+0xeb/0x380
[   98.562543][ T6201]  ? get_mem_cgroup_from_objcg+0x19/0x150
[   98.568263][ T6201]  ? get_mem_cgroup_from_objcg+0x19/0x150
[   98.573982][ T6201]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[   98.579784][ T6201]  __memcg_kmem_charge_page+0x224/0x380
[   98.585328][ T6201]  __alloc_pages+0x222/0x460
[   98.589923][ T6201]  ? zone_statistics+0x170/0x170
[   98.594857][ T6201]  ? __mod_lruvec_page_state+0xa5/0x410
[   98.600396][ T6201]  ? do_raw_spin_unlock+0x121/0x230
[   98.605591][ T6201]  ? __pmd_alloc+0x68c/0x8c0
[   98.610178][ T6201]  pte_alloc_one+0x84/0x540
[   98.614681][ T6201]  ? pfn_modify_allowed+0x560/0x560
[   98.619896][ T6201]  ? hugepage_vma_check+0x6bb/0x7f0
[   98.625113][ T6201]  handle_mm_fault+0x2f6c/0x4a40
[   98.630066][ T6201]  ? handle_mm_fault+0xe6/0x4a40
[   98.635018][ T6201]  ? numa_migrate_prep+0x350/0x350
[   98.640136][ T6201]  ? lock_chain_count+0x20/0x20
[   98.644986][ T6201]  ? futex_wait+0x529/0x640
[   98.649490][ T6201]  ? lock_mm_and_find_vma+0x9c/0x2f0
[   98.654774][ T6201]  do_user_addr_fault+0xeb7/0x13e0
[   98.659899][ T6201]  exc_page_fault+0x64/0x100
[   98.664484][ T6201]  asm_exc_page_fault+0x26/0x30
[   98.669370][ T6201] RIP: 0010:rep_movs_alternative+0x13/0x90
[   98.675176][ T6201] Code: b6 48 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00
[   98.694812][ T6201] RSP: 0018:ffffc900051ffd90 EFLAGS: 00050202
[   98.701051][ T6201] RAX: ffffffff842f2a01 RBX: 0000000000000004 RCX: 0000000000000004
[   98.709388][ T6201] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900051ffe20
[   98.717354][ T6201] RBP: ffffc900051ffea0 R08: 0000000000000003 R09: 0000000000000004
[   98.725320][ T6201] R10: dffffc0000000000 R11: fffff52000a3ffc4 R12: 0000000000000004
[   98.733285][ T6201] R13: ffffc900051ffe20 R14: ffffc900051ffe20 R15: 0000000000000000
[   98.741267][ T6201]  ? rcuref_put_slowpath+0x131/0x150
[   98.746566][ T6201]  _copy_from_user+0x8b/0xe0
[   98.751157][ T6201]  do_sock_getsockopt+0x188/0x450
[   98.756189][ T6201]  ? __ia32_sys_setsockopt+0x200/0x200
[   98.761641][ T6201]  ? lockdep_hardirqs_on+0x50/0x150
[   98.766841][ T6201]  __x64_sys_getsockopt+0x1d6/0x280
[   98.772036][ T6201]  ? lockdep_hardirqs_on+0x50/0x150
[   98.777232][ T6201]  ? lockdep_hardirqs_on+0x50/0x150
[   98.782428][ T6201]  do_syscall_64+0x55/0xb0
[   98.786845][ T6201]  ? clear_bhb_loop+0x40/0x90
[   98.791533][ T6201]  ? clear_bhb_loop+0x40/0x90
[   98.796219][ T6201]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.802115][ T6201] RIP: 0033:0x7fc14879fb19
[   98.806536][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.826147][ T6201] RSP: 002b:00007fc1495f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   98.834562][ T6201] RAX: ffffffffffffffda RBX: 00007fc148a25fa0 RCX: 00007fc14879fb19
[   98.842633][ T6201] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000003
[   98.850874][ T6201] RBP: 00007fc148837b70 R08: 0000000000000000 R09: 0000000000000000
[   98.858844][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.866813][ T6201] R13: 00007fc148a26038 R14: 00007fc148a25fa0 R15: 00007ffd9a6f7518
[   98.874823][ T6201]  </TASK>
[   98.904712][   T28] audit: type=1326 audit(1793929882.448:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   98.919344][ T6201] memory: usage 8kB, limit 8kB, failcnt 26
[   98.981596][   T28] audit: type=1326 audit(1793929882.448:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   98.994642][ T6201] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0
[   99.083484][ T6201] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[   99.183339][   T28] audit: type=1326 audit(1793929882.448:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.3.49" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2539fb19 code=0x7ffc0000
[   99.456651][ T6201] Memory cgroup stats for /syz2/test:
[   99.457893][ T6201] cache 0
[   99.679449][ T6201] rss 0
[   99.733465][ T6201] rss_huge 0
[   99.803293][ T6201] shmem 0
[   99.847166][ T6201] mapped_file 0
[  100.088815][ T6201] dirty 0
[  100.110829][ T6201] writeback 0
[  100.167725][ T6201] workingset_refault_anon 0
[  100.243363][ T6201] workingset_refault_file 0
[  100.323700][ T6201] swap 4096
[  100.367198][ T6201] pgpgin 1
[  100.431281][ T6201] pgpgout 1
[  100.438795][ T6221] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  100.446431][ T6201] pgfault 19
[  100.449704][ T6201] pgmajfault 0
[  100.453091][ T6201] inactive_anon 0
[  100.463286][ T6201] active_anon 0
[  100.470502][ T6201] inactive_file 0
[  100.493539][ T6201] active_file 0
[  100.506547][ T6201] unevictable 0
[  100.510061][ T6201] hierarchical_memory_limit 8192
[  100.576588][ T6201] hierarchical_memsw_limit 9223372036854771712
[  100.619410][ T6201] total_cache 0
[  100.622935][ T6201] total_rss 0
[  100.649383][ T6201] total_rss_huge 0
[  100.665067][ T6201] total_shmem 0
[  100.668780][ T6201] total_mapped_file 0
[  100.672790][ T6201] total_dirty 0
[  100.683637][ T6201] total_writeback 0
[  100.694081][ T6201] total_workingset_refault_anon 0
[  100.702670][ T6201] total_workingset_refault_file 0
[  100.711149][ T6201] total_swap 4096
[  100.716220][ T6201] total_pgpgin 1
[  100.719793][ T6201] total_pgpgout 1
[  100.723438][ T6201] total_pgfault 19
[  100.756461][ T6201] total_pgmajfault 0
[  100.760416][ T6201] total_inactive_anon 0
[  100.769351][ T6201] total_active_anon 0
[  100.773377][ T6201] total_inactive_file 0
[  100.778188][ T6201] total_active_file 0
[  100.782188][ T6201] total_unevictable 0
[  100.797746][ T6201] anon_cost 0
[  100.811445][ T6201] file_cost 0
[  100.830789][ T6201] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.52,pid=6200,uid=0
[  100.985858][ T6201] Memory cgroup out of memory: Killed process 6201 (syz.2.52) total-vm:116744kB, anon-rss:1392kB, file-rss:23168kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  101.635418][ T6201] syz.2.52 (6201) used greatest stack depth: 19192 bytes left
[  101.991866][ T6257] binder: 6256:6257 ioctl c0306201 200000000800 returned -14
[  102.224168][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.234079][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.246488][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.255602][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.267390][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.276792][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.287405][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.296518][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.307260][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  102.316398][ T6268] netlink: 124 bytes leftover after parsing attributes in process `syz.2.63'.
[  103.016709][ T6266] syzkaller0: entered promiscuous mode
[  103.022231][ T6266] syzkaller0: entered allmulticast mode
[  103.384828][   T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  104.178520][   T23] usb 5-1: not running at top speed; connect to a high speed hub
[  104.205870][   T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  104.282263][   T23] usb 5-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40
[  104.295237][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.311794][   T23] usb 5-1: Product: syz
[  104.330443][   T23] usb 5-1: Manufacturer: syz
[  104.341477][   T23] usb 5-1: SerialNumber: syz
[  104.480507][ T6303] netlink: 'syz.0.73': attribute type 12 has an invalid length.
[  104.608468][   T23] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  104.637573][   T23] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  104.664789][   T23] usb 5-1: 2:1 : sample bitwidth 2 in over sample bytes 0
[  104.671993][   T23] usb 5-1: 2:1 : unsupported sample bitwidth 2 in 0 bytes
[  104.822178][   T23] usb 5-1: USB disconnect, device number 2
[  104.892652][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  105.212838][ T6322] loop2: detected capacity change from 0 to 512
[  105.257976][ T6322] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  105.297625][ T6322] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.75: invalid indirect mapped block 256 (level 1)
[  105.309583][ T5801] udevd[5801]: symlink '../../loop2' '/dev/disk/by-diskseq/81.tmp-b7:2' failed: Read-only file system
[  105.366490][ T5801] udevd[5801]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  105.378756][ T6322] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.75: invalid indirect mapped block 2683928664 (level 1)
[  105.428081][ T6322] EXT4-fs (loop2): 1 truncate cleaned up
[  105.452441][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.471171][ T5801] udevd[5801]: symlink '../../loop2' '/dev/disk/by-diskseq/81.tmp-b7:2' failed: Read-only file system
[  105.580281][ T6331] CIFS: Attempting to mount //127.0.0.1/share
[  105.643388][ T5801] udevd[5801]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  105.831292][ T6332] CIFS: VFS: Invalid response size 0 for command 0
[  105.866096][ T6332] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1
[  105.880984][ T6332] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x20
[  106.474290][ T6331] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  106.522252][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.527436][ T6331] CIFS: VFS: cifs_mount failed w/return code = -112
[  106.607403][ T5801] udevd[5801]: symlink '../../loop2' '/dev/disk/by-diskseq/81.tmp-b7:2' failed: Read-only file system
[  106.673756][ T5801] udevd[5801]: symlink '../../loop2' '/dev/disk/by-diskseq/81.tmp-b7:2' failed: Read-only file system
[  106.711217][ T6350] netlink: 'syz.4.79': attribute type 4 has an invalid length.
[  106.982488][ T6372] loop0: detected capacity change from 0 to 256
[  107.045855][ T6372] exfat: Deprecated parameter 'namecase'
[  107.129001][ T5801] udevd[5801]: symlink '../../loop0' '/dev/disk/by-diskseq/83.tmp-b7:0' failed: Read-only file system
[  107.181601][ T5801] udevd[5801]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system
[  107.186056][ T6372] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  107.289054][ T5801] udevd[5801]: symlink '../../loop0' '/dev/disk/by-diskseq/83.tmp-b7:0' failed: Read-only file system
[  107.351086][ T6378] loop3: detected capacity change from 0 to 1024
[  107.392482][ T6378] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.454548][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.465958][ T6381] Set syz1 is full, maxelem 2 reached
[  107.649623][ T6386] netlink: 'syz.4.84': attribute type 2 has an invalid length.
[  107.699390][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.719826][ T6391] loop2: detected capacity change from 0 to 164
[  107.748638][ T6389] loop0: detected capacity change from 0 to 1024
[  107.773920][ T6389] =======================================================
[  107.773920][ T6389] WARNING: The mand mount option has been deprecated and
[  107.773920][ T6389]          and is ignored by this kernel. Remove the mand
[  107.773920][ T6389]          option from the mount to silence this warning.
[  107.773920][ T6389] =======================================================
[  107.909552][ T6389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  107.987424][ T6389] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.085751][ T6388] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.87: lblock 0 mapped to illegal pblock 0 (length 1)
[  108.137321][ T6388] EXT4-fs (loop0): Remounting filesystem read-only
[  108.222998][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  108.266489][ T6404] syzkaller0: entered promiscuous mode
[  108.281680][ T6404] syzkaller0: entered allmulticast mode
[  108.322998][ T6404] tipc: Started in network mode
[  108.921972][ T6404] tipc: Node identity 3aefaa2f56bc, cluster identity 4711
[  108.966885][ T6404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.025128][ T6403] tipc: Resetting bearer <eth:syzkaller0>
[  109.095485][ T6411] loop0: detected capacity change from 0 to 2048
[  109.110490][ T6403] tipc: Disabling bearer <eth:syzkaller0>
[  109.242490][ T6411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.743577][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.805459][ T5801] udevd[5801]: symlink '../../loop0' '/dev/disk/by-diskseq/91.tmp-b7:0' failed: Read-only file system
[  110.828294][ T5801] udevd[5801]: symlink '../../loop0' '/dev/disk/by-diskseq/91.tmp-b7:0' failed: Read-only file system
[  111.320400][ T6457] x86/PAT: syz.2.94:6457 freeing invalid memtype [mem 0xfe004000-0xfe004fff]
[  111.637095][ T6469] ip_tables: iptables: counters copy to user failed while replacing table
[  112.711875][   T28] kauditd_printk_skb: 44 callbacks suppressed
[  112.711889][   T28] audit: type=1800 audit(1793929897.708:56): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.103" name="file2" dev="sda1" ino=2045 res=0 errno=0
[  114.883033][ T6548] __nla_validate_parse: 17 callbacks suppressed
[  114.883048][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[  114.903414][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.108268][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.396772][ T6561] loop3: detected capacity change from 0 to 128
[  116.416274][ T6561] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  116.490356][ T6561] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  116.625207][   T60] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  116.631086][ T6564] ip_tables: iptables: counters copy to user failed while replacing table
[  116.666889][ T6564] syz_tun: entered allmulticast mode
[  116.676086][ T6561] veth0: entered promiscuous mode
[  116.776851][ T6561] veth0: left promiscuous mode
[  116.900773][ T6570] Bluetooth: MGMT ver 1.22
[  117.013066][ T6573] pimreg: entered allmulticast mode
[  119.419856][ T6597] syzkaller0: entered promiscuous mode
[  119.445188][ T6597] syzkaller0: entered allmulticast mode
[  124.929286][ T6639] FAULT_INJECTION: forcing a failure.
[  124.929286][ T6639] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  125.028406][ T6639] CPU: 1 PID: 6639 Comm: syz.3.136 Not tainted syzkaller #0
[  125.035763][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  125.045849][ T6639] Call Trace:
[  125.049166][ T6639]  <TASK>
[  125.052116][ T6639]  dump_stack_lvl+0x18c/0x250
[  125.056849][ T6639]  ? show_regs_print_info+0x20/0x20
[  125.062090][ T6639]  ? load_image+0x420/0x420
[  125.066627][ T6639]  ? __might_fault+0xaa/0x120
[  125.071337][ T6639]  ? __lock_acquire+0x7eb0/0x7eb0
[  125.076427][ T6639]  ? __local_bh_enable_ip+0x13a/0x1c0
[  125.081829][ T6639]  ? _local_bh_enable+0xa0/0xa0
[  125.086715][ T6639]  should_fail_ex+0x394/0x4c0
[  125.091426][ T6639]  copy_fpstate_to_sigframe+0xa0c/0xce0
[  125.097006][ T6639]  ? copy_fpstate_to_sigframe+0x188/0xce0
[  125.102768][ T6639]  ? fpregs_set+0x370/0x370
[  125.107330][ T6639]  ? fpu__alloc_mathframe+0xa7/0x120
[  125.112649][ T6639]  get_sigframe+0x5de/0x7d0
[  125.117201][ T6639]  ? load_gs_index+0x1a0/0x1a0
[  125.122002][ T6639]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  125.128010][ T6639]  ? get_signal+0x1197/0x1390
[  125.132718][ T6639]  x64_setup_rt_frame+0x164/0xc30
[  125.137778][ T6639]  ? lockdep_hardirqs_on+0x98/0x150
[  125.143000][ T6639]  ? _raw_spin_unlock_irq+0x2e/0x50
[  125.148232][ T6639]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  125.154244][ T6639]  ? sigaltstack_size_valid+0x1e0/0x1e0
[  125.159821][ T6639]  ? arch_do_signal_or_restart+0x39b/0x7b0
[  125.165670][ T6639]  arch_do_signal_or_restart+0x411/0x7b0
[  125.171341][ T6639]  ? get_sigframe_size+0x20/0x20
[  125.176332][ T6639]  ? exit_to_user_mode_loop+0x3b/0x110
[  125.181834][ T6639]  exit_to_user_mode_loop+0x70/0x110
[  125.187157][ T6639]  exit_to_user_mode_prepare+0xee/0x180
[  125.192739][ T6639]  syscall_exit_to_user_mode+0x1a/0x50
[  125.198226][ T6639]  do_syscall_64+0x61/0xb0
[  125.202671][ T6639]  ? clear_bhb_loop+0x40/0x90
[  125.207375][ T6639]  ? clear_bhb_loop+0x40/0x90
[  125.212106][ T6639]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.218025][ T6639] RIP: 0033:0x7f7a2539fb17
[  125.222483][ T6639] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  125.242116][ T6639] RSP: 002b:00007f7a26220028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.250566][ T6639] RAX: 000000000000002e RBX: 00007f7a25625fa0 RCX: 00007f7a2539fb19
[  125.258570][ T6639] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000005
[  125.266569][ T6639] RBP: 00007f7a25437b70 R08: 0000000000000000 R09: 0000000000000000
[  125.274599][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.282607][ T6639] R13: 00007f7a25626038 R14: 00007f7a25625fa0 R15: 00007fffd216da78
[  125.290628][ T6639]  </TASK>
[  127.203269][   T28] audit: type=1800 audit(1793929912.198:57): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.144" name=08 dev="sda1" ino=2047 res=0 errno=0
[  128.753448][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.764444][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.774714][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.790279][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.800031][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  128.808592][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.980354][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'.
[  129.087626][ T6699] syz_tun (unregistering): left allmulticast mode
[  129.105277][ T6704] jffs2: notice: (6704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  129.184302][ T3549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.245659][ T6696] rxe_eth0 speed is unknown, defaulting to 1000
[  129.437414][ T3549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.859551][ T3549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.915581][ T5795] Bluetooth: hci4: command tx timeout
[  130.950474][ T6714] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.148'.
[  130.959816][ T6714] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  131.269637][ T3549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.929943][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.939998][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.994766][ T5795] Bluetooth: hci4: command tx timeout
[  133.333675][ T6696] chnl_net:caif_netlink_parms(): no params data found
[  134.275028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  134.684646][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  135.075713][ T5795] Bluetooth: hci4: command tx timeout
[  135.329403][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.364803][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.372076][ T6696] bridge_slave_0: entered allmulticast mode
[  135.415460][ T6696] bridge_slave_0: entered promiscuous mode
[  135.614352][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.648248][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.661304][ T6696] bridge_slave_1: entered allmulticast mode
[  135.873188][ T6696] bridge_slave_1: entered promiscuous mode
[  136.347611][ T6763] tipc: Started in network mode
[  136.402350][ T6763] tipc: Node identity 3a6a7c4fe4e6, cluster identity 4711
[  136.505346][ T6763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.869245][ T6756] syzkaller0: entered promiscuous mode
[  136.931398][ T6756] syzkaller0: entered allmulticast mode
[  137.534980][ T5795] Bluetooth: hci4: command tx timeout
[  139.267545][ T6760] tipc: Resetting bearer <eth:syzkaller0>
[  139.289922][ T6755] tipc: Resetting bearer <eth:syzkaller0>
[  139.316898][ T6755] tipc: Disabling bearer <eth:syzkaller0>
[  139.355579][ T5773] tipc: Node number set to 3733748815
[  139.430375][ T6696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.539725][ T6696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.636190][ T6781] netlink: 'syz.3.155': attribute type 1 has an invalid length.
[  139.706505][ T6781] netlink: 84 bytes leftover after parsing attributes in process `syz.3.155'.
[  139.735249][ T6696] team0: Port device team_slave_0 added
[  139.759024][ T6786] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  139.847385][ T6696] team0: Port device team_slave_1 added
[  139.964236][ T6794] nfs: Unknown parameter 'fscontext'
[  140.740085][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.748093][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.784731][ T6696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.840243][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.867826][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.954966][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  142.224658][ T6696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.854950][ T6696] hsr_slave_0: entered promiscuous mode
[  143.895067][ T6696] hsr_slave_1: entered promiscuous mode
[  143.926509][ T6696] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.934123][ T6696] Cannot create hsr debugfs directory
[  144.063822][ T3549] hsr_slave_0: left promiscuous mode
[  144.110324][ T3549] hsr_slave_1: left promiscuous mode
[  144.207149][ T3549] veth1_macvtap: left promiscuous mode
[  144.223615][ T3549] veth0_macvtap: left promiscuous mode
[  144.233842][ T3549] veth1_vlan: left promiscuous mode
[  144.254015][ T3549] veth0_vlan: left promiscuous mode
[  146.332800][ T6841] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  147.056200][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801ff0d800: rx timeout, send abort
[  147.067207][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ff0d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  147.074951][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  147.484684][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  147.565850][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801ff0d800: abort rx timeout. Force session deactivation
[  148.151737][ T3549] bond0 (unregistering): Released all slaves
[  148.303485][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'.
[  148.486042][ T6849] syz.4.169 (pid 6849) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  148.587173][ T6852] loop0: detected capacity change from 0 to 2048
[  148.943198][ T6852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.955494][ T6852] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.635000][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.761973][ T6696] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  149.789843][ T6696] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  149.850894][ T6696] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  149.886155][ T6696] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  149.948407][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'.
[  149.970212][ T6876] syzkaller0: entered promiscuous mode
[  149.976320][ T6876] syzkaller0: entered allmulticast mode
[  150.123687][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.165205][ T6696] 8021q: adding VLAN 0 to HW filter on device team0
[  150.194528][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.202603][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.233161][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.240397][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.257685][ T6884] syzkaller0: entered promiscuous mode
[  150.263188][ T6884] syzkaller0: entered allmulticast mode
[  150.412980][ T6890] loop4: detected capacity change from 0 to 512
[  150.463312][ T6890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  150.472870][ T6890] System zones: 1-12
[  150.495641][ T6890] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.175: missing EA_INODE flag
[  150.522652][ T6890] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.175: error while reading EA inode 12 err=-117
[  150.554698][ T6890] EXT4-fs (loop4): 1 orphan inode deleted
[  150.562282][ T6890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.831805][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.859285][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.377528][ T6927] loop4: detected capacity change from 0 to 32768
[  152.419863][ T6927] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  152.548345][ T6927] XFS (loop4): Ending clean mount
[  152.588142][ T6927] XFS (loop4): Quotacheck needed: Please wait.
[  154.107020][ T6927] XFS (loop4): Quotacheck: Done.
[  154.184481][ T6696] veth0_vlan: entered promiscuous mode
[  154.241412][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'.
[  154.653144][ T6696] veth1_vlan: entered promiscuous mode
[  154.827710][ T5949] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.887327][ T6696] veth0_macvtap: entered promiscuous mode
[  154.928646][ T6696] veth1_macvtap: entered promiscuous mode
[  155.013486][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.058769][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.075224][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.099161][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.124659][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.145059][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.172592][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.481628][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.564660][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.574531][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.646179][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.715790][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.759736][ T6696] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.785044][ T6696] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.793793][ T6696] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.846945][ T6696] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.091995][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.119518][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.159452][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.173530][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.217955][ T6986] Set syz1 is full, maxelem 1029 reached
[  165.119879][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.193'.
[  165.602491][ T7053] loop4: detected capacity change from 0 to 512
[  165.621206][ T7053] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  165.657434][ T7053] EXT4-fs (loop4): 1 truncate cleaned up
[  165.665744][ T7053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.972281][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.307018][ T7088] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  167.447288][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[  167.631920][ T7104] loop4: detected capacity change from 0 to 512
[  167.732376][ T7104] EXT4-fs error (device loop4): ext4_init_orphan_info:585: comm syz.4.206: inode #0: comm syz.4.206: iget: illegal inode #
[  167.746540][ T7104] EXT4-fs (loop4): Remounting filesystem read-only
[  167.753083][ T7104] EXT4-fs (loop4): get orphan inode failed
[  167.759147][ T7104] EXT4-fs (loop4): mount failed
[  171.294270][ T7127] netlink: 80 bytes leftover after parsing attributes in process `syz.5.210'.
[  172.650782][ T7136] trusted_key: encrypted_key: insufficient parameters specified
[  175.235047][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  175.786113][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'.
[  177.795008][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  181.040934][ T7199] gadgetfs: bound to dummy_udc driver
[  185.261016][ T7228] 0: reclassify loop, rule prio 0, protocol 03
[  186.563076][ T7245] loop0: detected capacity change from 0 to 128
[  187.244599][    C0] sched: RT throttling activated
[  187.909442][ T7248] loop4: detected capacity change from 0 to 512
[  188.018067][ T7248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.113856][ T7248] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.167123][ T5949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.595008][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  190.730780][ T5773] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  191.073520][ T7278] syz.4.231 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  193.155039][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  193.329717][ T5773] usb 1-1: device descriptor read/all, error -71
[  193.862658][ T7301] loop0: detected capacity change from 0 to 512
[  193.905937][ T7301] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  194.306336][ T7301] EXT4-fs (loop0): 1 truncate cleaned up
[  194.320836][ T7301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.393916][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.400379][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  195.322032][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.605822][ T5796] Bluetooth: hci1: command 0x0406 tx timeout
[  198.275077][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  198.345733][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.352246][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.358417][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.364515][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.370644][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.376793][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.382891][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.389015][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.395503][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.401603][ T7325] tc action pedit 'at' offset 5 out of bounds
[  198.407772][ T7325] 0: reclassify loop, rule prio 0, protocol 800
[  198.761911][ T7336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.177735][ T7336] tipc: Resetting bearer <eth:syzkaller0>
[  200.247438][ T7344] loop5: detected capacity change from 0 to 8
[  200.278236][ T7335] tipc: Disabling bearer <eth:syzkaller0>
[  200.311142][ T7344] squashfs image failed sanity check
[  207.074729][ T5796] Bluetooth: hci3: command 0x0406 tx timeout
[  213.697509][ T7404] loop5: detected capacity change from 0 to 4096
[  215.085031][ T7404] NILFS (loop5): error -4 creating segctord thread
[  217.928772][ T7436] Mass Storage Function, version: 2009/09/11
[  217.935952][ T7436] LUN: removable file: (no medium)
[  218.336248][   T28] audit: type=1800 audit(1793930003.338:58): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.258" name="file" dev="configfs" ino=13390 res=0 errno=0
[  218.441788][ T7436] mass_storage.0/lun.0: unable to open backing file: fil
[  220.365716][   T28] audit: type=1800 audit(1793930005.358:59): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.264" name=08 dev="sda1" ino=2047 res=0 errno=0
[  231.588455][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'.
[  232.114232][ T7537] syzkaller0: entered promiscuous mode
[  232.183216][ T7537] syzkaller0: entered allmulticast mode
[  232.778821][ T7545] loop3: detected capacity change from 0 to 512
[  233.403577][ T7545] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  234.005150][ T7545] EXT4-fs (loop3): 1 truncate cleaned up
[  234.012710][ T7545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.929912][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.128459][ T7564] ip_tables: iptables: counters copy to user failed while replacing table
[  237.166223][ T7564] syz_tun: entered allmulticast mode
[  239.773147][ T7604] loop5: detected capacity change from 0 to 512
[  239.819946][ T7604] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  239.856413][ T7604] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.288: invalid indirect mapped block 256 (level 1)
[  239.892629][ T7604] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.288: invalid indirect mapped block 2683928664 (level 1)
[  239.932179][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'.
[  239.950894][ T7604] EXT4-fs (loop5): 1 truncate cleaned up
[  239.977603][ T7604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.086919][ T6696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.999860][ T7640] netlink: 'syz.5.291': attribute type 12 has an invalid length.
[  246.222686][ T7664] FAULT_INJECTION: forcing a failure.
[  246.222686][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  246.237558][ T7664] CPU: 1 PID: 7664 Comm: syz.4.303 Not tainted syzkaller #0
[  246.244915][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  246.255003][ T7664] Call Trace:
[  246.258289][ T7664]  <TASK>
[  246.261225][ T7664]  dump_stack_lvl+0x18c/0x250
[  246.265909][ T7664]  ? show_regs_print_info+0x20/0x20
[  246.271105][ T7664]  ? load_image+0x420/0x420
[  246.275602][ T7664]  ? __might_fault+0xaa/0x120
[  246.280274][ T7664]  ? __lock_acquire+0x7eb0/0x7eb0
[  246.285293][ T7664]  ? __local_bh_enable_ip+0x13a/0x1c0
[  246.290656][ T7664]  ? _local_bh_enable+0xa0/0xa0
[  246.295521][ T7664]  should_fail_ex+0x394/0x4c0
[  246.300219][ T7664]  copy_fpstate_to_sigframe+0xa0c/0xce0
[  246.305795][ T7664]  ? copy_fpstate_to_sigframe+0x188/0xce0
[  246.311536][ T7664]  ? fpregs_set+0x370/0x370
[  246.316057][ T7664]  ? fpu__alloc_mathframe+0xa7/0x120
[  246.321344][ T7664]  get_sigframe+0x5de/0x7d0
[  246.325853][ T7664]  ? load_gs_index+0x1a0/0x1a0
[  246.330617][ T7664]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  246.336592][ T7664]  ? get_signal+0x1197/0x1390
[  246.341264][ T7664]  x64_setup_rt_frame+0x164/0xc30
[  246.346287][ T7664]  ? lockdep_hardirqs_on+0x98/0x150
[  246.351481][ T7664]  ? _raw_spin_unlock_irq+0x2e/0x50
[  246.356702][ T7664]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  246.362676][ T7664]  ? sigaltstack_size_valid+0x1e0/0x1e0
[  246.368217][ T7664]  ? arch_do_signal_or_restart+0x39b/0x7b0
[  246.374021][ T7664]  arch_do_signal_or_restart+0x411/0x7b0
[  246.379655][ T7664]  ? get_sigframe_size+0x20/0x20
[  246.384606][ T7664]  ? exit_to_user_mode_loop+0x3b/0x110
[  246.390066][ T7664]  exit_to_user_mode_loop+0x70/0x110
[  246.395526][ T7664]  exit_to_user_mode_prepare+0xee/0x180
[  246.401074][ T7664]  syscall_exit_to_user_mode+0x1a/0x50
[  246.406541][ T7664]  do_syscall_64+0x61/0xb0
[  246.410963][ T7664]  ? clear_bhb_loop+0x40/0x90
[  246.415635][ T7664]  ? clear_bhb_loop+0x40/0x90
[  246.420346][ T7664]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  246.426236][ T7664] RIP: 0033:0x7f91b8d9fb17
[  246.430647][ T7664] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  246.450291][ T7664] RSP: 002b:00007f91b9c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.458701][ T7664] RAX: 000000000000002e RBX: 00007f91b9025fa0 RCX: 00007f91b8d9fb19
[  246.466666][ T7664] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000005
[  246.474636][ T7664] RBP: 00007f91b8e37b70 R08: 0000000000000000 R09: 0000000000000000
[  246.482595][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.490729][ T7664] R13: 00007f91b9026038 R14: 00007f91b9025fa0 R15: 00007fff82744fc8
[  246.498707][ T7664]  </TASK>
[  246.638451][ T7667] pimreg: entered allmulticast mode
[  246.664832][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  246.753377][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.296'.
[  247.529400][ T5875] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  247.540812][ T5875] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  247.580354][ T5875] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  247.604420][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.684910][ T5875] usb 4-1: Product: syz
[  247.692108][ T5875] usb 4-1: Manufacturer: syz
[  247.701808][ T5875] usb 4-1: SerialNumber: syz
[  247.717521][ T7662] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  247.729713][ T7662] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  247.748062][ T5875] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  247.770179][ T5875] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  247.849382][ T5875] usbserial_generic 4-1:1.0: generic converter detected
[  248.139386][ T5875] usb 4-1: generic converter now attached to ttyUSB0
[  249.033105][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'.
[  253.592713][ T5795] Bluetooth: hci4: command 0x0406 tx timeout
[  253.681652][ T5902] usb 4-1: USB disconnect, device number 2
[  253.755489][ T5902] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  253.805841][ T5902] usbserial_generic 4-1:1.0: device disconnected
[  255.807179][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.818492][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  256.224691][   T28] audit: type=1326 audit(1793930041.218:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.316146][   T28] audit: type=1326 audit(1793930041.218:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.344938][ T7748] loop0: detected capacity change from 0 to 8
[  256.396062][ T7748] SQUASHFS error: lzo decompression failed, data probably corrupt
[  256.403948][ T7748] SQUASHFS error: Failed to read block 0x144: -5
[  256.414657][   T28] audit: type=1326 audit(1793930041.248:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.447482][ T7748] SQUASHFS error: Unable to read metadata cache entry [142]
[  256.486788][ T7748] SQUASHFS error: Unable to read inode 0x11f
[  256.524713][   T28] audit: type=1326 audit(1793930041.248:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.621515][   T28] audit: type=1326 audit(1793930041.248:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.704548][   T28] audit: type=1326 audit(1793930041.248:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.781398][   T28] audit: type=1326 audit(1793930041.248:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.853844][   T28] audit: type=1326 audit(1793930041.248:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.924335][   T28] audit: type=1326 audit(1793930041.248:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  256.984829][   T28] audit: type=1326 audit(1793930041.248:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.310" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172eb9fb19 code=0x7ffc0000
[  258.652415][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[  258.992673][ T7757] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  260.486710][ T7765] team0: Port device team_slave_0 removed
[  261.174121][ T7775] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  262.908201][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.915517][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.922304][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.929139][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.936000][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.942781][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.949626][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.956440][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.963336][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.970178][ T7784] tc action pedit offset must be on 32 bit boundaries
[  262.976996][ T7784] 0: reclassify loop, rule prio 0, protocol 800
[  263.624779][ T5875] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  263.819898][ T5875] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  264.544834][ T5875] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  264.598905][ T5875] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  264.630226][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.670674][ T5875] usb 6-1: Product: syz
[  264.689739][ T5875] usb 6-1: Manufacturer: syz
[  264.727126][ T5875] usb 6-1: SerialNumber: syz
[  264.749413][ T7791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  264.763350][ T7791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  264.781179][ T5875] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  264.804331][ T5875] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  264.835134][ T5875] usbserial_generic 6-1:1.0: generic converter detected
[  264.874194][ T5875] usb 6-1: generic converter now attached to ttyUSB0
[  264.973069][   T28] kauditd_printk_skb: 44 callbacks suppressed
[  264.973083][   T28] audit: type=1800 audit(1793930049.968:114): pid=7799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.324" name=08 dev="sda1" ino=2047 res=0 errno=0
[  265.146089][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.155583][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.165429][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.174917][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.184809][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.194277][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.207631][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.217127][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.227331][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.237021][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.247753][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.257322][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.267648][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.277199][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.287881][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.297449][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.307224][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.316768][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.327486][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.337019][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.346760][    C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  265.423097][ T5875] usb 6-1: USB disconnect, device number 2
[  265.440241][ T5875] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  265.479849][ T5875] usbserial_generic 6-1:1.0: device disconnected
[  268.574752][ T7801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  268.694317][   T28] audit: type=1800 audit(1793930053.688:115): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.329" name="report_desc" dev="configfs" ino=13842 res=0 errno=0
[  268.982865][ T7823] loop3: detected capacity change from 0 to 512
[  269.039207][ T7823] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  269.247267][ T7823] EXT4-fs (loop3): 1 truncate cleaned up
[  269.286727][ T7823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.307092][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.621661][ T7843] loop3: detected capacity change from 0 to 512
[  271.677328][ T7843] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  271.718457][ T7843] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.337: invalid indirect mapped block 256 (level 1)
[  271.982165][ T7843] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.337: invalid indirect mapped block 2683928664 (level 1)
[  272.494863][ T7843] EXT4-fs (loop3): 1 truncate cleaned up
[  272.504203][ T7843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.568795][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.886729][ T7877] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  284.025123][ T5879] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  284.434815][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.525520][ T5879] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  284.641580][ T5879] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  284.840765][ T5879] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  284.890543][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  284.971699][ T5879] usb 4-1: Product: syz
[  284.983216][ T5879] usb 4-1: Manufacturer: syz
[  285.029895][ T7890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  285.046553][ T5879] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[  285.090288][ T5879] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  287.183224][ T5879] usb 4-1: USB disconnect, device number 3
[  287.241162][ T5879] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  287.299353][ T5879] garmin_gps 4-1:1.0: device disconnected
[  287.420014][ T7918] loop3: detected capacity change from 0 to 256
[  287.501177][ T7918] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  287.511786][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  287.727401][    T8] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  287.743690][    T8] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  287.764848][    T8] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  287.782520][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.811894][    T8] usb 5-1: Product: syz
[  287.824723][    T8] usb 5-1: Manufacturer: syz
[  287.965822][    T8] usb 5-1: SerialNumber: syz
[  287.979812][    T8] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[  288.654976][    T8] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  288.772295][ T7929] loop5: detected capacity change from 0 to 16
[  288.797148][    T8] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  288.830338][ T7929] erofs: (device loop5): mounted with root inode @ nid 36.
[  289.900422][ T7911] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110
[  289.985224][ T5796] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  290.035364][ T7929] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  290.074983][ T7911] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110
[  290.085451][   T28] audit: type=1800 audit(1793930075.088:116): pid=7929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.351" name="file2" dev="loop5" ino=89 res=0 errno=0
[  290.412033][ T7938] Bluetooth: ISO socket layer initialized
[  294.687822][ T7927] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110
[  294.866620][ T7927] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32
[  294.972745][    T8] usb 5-1: USB disconnect, device number 3
[  295.222258][    T8] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  295.279542][    T8] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  295.921806][ T7975] tipc: Started in network mode
[  295.926804][ T7975] tipc: Node identity 7f000001, cluster identity 4711
[  295.934851][ T7975] tipc: New replicast peer: 127.0.0.1
[  295.941253][ T7975] tipc: Enabled bearer <udp:syz0>, priority 10
[  295.951884][ T7975] tipc: Disabling bearer <udp:syz0>
[  296.738402][    T8] ti_usb_3410_5052 5-1:2.0: device disconnected
[  298.071443][ T5796] Bluetooth: hci1: unexpected event for opcode 0x040d
[  298.491395][ T7984] loop4: detected capacity change from 0 to 2048
[  298.566567][ T7984] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  299.984988][ T7984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.254831][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.263774][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.272202][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.280606][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.288993][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.297426][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.305833][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.314187][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.322599][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.331025][ T7990] tc action pedit unable to extract header offset for header type (0x5)
[  300.339442][ T7990] 0: reclassify loop, rule prio 0, protocol 800
[  301.026774][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.372'.
[  301.077966][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.5.372'.
[  301.501661][   T28] audit: type=1800 audit(1793930086.498:117): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.374" name="idVendor" dev="configfs" ino=14016 res=0 errno=0
[  301.823299][ T8001] configfs-gadget.g1 gadget.0: HOST MAC e2:57:e7:8c:f9:c8
[  301.852018][ T8001] configfs-gadget.g1 gadget.0: MAC 4e:ff:73:16:d1:b9
[  301.911184][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.941977][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.244757][ T5903] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  302.476241][ T5903] usb 1-1: config 1 interface 2 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  302.509872][ T5903] usb 1-1: config 1 interface 2 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  302.525105][ T5903] usb 1-1: Dual-Role OTG device on HNP port
[  302.531503][ T5903] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  302.543839][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.563080][    C1] ------------[ cut here ]------------
[  302.569032][    C1] usb_ep_enable: ep133 (ep5in-int) has maxpacket 0
[  302.575877][    C1] WARNING: CPU: 1 PID: 5154 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440
[  302.585863][    C1] Modules linked in:
[  302.589747][    C1] CPU: 1 PID: 5154 Comm: udevd Not tainted syzkaller #0
[  302.596751][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  302.606798][    C1] RIP: 0010:usb_ep_enable+0x263/0x440
[  302.612317][    C1] Code: 49 8b 0e 48 c7 c0 e0 47 9a 8b 49 c7 c0 00 48 9a 8b 4c 0f 44 c0 48 c7 c7 a0 47 9a 8b 48 c7 c6 db 26 c9 8c 89 ea e8 bd 85 99 fa <0f> 0b e9 e1 fe ff ff e8 01 e1 cf fa 49 bc 00 00 00 00 00 fc ff df
[  302.631935][    C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046
[  302.638005][    C1] RAX: 0f4ea122097ce900 RBX: ffff88814135c1d0 RCX: ffff88807df85a00
[  302.645983][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  302.653946][    C1] RBP: 0000000000000085 R08: ffff8880b8d28c53 R09: 1ffff110171a518a
[  302.661919][    C1] R10: dffffc0000000000 R11: ffffed10171a518b R12: dffffc0000000000
[  302.669892][    C1] R13: ffff88814135c1fd R14: ffff88814135c1d8 R15: ffff88806375773a
[  302.677870][    C1] FS:  00007fb92d761880(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  302.686816][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  302.693403][    C1] CR2: 00007fc0bc2ef008 CR3: 000000001aecd000 CR4: 00000000003506e0
[  302.701373][    C1] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004
[  302.709422][    C1] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  302.717389][    C1] Call Trace:
[  302.720660][    C1]  <IRQ>
[  302.723536][    C1]  hidg_set_alt+0x12a/0xa10
[  302.728049][    C1]  set_config+0x735/0xff0
[  302.732390][    C1]  composite_setup+0x1df4/0x33a0
[  302.737338][    C1]  configfs_composite_setup+0xc7/0x100
[  302.742801][    C1]  dummy_timer+0x130c/0x35d0
[  302.747406][    C1]  ? mark_lock+0x94/0x320
[  302.751735][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[  302.756760][    C1]  ? lock_chain_count+0x20/0x20
[  302.761619][    C1]  ? dummy_free_streams+0x520/0x520
[  302.766818][    C1]  ? dummy_free_streams+0x520/0x520
[  302.772013][    C1]  __hrtimer_run_queues+0x525/0xc10
[  302.777222][    C1]  ? hrtimer_interrupt+0x980/0x980
[  302.782325][    C1]  ? read_tsc+0x9/0x20
[  302.786396][    C1]  hrtimer_run_softirq+0x177/0x290
[  302.791505][    C1]  handle_softirqs+0x27d/0x820
[  302.796263][    C1]  ? read_tsc+0x9/0x20
[  302.800350][    C1]  ? ktime_get+0x24b/0x280
[  302.804792][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  302.809588][    C1]  ? do_softirq+0x1a0/0x1a0
[  302.814105][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  302.819316][    C1]  __irq_exit_rcu+0xd3/0x190
[  302.823941][    C1]  ? irq_exit_rcu+0x20/0x20
[  302.828466][    C1]  irq_exit_rcu+0x9/0x20
[  302.832713][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  302.838363][    C1]  </IRQ>
[  302.841291][    C1]  <TASK>
[  302.844219][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  302.850207][    C1] RIP: 0010:___slab_alloc+0x3d0/0x12f0
[  302.855665][    C1] Code: 00 00 00 00 9c 8f 44 24 60 f7 44 24 60 00 02 00 00 8b 6c 24 10 0f 85 ed 02 00 00 41 f7 c6 00 02 00 00 74 01 fb 49 83 7d 18 00 <0f> 84 91 05 00 00 48 c7 44 24 60 00 00 00 00 9c 8f 44 24 60 4c 8b
[  302.875273][    C1] RSP: 0018:ffffc9000304f440 EFLAGS: 00000246
[  302.881344][    C1] RAX: 0f4ea122097ce900 RBX: ffff8880b8d40440 RCX: 0f4ea122097ce900
[  302.889312][    C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260
[  302.897277][    C1] RBP: 00000000ffffffff R08: ffffffff9222353f R09: 1ffffffff24446a7
[  302.905250][    C1] R10: dffffc0000000000 R11: fffffbfff24446a8 R12: 0000000000000001
[  302.913213][    C1] R13: ffff8880b8d40420 R14: 0000000000000246 R15: ffff88807df85a00
[  302.921194][    C1]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  302.926921][    C1]  __kmem_cache_alloc_node+0x122/0x260
[  302.932377][    C1]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  302.938106][    C1]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  302.943822][    C1]  __kmalloc+0xa7/0x240
[  302.947982][    C1]  tomoyo_realpath_from_path+0xe6/0x5c0
[  302.953532][    C1]  ? tomoyo_domain+0xd6/0x120
[  302.958212][    C1]  tomoyo_path_number_perm+0x248/0x5e0
[  302.963669][    C1]  ? tomoyo_path_number_perm+0x217/0x5e0
[  302.969305][    C1]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  302.974766][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  302.980773][    C1]  ? d_alloc_parallel+0x356/0x1590
[  302.985879][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[  302.990899][    C1]  ? hook_path_mknod+0x157/0x540
[  302.995843][    C1]  tomoyo_path_mknod+0x14b/0x1a0
[  303.000777][    C1]  ? hook_path_mkdir+0x20/0x20
[  303.005542][    C1]  ? tomoyo_path_symlink+0xf0/0xf0
[  303.010657][    C1]  security_path_mknod+0xf0/0x150
[  303.015682][    C1]  path_openat+0xb72/0x3270
[  303.020204][    C1]  ? do_sys_openat2+0xda/0x1d0
[  303.024975][    C1]  ? do_filp_open+0x430/0x430
[  303.029672][    C1]  do_filp_open+0x1f2/0x430
[  303.034186][    C1]  ? vfs_tmpfile+0x620/0x620
[  303.038797][    C1]  ? _raw_spin_unlock+0x28/0x40
[  303.043643][    C1]  ? alloc_fd+0x590/0x640
[  303.047976][    C1]  do_sys_openat2+0x134/0x1d0
[  303.052651][    C1]  ? __bpf_trace_rseq_ip_fixup+0x240/0x240
[  303.058459][    C1]  ? do_sys_open+0xe0/0xe0
[  303.062875][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  303.068858][    C1]  ? lock_chain_count+0x20/0x20
[  303.073711][    C1]  __x64_sys_openat+0x139/0x160
[  303.078564][    C1]  do_syscall_64+0x55/0xb0
[  303.082976][    C1]  ? clear_bhb_loop+0x40/0x90
[  303.087663][    C1]  ? clear_bhb_loop+0x40/0x90
[  303.092344][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  303.098240][    C1] RIP: 0033:0x7fb92d0a7407
[  303.102658][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  303.122260][    C1] RSP: 002b:00007ffe324629b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  303.130680][    C1] RAX: ffffffffffffffda RBX: 00007fb92d761880 RCX: 00007fb92d0a7407
[  303.138647][    C1] RDX: 0000000000080141 RSI: 0000561636a5602e RDI: ffffffffffffff9c
[  303.146634][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  303.154604][    C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  303.162568][    C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  303.170545][    C1]  </TASK>
[  303.173566][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  303.180831][    C1] CPU: 1 PID: 5154 Comm: udevd Not tainted syzkaller #0
[  303.187757][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  303.197804][    C1] Call Trace:
[  303.201075][    C1]  <IRQ>
[  303.203910][    C1]  dump_stack_lvl+0x18c/0x250
[  303.208591][    C1]  ? show_regs_print_info+0x20/0x20
[  303.213784][    C1]  ? load_image+0x420/0x420
[  303.218380][    C1]  panic+0x2ca/0x720
[  303.222320][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  303.226846][    C1]  __warn+0x2e0/0x470
[  303.230835][    C1]  ? usb_ep_enable+0x263/0x440
[  303.235605][    C1]  ? usb_ep_enable+0x263/0x440
[  303.240389][    C1]  report_bug+0x2be/0x4f0
[  303.244719][    C1]  ? usb_ep_enable+0x263/0x440
[  303.249485][    C1]  ? usb_ep_enable+0x263/0x440
[  303.254240][    C1]  ? usb_ep_enable+0x265/0x440
[  303.258994][    C1]  handle_bug+0xcf/0x120
[  303.263240][    C1]  exc_invalid_op+0x1a/0x50
[  303.267741][    C1]  asm_exc_invalid_op+0x1a/0x20
[  303.272592][    C1] RIP: 0010:usb_ep_enable+0x263/0x440
[  303.277956][    C1] Code: 49 8b 0e 48 c7 c0 e0 47 9a 8b 49 c7 c0 00 48 9a 8b 4c 0f 44 c0 48 c7 c7 a0 47 9a 8b 48 c7 c6 db 26 c9 8c 89 ea e8 bd 85 99 fa <0f> 0b e9 e1 fe ff ff e8 01 e1 cf fa 49 bc 00 00 00 00 00 fc ff df
[  303.297557][    C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046
[  303.303617][    C1] RAX: 0f4ea122097ce900 RBX: ffff88814135c1d0 RCX: ffff88807df85a00
[  303.311729][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  303.319695][    C1] RBP: 0000000000000085 R08: ffff8880b8d28c53 R09: 1ffff110171a518a
[  303.327667][    C1] R10: dffffc0000000000 R11: ffffed10171a518b R12: dffffc0000000000
[  303.335718][    C1] R13: ffff88814135c1fd R14: ffff88814135c1d8 R15: ffff88806375773a
[  303.343701][    C1]  hidg_set_alt+0x12a/0xa10
[  303.348210][    C1]  set_config+0x735/0xff0
[  303.352547][    C1]  composite_setup+0x1df4/0x33a0
[  303.357499][    C1]  configfs_composite_setup+0xc7/0x100
[  303.362963][    C1]  dummy_timer+0x130c/0x35d0
[  303.367564][    C1]  ? mark_lock+0x94/0x320
[  303.371892][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[  303.376912][    C1]  ? lock_chain_count+0x20/0x20
[  303.381855][    C1]  ? dummy_free_streams+0x520/0x520
[  303.387048][    C1]  ? dummy_free_streams+0x520/0x520
[  303.392239][    C1]  __hrtimer_run_queues+0x525/0xc10
[  303.397449][    C1]  ? hrtimer_interrupt+0x980/0x980
[  303.402550][    C1]  ? read_tsc+0x9/0x20
[  303.406617][    C1]  hrtimer_run_softirq+0x177/0x290
[  303.411722][    C1]  handle_softirqs+0x27d/0x820
[  303.416476][    C1]  ? read_tsc+0x9/0x20
[  303.420535][    C1]  ? ktime_get+0x24b/0x280
[  303.424945][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  303.429707][    C1]  ? do_softirq+0x1a0/0x1a0
[  303.434642][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  303.439852][    C1]  __irq_exit_rcu+0xd3/0x190
[  303.444439][    C1]  ? irq_exit_rcu+0x20/0x20
[  303.448937][    C1]  irq_exit_rcu+0x9/0x20
[  303.453170][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  303.458802][    C1]  </IRQ>
[  303.461721][    C1]  <TASK>
[  303.464646][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  303.470657][    C1] RIP: 0010:___slab_alloc+0x3d0/0x12f0
[  303.476111][    C1] Code: 00 00 00 00 9c 8f 44 24 60 f7 44 24 60 00 02 00 00 8b 6c 24 10 0f 85 ed 02 00 00 41 f7 c6 00 02 00 00 74 01 fb 49 83 7d 18 00 <0f> 84 91 05 00 00 48 c7 44 24 60 00 00 00 00 9c 8f 44 24 60 4c 8b
[  303.495704][    C1] RSP: 0018:ffffc9000304f440 EFLAGS: 00000246
[  303.501764][    C1] RAX: 0f4ea122097ce900 RBX: ffff8880b8d40440 RCX: 0f4ea122097ce900
[  303.509724][    C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260
[  303.517685][    C1] RBP: 00000000ffffffff R08: ffffffff9222353f R09: 1ffffffff24446a7
[  303.525655][    C1] R10: dffffc0000000000 R11: fffffbfff24446a8 R12: 0000000000000001
[  303.533618][    C1] R13: ffff8880b8d40420 R14: 0000000000000246 R15: ffff88807df85a00
[  303.541690][    C1]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  303.547425][    C1]  __kmem_cache_alloc_node+0x122/0x260
[  303.552872][    C1]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  303.558590][    C1]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  303.564303][    C1]  __kmalloc+0xa7/0x240
[  303.568459][    C1]  tomoyo_realpath_from_path+0xe6/0x5c0
[  303.574001][    C1]  ? tomoyo_domain+0xd6/0x120
[  303.578681][    C1]  tomoyo_path_number_perm+0x248/0x5e0
[  303.584132][    C1]  ? tomoyo_path_number_perm+0x217/0x5e0
[  303.589753][    C1]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  303.595200][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  303.601218][    C1]  ? d_alloc_parallel+0x356/0x1590
[  303.606325][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[  303.611336][    C1]  ? hook_path_mknod+0x157/0x540
[  303.616447][    C1]  tomoyo_path_mknod+0x14b/0x1a0
[  303.621397][    C1]  ? hook_path_mkdir+0x20/0x20
[  303.626157][    C1]  ? tomoyo_path_symlink+0xf0/0xf0
[  303.631268][    C1]  security_path_mknod+0xf0/0x150
[  303.636287][    C1]  path_openat+0xb72/0x3270
[  303.640800][    C1]  ? do_sys_openat2+0xda/0x1d0
[  303.645651][    C1]  ? do_filp_open+0x430/0x430
[  303.650351][    C1]  do_filp_open+0x1f2/0x430
[  303.654848][    C1]  ? vfs_tmpfile+0x620/0x620
[  303.659444][    C1]  ? _raw_spin_unlock+0x28/0x40
[  303.664291][    C1]  ? alloc_fd+0x590/0x640
[  303.668618][    C1]  do_sys_openat2+0x134/0x1d0
[  303.673291][    C1]  ? __bpf_trace_rseq_ip_fixup+0x240/0x240
[  303.679093][    C1]  ? do_sys_open+0xe0/0xe0
[  303.683498][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  303.689472][    C1]  ? lock_chain_count+0x20/0x20
[  303.694315][    C1]  __x64_sys_openat+0x139/0x160
[  303.699163][    C1]  do_syscall_64+0x55/0xb0
[  303.703572][    C1]  ? clear_bhb_loop+0x40/0x90
[  303.708242][    C1]  ? clear_bhb_loop+0x40/0x90
[  303.712911][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  303.718796][    C1] RIP: 0033:0x7fb92d0a7407
[  303.723199][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  303.742791][    C1] RSP: 002b:00007ffe324629b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  303.751192][    C1] RAX: ffffffffffffffda RBX: 00007fb92d761880 RCX: 00007fb92d0a7407
[  303.759155][    C1] RDX: 0000000000080141 RSI: 0000561636a5602e RDI: ffffffffffffff9c
[  303.767118][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  303.775076][    C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  303.783042][    C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  303.791021][    C1]  </TASK>
[  303.794180][    C1] Kernel Offset: disabled
[  303.798565][    C1] Rebooting in 86400 seconds..